Can I use a credit card service that isn't PCI compliant?
skennedy: Why would you open yourself up to that level of liability? Full PCI compliance is a standard that will be used by businesses to determine if your product is a viable solution. If your solution breaks PCI compliance at any point, you open yourself up to big problems when (not if) something goes wrong.Also, why reinvent the wheel? PayPal and Google Checkout are major vendors with PCI certifications who handle the entire transaction process. Why not use them to handle all the risk? You get a transaction id and collect your money through them. Never touching the sensitive financial information.