Levels are determined by the card schemes individually but calculated by your acquiring bank.

The tables below summarises the levels and the reporting requirements for each card scheme. What’s important to note is that normally if you’re considered as a level 1 merchant by one brand, all the other brands will consider that as your designation even if you don’t meet that threshold. 

You may also require a higher level of assurance if you’ve had an account data compromise or you’re considered as a high-risk merchant.

American Express
Merchant Level # Annual Transactions Payment Channel Reporting
Level 1 > 2.5 Million All Onsite Assessment (ROC)
Level 2 50k to 2.5 Million All Self-Assessment (SAQ)
Level 3 10k to 50k All Self-Assessment (SAQ)
Level 4 < 10k All Self-Assessment (SAQ)
Discover
Merchant Level # Annual Transactions Payment Channel Reporting
Level 1 > 6 Million All Onsite Assessment (ROC)
Level 2 1 Million to 6 Million All Self-Assessment (SAQ)
Level 2 < 1 Million All Self-Assessment (SAQ)
JCB
Merchant Level # Annual Transactions Payment Channel Reporting
Level 1 > 1 Million All Onsite Assessment (ROC)
Level 2 < 1 Million All Self-Assessment (SAQ)
Mastercard
Merchant Level # Annual Transactions Payment Channel Reporting
Level 1 > 6 Million All Onsite Assessment (ROC)
Level 2 1 Million to 6 Million All Onsite Assessment (ROC)
or
SAQ completed by ISA
Level 3 20k to 1 Million
AND
< 20k e-comm
All Self-Assessment (SAQ)
Level 4 < 20k All Self-Assessment (SAQ)
Visa
Merchant Level # Annual Transactions Payment Channel Reporting
Level 1 > 6 Million All Onsite Assessment (ROC)
Level 2 1 Million to 2.5 Million All Self-Assessment (SAQ)
Level 3 20k to 1Million e-commerce Self-Assessment (SAQ)
Level 4 < 20k e-comm up to 1 Million All Self-Assessment (SAQ)