The largest risk of noncompliance for merchants is the increased risk of susceptibility to a data breach. The average cost to recuperate from a data breach is $215 per compromised card number. Worse, 70% of small- to medium-sized businesses never recover from a data breach.
There can be large fines involved in a breach as well. PCI compliance doesn’t entirely neutralize this threat. However, It educates merchants on industry best practices, showing them the active steps to take for the best breach prevention. If a merchant is found to be in noncompliance, costly fees could be levied against them.