Will I be flagged for suspension if ask SSN?

... for last 4 numbers of Social Security number?

Jeff

Heloo Jeff - Due to our PCI certification, we are required to deny the collection of credit card details (this includes but not limited to credit card numbers, expiry dates, cvv or credit card codes) on regular forms.

However, we have other PCI-compliant ways to do this. All you need to do is choose any of the payment processors available on our platform in order to integrate into your forms. You still won't be able to collect credit card details directly though.

If you only want to collect your customer's payment details and charge them at a later date, you can take advantage of a feature called "Payment Authorization". To learn more, kindly follow this guide on How to Enable Payment Authorization.

For Social Security Numbers, you can ask for it, but please ensure that you will comply with the following requirements below:

1. Add Terms of Use widget (for your users to read and agree). This will surely make your forms not to be considered as guilty of phishing activities

2. Add a Signature widget where your users sign and agree to provide such sensitive information.

3. If possible, change the email address on your profile to one that shows your business domain rather than the public email address you currently show.

If I only ask for the last four digits of SSN, I assume that the above requirements would not be necessary.  Yes?

I have consulted this with our backend team and they confirmed that if you are asking for only the last 4 digits, it can be allowed even without adding the widgets. So yes, no need to add it on the form.