Fuel and convenience retail merchants must meet the new PCI DSS v4.0.1 requirements for cybersecurity, IT policies and procedures, and card data environment (CDE) system configurations. Merchants who do not upgrade by the March 2025 deadline run the risk of significant penalties from their payment processors, inability to accept card transactions, or full assumption of liability for fraudulent card transactions.