PCI DSS v4.0.1 requires online stores to perform PCI website scan
As a PSP or online store, according to the latest PCI DSS v4.0.1 standard, you must be able to prove that scripts in your shopping cart that are also loaded in customers' browsers were intentionally inserted by you and not unauthorizedly modified by “third parties. As of March 31, 2025, these security requirements are mandatory. A periodic website scan provided with PCI reporting will help you meet this obligation. Time to take action!
UPDATE