As of April 1, 2025, all merchants handling credit card payments must comply with PCI DSS 4.0. Here’s what’s changed — and how small businesses can stay secure and avoid fines.