A merchant is required to retain legible copies of credit card receipts for up to 18 months in order to satisfy any disputes/chargebacks. These receipts should be kept in a locked file cabinet or safe. After the 18 month period has expired, the credit card receipts should be shredded in order to protect cardholder information (refer to PCI DSS Requirement 9.1).
