Does PCI DSS apply to "hot cards," fraudulent or invalid card numbers, or cancelled cards?
If the issuer confirms the cards are inactive or disabled, the PANs (Primary Account Numbers) no longer pose fraud risk to the payment system. The PCI DSS would not apply in these cases. If however, the PAN is later reactivated, PCI DSS will again apply.