CBD & Hemp Products: payment processing without the fragility

Why processors flag this vertical

• The 2018 Farm Bill legalized hemp-derived CBD federally, but the FDA's position that CBD cannot lawfully be marketed as a dietary supplement or added to food creates a regulatory gray zone that compliance departments refuse to underwrite casually.
• Card-brand rules distinguish sharply between product types: topicals with clean lab results can often be registered and processed domestically, while ingestible CBD remains effectively off-limits on many US acquiring relationships.
• State law is a patchwork, and newer intoxicating hemp derivatives such as delta-8 THC have prompted state bans and enforcement that make acquirers fear the whole hemp category.
• THC content is a chemistry problem for underwriters: a batch testing above 0.3 percent delta-9 THC turns a legal product into a controlled substance, so acquirers require ongoing third-party certificates of analysis.
• Several major acquirers have exited the category entirely in the past, sometimes terminating whole CBD portfolios at once, which taught the industry that CBD processing can vanish overnight.
• Health claims are a second regulatory front: the FDA and FTC have sent warning letters to CBD sellers making disease claims, and a warning letter is a common trigger for account termination.

What drives chargebacks here

• Customers underwhelmed by subjective effects like sleep or anxiety relief dispute charges instead of requesting refunds, since results are hard to feel and easy to doubt.
• CBD subscription programs generate forgotten-rebill disputes just like any continuity offer, compounded when the descriptor does not match the storefront brand.
• Shipping delays and carrier refusals on hemp products lead to item-not-received disputes, especially for merchants juggling carriers with inconsistent hemp policies.
• Some cardholders dispute CBD purchases out of privacy concern or household conflict, claiming they do not recognize a charge they actually made.
• Price points on premium tinctures and pet CBD are high enough that a single dissatisfied order often goes straight to a dispute.

Processing challenges to expect

• Stripe and PayPal prohibit or heavily restrict CBD; Square runs a dedicated CBD program, but it is US-only, category-limited, and priced above its standard rates.
• Underwriting requires certificates of analysis from ISO-accredited labs for every SKU, proof of hemp sourcing, and marketing pages free of medical claims, and approvals are SKU-specific rather than blanket.
• MCC assignment is messy: CBD merchants get coded under 5912 for drug stores or 5499 for miscellaneous food stores depending on product mix, and a miscoded MCC is grounds for card-brand fines or termination.
• Ingestible CBD frequently cannot be placed with US acquirers at all, pushing merchants toward EU or other offshore acquiring with higher rates, rolling reserves, and settlement friction.
• Banking instability compounds processing instability, since some sponsor banks refuse hemp deposits, and a merchant can lose settlement banking even while the MID technically survives.

The infrastructure playbook

• Split topicals and ingestibles onto separate MIDs and, where necessary, separate acquirers, because topical-only volume can often stay domestic while ingestibles may need an offshore home.
• Use a processor-agnostic token vault so your subscription file survives the acquirer exits that have repeatedly hit this category; CBD merchants who lost their gateway-locked tokens lost their recurring revenue with them.
• Maintain a current compliance pack, including per-SKU certificates of analysis, supplier agreements, and archived marketing pages, so you can re-underwrite with a backup acquirer in days instead of weeks.
• Keep a secondary acquiring relationship live with real transactions flowing, even at low volume, since CBD is the vertical where backup processing is most likely to actually be needed.
• Enroll in Ethoca alerts and Verifi CDRN, and set descriptors to the consumer-facing brand with a support phone number, since unrecognized-charge disputes are a leading loss source in CBD.
• If you run offshore acquiring for ingestibles, model the true cost including FX, cross-border assessments, and rolling reserve drag, and route only the volume that genuinely cannot process domestically.

Frequently asked questions

Is it legal to sell CBD online, and why do processors still refuse it?

Hemp-derived CBD with no more than 0.3 percent delta-9 THC is federally legal under the 2018 Farm Bill. Processors refuse it because the FDA still says CBD cannot lawfully be sold as a dietary supplement or food additive, state rules conflict, and card-brand policies on ingestibles are restrictive. Legality and processability are simply different questions in this vertical.

Can I process CBD sales through Stripe, PayPal, or Shopify Payments?

No. All three prohibit or restrict CBD, and merchants who slip through get terminated with funds held once the category is detected. Square has a specific US CBD program worth considering at small scale, but growing merchants need a dedicated high-risk merchant account with a CBD-approved acquirer, and possibly an offshore option for ingestibles.

What documents do I need to get a CBD merchant account approved?

Expect to provide third-party certificates of analysis for every product showing delta-9 THC at or below 0.3 percent, hemp sourcing documentation, corporate and banking records, and your full website including checkout and claims pages. Underwriters also look for a visible refund policy and the absence of disease claims. Having this pack assembled before you apply cuts approval time dramatically.

Related verticals

• Kratom
• Vape & E-Cigarettes
• Nutraceuticals & Supplements
• All high-risk industries