Why did my payment processor shut down my vape store?

Almost all mainstream processors, including Stripe, PayPal, and Square, prohibit vape products in their acceptable use policies, and they enforce by detection rather than at signup. Once flagged, accounts are terminated and funds are commonly held for 90 to 180 days against refund risk. The fix is a dedicated high-risk merchant account with an acquirer that explicitly approves vape, not a new aggregator account that will meet the same fate.

What does the PACT Act mean for taking payments online?

The PACT Act itself governs registration, tax collection, reporting, and delivery rules rather than payments directly, but underwriters treat PACT compliance as a proxy for whether you are a survivable merchant. Expect to show ATF and state registrations, an age-verification system, and a compliant shipping setup before any vape-friendly acquirer approves you. Non-compliance discovered later is grounds for immediate termination.

Can I sell vape products by subscription?

Yes, and juice or pod replenishment subscriptions are a strong model in this vertical, but you are stacking subscription risk on top of vape risk. Disclose rebill terms at checkout, send pre-billing reminders, and make cancellation one click, because a chargeback spike on a 5993-coded MID escalates faster than it would for a mainstream merchant. Vault the cards independently so the program survives an acquirer change.

High-risk vertical

Vape & E-Cigarettes: payment processing without the fragility

Online vape sales are legal but operate under one of the heaviest compliance loads in ecommerce: the PACT Act's registration, tax, and shipping requirements, a federal minimum purchase age of 21, and FDA premarket authorization rules that leave most products in regulatory limbo. Processors see age-verification exposure, shifting flavor bans, and shipping chaos, and most simply refuse the category.

Why processors flag this vertical

The 2021 extension of the PACT Act to vaping products imposed registration with the ATF and state tax authorities, state-by-state excise tax collection, and adult-signature delivery requirements, and processors do not want liability adjacent to merchants who get this wrong.
Federal law sets the minimum purchase age for all tobacco and vapor products at 21, and selling to minors online is the single fastest way for a merchant, and by extension its acquirer, to attract enforcement.
Most vaping products on the market lack granted FDA premarket tobacco product authorization, meaning acquirers are underwriting products the FDA could order off the market.
USPS banned mailing vape products to consumers in 2021, and the resulting dependence on specialty carriers creates delivery failures that show up as disputes and complaints.
State and local flavor bans keep shifting, so a compliant catalog in one state is contraband in another, and geographic compliance failures land on the processing relationship.
Card brands and banks also weigh reputational exposure to youth-vaping controversies, which keeps mainstream acquirers out regardless of an individual merchant's compliance.

What drives chargebacks here

Shipping is the dominant driver: with USPS unavailable and few carriers accepting vape parcels, delayed or undelivered orders produce steady item-not-received disputes.
Adult-signature delivery requirements cause failed deliveries and returned packages, and customers dispute rather than wait for reshipment.
Coil, pod, and device failures generate quality disputes, since hardware defect rates in this category are meaningfully higher than general ecommerce.
Some cardholders dispute purchases to conceal them from family members, producing friendly fraud that is hard to fight without strong delivery evidence.
Subscription juice programs add forgotten-rebill disputes on top of the category's shipping-driven baseline.

Processing challenges to expect

PayPal, Stripe, Square, and nearly every aggregator prohibit vape and e-cigarette sales outright, so there is no on-ramp through mainstream PSPs at all.
Underwriters require proof of PACT Act registration, a functioning age-verification vendor integration at checkout, and state tax compliance before they will even price the account.
Vape merchants are typically coded under MCC 5993 for cigar stores and stands, a designated high-risk code that carries card-brand registration and monitoring obligations.
Reserves of 10 percent and higher are common because acquirers price in the risk of sudden regulatory change stranding refund liabilities.
The pool of vape-friendly acquirers is small enough that pricing is poor and merchants have little leverage, which makes redundancy planning more important, not less.

The infrastructure playbook

Integrate a real age-verification provider that checks identity against public records at checkout, not just a birth-date checkbox, because underwriters check for it and its absence is an automatic decline.
Spread volume across at least two vape-approved acquirers from the start, since the approved-acquirer pool is thin and a single termination can leave you with no fallback that understands the category.
Vault cards independently of any one gateway so subscription juice programs and repeat buyers survive a processor change without re-collecting credentials.
Invest in delivery evidence: adult-signature confirmation records and carrier tracking tied to each transaction are what win the item-not-received disputes that dominate this vertical.
Wire pre-chargeback alert coverage from both major networks into your support queue and resolve shipping complaints with instant refunds, because your chargeback headroom is smaller on a high-risk MCC than it would be in general retail.
Keep your PACT Act filings, state tax registrations, and age-verification vendor contract in a ready underwriting pack, since re-approval speed is your real disaster-recovery plan in this category.

Frequently asked questions

Why did my payment processor shut down my vape store?: Almost all mainstream processors, including Stripe, PayPal, and Square, prohibit vape products in their acceptable use policies, and they enforce by detection rather than at signup. Once flagged, accounts are terminated and funds are commonly held for 90 to 180 days against refund risk. The fix is a dedicated high-risk merchant account with an acquirer that explicitly approves vape, not a new aggregator account that will meet the same fate.
What does the PACT Act mean for taking payments online?: The PACT Act itself governs registration, tax collection, reporting, and delivery rules rather than payments directly, but underwriters treat PACT compliance as a proxy for whether you are a survivable merchant. Expect to show ATF and state registrations, an age-verification system, and a compliant shipping setup before any vape-friendly acquirer approves you. Non-compliance discovered later is grounds for immediate termination.
Can I sell vape products by subscription?: Yes, and juice or pod replenishment subscriptions are a strong model in this vertical, but you are stacking subscription risk on top of vape risk. Disclose rebill terms at checkout, send pre-billing reminders, and make cancellation one click, because a chargeback spike on a 5993-coded MID escalates faster than it would for a mainstream merchant. Vault the cards independently so the program survives an acquirer change.

Related verticals