CBD Merchant Account: Best CBD Payment Processing Options

The short answer

Yes, a CBD store can get a merchant account and take credit cards, which is the single biggest operational difference between hemp retail and licensed cannabis retail. Compliant CBD is not a Schedule I product, so mainstream processors will underwrite it as elevated risk rather than refuse it outright. Square runs a dedicated CBD program for hemp products testing under 0.3% THC. Stripe lists cannabidiol under restricted businesses, permitted where products contain only negligible THC under local limits, while prohibiting cannabis products and dispensaries entirely.

The thing to understand before you compare rates is that none of those approvals are permanent, and the federal ground they stand on is scheduled to move on November 12, 2026. Choose the account that is easiest to leave, not the one with the lowest headline number.

Who actually underwrites CBD, and on what terms

Every provider draws its line in a slightly different place, and the differences are not cosmetic. Square publishes a CBD program that US sellers apply to, covering hemp and hemp-derived CBD under 0.3% THC, with marijuana and marijuana-derived products, anything over that threshold, and health claims excluded. Hemp flower is reported to be accepted only where you supply lab certification of the THC level and ingredients. Applying matters: a Square account opened as generic retail is not an approved CBD account, and selling CBD on one is how merchants get frozen.

Stripe treats the same category as restricted rather than prohibited. Its published list bars cannabis products, cannabis dispensaries and CBD products with THC above the applicable local legal limit, including CBD edibles, while allowing CBD containing only negligible amounts of THC per local limits subject to extra diligence.

Shopify is where most CBD sellers get confused, and the reason is structural. Shopify does not publish its own prohibited-business list for Shopify Payments. Its US payments terms state that prohibited and restricted categories come from each payment processor and point merchants to a processor list, and that list names Stripe and PayPal as the US processors behind Shopify Payments. So for a US CBD seller on Shopify Payments, the operative policy is Stripe policy, read through Shopify. If a support agent and an underwriter appear to disagree, the underwriter is the one holding your settlement.

Provider terms above are summarized from each company's own published policies, reviewed in September 2026, and every one of them is applied case by case at underwriting. We are a directory for state-licensed dispensaries and sell no payment product, so we have nothing to gain from which name you pick. Nothing here is legal or financial advice.

What does a CBD merchant account cost?

Ask for four numbers and treat any quote that gives you only the first as incomplete: the effective rate on your average ticket, whether a rolling reserve applies and for how long, the funding delay before settled money reaches your bank, and the notice period if the provider exits the category. Elevated-risk underwriting shows up in all four, not just the rate, and the reserve is usually the one that hurts a small retailer's cash position most.

We are deliberately not publishing a single percentage here. CBD pricing is quoted per merchant on your catalog, your chargeback history and your volume, and the ranges circulating online are mostly published by brokers earning a referral on the account. A number you cannot check is worse than no number. What you can check is the structure, and the structure is where the real cost lives.

The software side is comparatively simple, because a hemp store is buying ordinary retail technology. Our guide to what a CBD POS system actually needs, and why it is not a cannabis POS walks through why paying dispensary software prices means funding a state traceability integration you are not permitted to use.

Why can dispensaries not do this at all?

Because the product is federally controlled and the card networks apply their own rules on top of the law. Visa and Mastercard prohibit licensed cannabis retail, so a state-licensed THC dispensary has no compliant path to card acceptance regardless of how legal it is in its own state. That pushes dispensaries onto cannabis payment processing alternatives such as point of banking, PIN debit and pay by bank ACH, each with its own per-transaction economics.

It is worth knowing how fragile those alternatives are, because it explains why hemp retailers should not get complacent about holding a card account. In March 2026 more than a thousand cashless ATM terminal IDs were switched off, and roughly six thousand more followed on June 15, 2026. No regulator flipped that switch. A sponsor bank and processor partner exited, and thousands of stores lost their payment rail overnight. We covered what happened in the cashless ATM shutdowns and what stores did next, and the lesson transfers directly: the defense against a counterparty exit is a second rail already running, not better paperwork.

What happens to CBD payments on November 12, 2026?

The federal definition of hemp narrows, and it changes what is being measured. The Continuing Appropriations and Extensions Act of 2026, Public Law 119-37, was signed on November 12, 2025 and takes effect one year later. Compliance stops being judged on delta-9 THC as a share of dry weight and becomes a total THC test that includes THCA adjusted for decarboxylation plus delta-8, delta-10 and other isomers, capped at 0.4 milligrams of total THC per container in a finished product. Cannabinoids synthesized outside the plant are excluded at any concentration.

Those two thresholds are not the same kind of number, and that is what catches merchants out. A percentage is a proportion of weight. The new cap is an absolute quantity in the whole container. A 3.5 gram package of hemp flower at 0.29% THC sits comfortably under the first line and carries roughly 10 milligrams of THC, about 25 times the second. Nothing about the product changes and no processor has to update a policy for it to cross from one side to the other. The US Hemp Roundtable estimates more than 90% of non-intoxicating CBD products currently on shelves would fall outside the amended definition.

The date itself is genuinely unsettled and any article stating it flatly is out of date. As of early September 2026 the controlling effective date remains November 12, 2026. The Senate passed a funding bill on August 8, 2026 that would push most of the restrictions to December 11, 2026, but the House has not agreed and it has not been signed, so it is a proposal rather than law. Congress is widely expected to return to it this month.

What should a CBD retailer do before the deadline?

Three things, none of which require a lawyer to start.

First, run the arithmetic on your own catalog. Take each SKU's certificate of analysis, convert the reported THC into milligrams per container rather than a percentage, and sort the list. You will usually find the exposure is concentrated in a handful of high-turnover products rather than spread evenly, which makes the decision much smaller than it looks.

Second, work out how fast the exposed SKUs actually sell, because what matters is not what is on the shelf today but what will still be there in November. That is an ordinary inventory forecasting and sell-through question rather than a legal one, and answering it early is the difference between selling stock down in an orderly way and writing it off.

Third, get your account portable. Avoid multi-year processor lock-ins signed this quarter, decline hardware bundled into a long term, and confirm in writing that you can export your full transaction, customer and inventory history yourself without asking anyone. If a provider will not put the exit terms in writing before you sign, that is the answer to the question you were asking about them.

Common questions

Can you take credit cards for CBD?

Generally yes, for compliant hemp-derived CBD under the applicable THC limit, and this is the clearest difference between hemp retail and licensed cannabis retail. Approval is per merchant and depends on your exact product list, your certificates of analysis and the claims on your website. Square runs a dedicated CBD program and Stripe treats CBD as a restricted rather than prohibited business.

Why do CBD merchant accounts get shut down?

Usually one of three reasons: a product in the catalog that the underwriter never saw and would not have approved, health claims on the site or packaging, or a category-level policy change at the sponsor bank that has nothing to do with your store. The first two are in your control, the third is not, which is why a second rail matters.

Do I need a high-risk merchant account for CBD?

Not always. Mainstream providers with a defined CBD program will take non-intoxicating hemp products, and their pricing is usually better than a specialist acquirer. Move to a specialist when your catalog includes categories the mainstream declines, when your volume or chargeback profile puts you outside standard underwriting, or when you want a second account running as a backup.

Does a CBD store need a cannabis POS system?

No, in almost every case. Cannabis POS software is priced around a live integration with a state seed-to-sale system such as Metrc, and that obligation attaches to a state cannabis license. A hemp retailer has no license, no state inventory account and no package tags, so the integration cannot be switched on. The exception is a state that has moved intoxicating hemp into its licensed cannabis channel, as Nevada and Rhode Island have done.

Can you sell CBD on Shopify?

On the platform, generally yes. Shopify Payments is the part that needs checking, and Shopify does not publish its own prohibited-business list for it, deferring instead to the underlying processor. For US merchants that processor list names Stripe and PayPal, so read those policies against your actual catalog before assuming you are covered.