CBD Payment Processing: What Banks Allow It in 2026?

CBD and hemp products occupy a unique space in payment processing: federally legal, state-by-state inconsistent, and historically declined by every major aggregator. Stripe, Square, and PayPal all maintain blanket prohibitions on CBD. PayPal Braintree will sometimes accept hemp topicals but rarely ingestibles. Shopify Payments (which runs on Stripe) inherits the prohibition.

Despite this, CBD is a multi-billion-dollar industry processing cards every day. Here's how that actually works, what banks underwrite it, and what to expect when you apply.

The regulatory state in 2026

The 2018 Farm Bill federally legalized hemp-derived CBD products containing less than 0.3% Delta-9 THC. This created a regulatory framework but left key questions to the FDA and individual states. Confirm current FDA guidance and your own state's rules before relying on any of the following:

• Topicals (creams, lotions, balms) with <0.3% THC are generally accepted by acquirers and the most boardable category.
• Ingestibles (oils, tinctures, gummies, capsules) with <0.3% THC are accepted by a smaller set of high-risk acquirers; FDA continues to assert these are unapproved food additives but enforcement is limited.
• Smokables (flower, pre-rolls, vape carts) with <0.3% THC are the hardest to board; some specialized acquirers will accept, generally with higher reserves.
• Delta-8 and other intoxicating cannabinoids derived from hemp sit in a regulatory gray zone — federally legal under the Farm Bill text, but actively being restricted at the state level. Acquirer acceptance varies dramatically.
• Marijuana / Delta-9 THC products from cannabis (not hemp) remain federally illegal and not processable on card rails. Cash, ACH workarounds, and crypto are the only options.

Which banks board CBD

There is no published list, and the answer changes as banks enter and exit the vertical. The practical landscape:

Domestic US acquirers (limited): A small set of US-based acquirers will board CBD topicals and ingestibles with appropriate documentation. Expect: discount rates 4.0–5.5%, no rolling reserve to 5% rolling reserve, T+2 settlement.

European acquirers (broader): Several EU-licensed acquirers are comfortable with the full CBD product range including smokables, provided the merchant is properly licensed in its home jurisdiction. Expect: discount rates 4.5–6.0%, 5–10% rolling reserve, T+3 to T+5 settlement.

Offshore acquirers (broadest): For Delta-8, smokables, and other gray-zone products, offshore acquirers (Caribbean, Asia-Pacific) handle the highest-risk CBD subverticals. Expect: discount rates 5.5–7.5%, 10% rolling reserve, T+5 to T+7 settlement.

Avoid any processor that promises low-risk-style rates (2.9%) for CBD. They are either misrepresenting your business at boarding (you will be terminated and possibly MATCH-listed within months) or routing through an aggregator that will collapse the first time you face a chargeback.

What underwriting requires

A well-prepared CBD merchant account application includes:

1. Certificate of Analysis (COA) for every product — current, from an ISO/IEC 17025 accredited lab, showing <0.3% Delta-9 THC.
2. State-level business licensing — verify your state requires a hemp processor or retailer license and obtain it.
3. Federal hemp grower/handler registration if you process from raw hemp.
4. Compliant marketing review — no medical claims, no curative claims, FDA-compliant labeling.
5. Age-gate verification on your website (most acquirers want 21+ even though federal law doesn't require it for non-smokable CBD).
6. 6–12 months of processing statements from your previous processor (or alternative documentation if you're pre-launch).
7. Refund policy and shipping policy clearly published on the website.
8. Beneficial ownership documents for all owners with 25%+ stake.

The single highest-leverage item is the COA library. Acquirers' risk teams will pick three random products from your catalog and ask for their COAs. If you can produce them quickly with full chain of custody, your application moves forward. If you can't, you get declined regardless of business quality.

What gets you terminated

The most common reasons CBD merchant accounts get terminated post-boarding:

• A product slips above 0.3% Delta-9 THC. Random batch testing matters. Build a per-batch COA workflow.
• A medical claim appears on the website or in marketing. Acquirers monitor merchant marketing; "cures anxiety" gets you terminated faster than chargebacks would.
• Selling to states with explicit prohibitions. Some states restrict CBD differently than others. Geo-fence your shipping accordingly.
• Chargeback ratio above 1%. See our chargeback guide.
• Marketing into prohibited age groups. Even if your customers are adults, marketing that appears youth-targeted (cartoon characters, candy-like packaging) gets flagged.

The economics for a mid-sized CBD brand

A mid-sized CBD brand processing $500,000/month should expect:

• Effective rate (discount + interchange + fees): 4.5–6.0% all-in.
• Rolling reserve: 5–10% for 6 months, then typically reducible after clean history.
• Setup fee: $0–$1,500.
• Monthly minimum: $50–$250.
• Chargeback fee: $25–$45.
• Settlement timing: T+2 to T+5.

That 4.5–6.0% effective rate feels high compared to Stripe's nominal 2.9% — but the comparison is moot because Stripe won't board you. The realistic comparison is between high-risk processing and not processing card payments at all.

Delta-8 and the gray zone

Delta-8 THC products are technically Farm Bill compliant (hemp-derived) but produce intoxicating effects. States have been restricting Delta-8 steadily. For Delta-8 merchants, the processing options are narrower:

• Most US acquirers decline Delta-8 entirely.
• Some European acquirers accept with strict KYC and state-by-state shipping restrictions.
• Offshore acquirers are the most common option.

Expect higher rates (6.0–7.5%) and higher reserves (10–15%) for Delta-8 specifically.

Smokables (flower, pre-rolls, vape)

The hardest CBD sub-vertical to process. Card brands have specific restrictions on tobacco-related MCCs (5993) that affect smokable hemp processing. The path here is almost always offshore acquiring with a specialized ISO.

What this means for your brand

If you're a CBD or hemp brand, the practical takeaway is: don't bother applying to Stripe, Square, PayPal, or Shopify Payments. Go directly to a high-risk specialist. The rates are higher, the reserve is real, but you'll process consistently for years if you keep your COAs current and your marketing compliant.

---

BoazPay's CBD and Hemp merchant accounts support topicals, ingestibles, smokables, and Delta-8 with appropriate documentation. We work with both domestic and offshore acquiring banks to find the right fit for your product mix. Apply for a Merchant Account to get a decision on your business.