Key takeaways
- E-cigarette and vape sales fall under MCC 5993 and most mainstream processors decline them, so you need a specialist high-risk acquirer.
- Age verification, PACT Act compliance, and clean chargeback ratios below ~0.9% are what keep an account open.
- Expect a rolling reserve on new accounts and negotiate its terms in writing before signing.
Payment processing for e-cigarette retailers is one of the trickiest corners of the high-risk world, and it catches a lot of shop owners off guard. You can build a great store, stock premium devices, and still get your merchant account frozen or closed within weeks because the acquiring bank never wanted vape volume in the first place. Understanding why that happens is the first step to setting up processing that actually lasts.
Why e-cigarettes are classified as high-risk
Vape and e-cig sales are legal, but card networks and banks weigh reputational and regulatory exposure, not just legality. Age-restricted products, shifting state and federal rules, and a history of higher chargebacks push the category into the high-risk bucket. Most retailers get coded under MCC 5993 (cigar stores and stands) or a related tobacco code, which flags the account immediately during underwriting.
That classification isn't a punishment. It's a signal to the bank that your account needs closer monitoring, tighter compliance, and usually a reserve. If a generic aggregator approved you instantly, that's a warning sign, not a win, because those accounts get swept and terminated in batches.
The PACT Act and age verification
The bigger operational issue is compliance. The PACT Act now covers ENDS (electronic nicotine delivery systems), which adds registration, reporting, and shipping restrictions. Your processor will expect to see real age-verification at checkout, not a checkbox. Work with your processor and counsel on:
- An age-verification provider that checks against public records at purchase
- Adult-signature delivery where required by carrier and state
- Clear product descriptors so cardholders recognize the charge
This overlaps closely with the broader vape category. Our walkthrough of how vape and e-cig payment processing actually works, explained simply covers the descriptor and shipping details in more depth.
Chargebacks and the thresholds that matter
Visa and Mastercard monitor chargeback ratios, and once you cross roughly 0.9% to 1% of transactions, you enter a monitoring program with fines and remediation deadlines. For age-restricted goods, "item not received" and "unauthorized" disputes are common, so prevention matters more here than in low-risk retail.
Good habits: send tracking, use clear billing descriptors, and deploy real fraud detection at checkout to screen out the card-testing and friendly-fraud that inflate your ratio. Keeping that number low is the single biggest factor in whether your account stays open.
Reserves, pricing, and what to expect
Nearly every new high-risk vape account carries a rolling reserve, often 5% to 10% of volume held for around 180 days. It's the bank's cushion against future chargebacks. You can't usually avoid it, but you can negotiate the percentage, the hold period, and whether it steps down as you build history.
On pricing, look closely at how markup is structured. Interchange-plus or pass-through pricing gives you visibility into the true cost versus the processor's margin, which matters when your effective rate is already higher than a low-risk merchant would pay.
Building a stable setup
Stability comes from redundancy and clean data. Consider these moves:
- Use a gateway that supports secure card capture so you're not touching raw card data
- Keep detailed order and shipping records to win disputes
- Maintain a second processing relationship if your volume justifies it, so one termination doesn't shut you down
Reducing PCI scope with hosted fields keeps card data off your servers and simplifies your annual compliance work, which underwriters view favorably.
What to ask a processor before you sign
Ask directly whether they underwrite e-cigarette volume in-house or route it to a sponsor bank, what the reserve terms are, and how they handle PACT-related documentation. A processor who understands the category will talk specifics; one who promises "guaranteed approval" or hides the reserve is setting you up for a sudden shutdown later.
The retailers who thrive treat compliance as part of the product, not an afterthought. Get your age verification, descriptors, and dispute handling right, choose an acquirer that genuinely supports the category, and your payment processing stops being the fragile part of the business.