Key takeaways
- CBD approval hinges on COAs, sub-0.3% THC proof, and a website free of medical claims — not on the product itself.
- Mainstream aggregators prohibit CBD, so you need a specialized acquirer that banks hemp on purpose.
- Expect a possible rolling reserve and tight chargeback monitoring, and keep your ratio well under network limits.
Understanding how CBD companies get approved for payments starts with a reframe: underwriters aren't judging whether CBD works, they're judging your documentation, your claims, and your risk to the bank. Hemp-derived CBD is federally legal under the 2018 Farm Bill at under 0.3% THC, but it remains a high-risk category because of FDA ambiguity and shifting state rules. Approval is very achievable — it just runs through a specialized process rather than a one-click aggregator.
Why the usual processors won't work
Stripe, Square, and PayPal all prohibit CBD in their terms. They may let you start processing, then freeze funds when they detect the category — a worst-case outcome that can strand your revenue. Getting approved properly means starting with an acquirer that knowingly banks hemp, so you're never at risk of a surprise shutdown.
The documentation that drives approval
Underwriting is paperwork-first. Have this ready:
- Current COAs from an accredited lab for every SKU, showing sub-0.3% THC.
- A compliant website: visible lab results, ingredient lists, and no disease or "cure" claims.
- Business registration, EIN, and processing history or bank statements if available.
- Clear refund, shipping, and (if applicable) subscription terms.
Clean, current documentation is the single biggest factor in a fast approval.
Claims are what get you declined
The fastest way to fail underwriting — or get terminated later — is medical language. "Treats anxiety," "cures pain," or "FDA-approved" turn your product into an unapproved drug in the eyes of regulators. Keep claims to general wellness and let your COAs speak. Underwriters read sites, so fix the copy before you apply.
Getting coded correctly
You'll be coded as a CBD/nutraceutical-type merchant. Don't let anyone talk you into a mismatched MCC to look lower-risk — that's transaction laundering, and it ends in termination and the MATCH list. Honest coding with a hemp-friendly acquirer is the stable path. For the full landscape, our guide to high-risk payment processing is a useful companion.
Reserves and pricing to expect
New CBD accounts often carry a rolling reserve — commonly 5–10% held for 90–180 days — that eases as you build history. Ask for transparent interchange-plus pricing so you can see true costs instead of a padded blended rate. A clear picture of how high-risk approval actually works helps you negotiate from an informed position.
Staying approved: chargebacks and PCI
Approval is the start; staying on requires keeping your chargeback ratio under the roughly 0.9%–1% network thresholds. CBD disputes cluster around subscription confusion and "not as described," so clear billing descriptors, honest product pages, and easy cancellation matter. Screen orders with fraud detection, and keep card data off your servers using tokenization to hold down PCI scope.
CBD approval isn't a mystery — it's a checklist. Tighten your lab documentation, clean up your claims, apply through an acquirer that wants hemp business, and protect your chargeback ratio from day one. Do those four things and you'll not only get approved, you'll build the track record that lowers your reserve and steadies your processing over time.