Key takeaways
- Cannabis is legal in California but federally restricted, and Visa and Mastercard do not permit it; no processor can legitimately run cannabis sales on cards.
- Cashless ATM and miscoded workarounds have been shut down by the networks and carry real risk for the dispensary and its bank.
- Ancillary, hemp and CBD businesses are a different category with real, if high-risk, processing options.
For cannabis dispensaries, payment processing in San Jose and Silicon Valley is the most-asked and least-honestly-answered question in the local industry. San Jose licenses a limited number of retail dispensaries, Santa Clara County and the surrounding cities each have their own rules, and the state Department of Cannabis Control oversees the whole thing. All of that is state-legal. None of it changes the fact that cannabis remains federally restricted, and the card networks that every merchant account ultimately depends on do not permit cannabis transactions. Flux does not process cannabis sales, and this article explains why nobody legitimately can, what actually exists, and where the real opportunities sit.
Why cards are off the table
Visa and Mastercard rules prohibit transactions for goods that are illegal under federal law in the jurisdiction of the acquirer. Because every acquiring bank in the United States operates under federal banking law, cannabis sales cannot be processed through the card networks, regardless of state legality. The banks that sponsor processors face federal money-laundering exposure if they knowingly settle cannabis transactions, and their regulators examine for it. This is not a policy any processor can waive. A company that says it can run your dispensary on Visa is either miscoding you or planning to.
The workarounds and why they fail
- Cashless ATM: a terminal that processes a debit transaction as an ATM cash withdrawal and rounds up to the nearest $5 or $10. Networks explicitly identified this as a prohibited miscoding in 2021 and 2022 and cut off the providers. Dispensaries using it have had funds frozen and terminals disabled mid-day.
- Miscoded MCC: running sales as a wellness clinic, a smoke shop, or a gift store. When the acquirer discovers it, the account is terminated, funds can be held, and the business can be placed on the MATCH list, which blocks future merchant accounts for years.
- Third-party front companies: a related entity holds the account and passes money through. This is the same misrepresentation with an extra layer and additional exposure for whoever signs.
Each of these puts the dispensary's license, bank account and owners at risk for a convenience the customer barely notices.
What actually exists
Cash remains the primary rail, with the security and counting costs that implies. Some dispensaries use PIN-debit programs operated by companies that claim compliance under specific structures; their status has changed repeatedly and you should confirm the current position with your counsel and the provider's sponsor bank, not with a sales rep. Bank-to-bank ACH programs, where the customer links a bank account and authorizes a transfer, exist through cannabis-specialized financial services firms operating under state-chartered banks and credit unions that have chosen to bank the industry under federal guidance. Those are not card processing, and they carry their own compliance load. Stablecoin acceptance is also being explored by some operators; it settles instantly to a merchant wallet without a card network, but the same federal restriction and banking questions apply when funds move into the traditional system, so treat it as a legal question first.
Ancillary businesses are a different conversation
Silicon Valley's cannabis economy includes a lot of businesses that never touch the plant: software and compliance tools, packaging and labeling, hydroponics and grow-equipment retailers, security and cash-logistics firms, consulting, staffing, marketing, and glassware and accessory shops. These are legal to process, but many acquirers treat them as high-risk because of the industry adjacency. Expect a fuller underwriting file, possibly a reserve, and a review of your website to confirm you do not sell cannabis. The industries overview describes how high-risk categories are handled; ancillary cannabis businesses sit squarely in that bucket.
Hemp and CBD under AB 45
Hemp-derived products are federally distinct from cannabis, and California's AB 45 sets the state framework for hemp and CBD in foods, beverages, cosmetics and supplements, including labeling and THC limits. Intoxicating hemp products have faced further restriction; check the current rule. Compliant CBD retailers and brands can obtain card processing, but the category is high-risk: expect scrutiny of product claims, lab testing, and marketing, a possible rolling reserve, and close attention to chargebacks against the roughly 0.9 to 1 percent network threshold. Card-not-present CBD sellers should run fraud screening and use hosted checkout fields to keep card data off their own systems.
What a dispensary should ask any payment vendor
- Which bank sponsors this program, and does that bank know the merchants are cannabis retailers?
- Is this a card-network transaction? If yes, how is it permitted under network rules? (It is not.)
- What happened to your merchants when the networks acted against cashless ATMs?
- What is your written policy on funds holds and account closure?
- Can my counsel review the agreement and the compliance opinion?
San Jose dispensaries are running licensed, taxed, inspected businesses, and it is frustrating that the payment rails have not caught up. Until federal law or network rules change, the responsible answer is to use cash and properly structured bank-based programs, to keep every ancillary entity clean and separately processed, and to walk away from anyone offering card acceptance for the plant itself.
Ready to get set up with Flux?
Cards, ACH, and stablecoins in one platform, with volume-based pricing. No setup fees or contracts.
Get Started