Key takeaways
- Hemp-derived CBD under 0.3% THC is bankable; marijuana-derived or high-THC products are not.
- Aggregators routinely freeze CBD accounts — a dedicated high-risk MID is the stable path.
- Lab reports (COAs), accurate product claims, and a matching MCC are what keep a CBD account approved.
CBD payment processing is one of the most misunderstood areas in high-risk payments, because the product is legal to sell and legal to process — but only within a specific line that most mainstream processors won't touch. Getting stable card acceptance for CBD is less about whether it's allowed and more about proving your products sit on the right side of that line.
The line that matters: hemp vs marijuana
Under the 2018 Farm Bill, hemp-derived CBD containing under 0.3% THC by dry weight is federally legal. Marijuana-derived CBD, or any product exceeding that THC threshold, is a different legal category and is not bankable through normal card rails. Nearly every processing question about CBD reduces to which side of 0.3% your product is on and whether you can prove it.
Why aggregators drop CBD
Stripe, Square, and PayPal generally prohibit or restrict CBD, and accounts that slip through get frozen once the platform notices — often with funds held. The reason is the same as with any aggregator: they carry pooled risk for thousands of merchants and won't hold a federally-gray category. That's why CBD sellers need a dedicated merchant account with an acquirer that knowingly banks the vertical, the same durability logic behind any high-risk processor without the compliance headaches.
What underwriters require
To approve CBD, an acquirer typically wants:
- Certificates of Analysis (COAs) from an accredited lab proving THC content under 0.3%
- Product labels and marketing that avoid disease/treatment claims
- Proof of legal sourcing and, often, that you don't ship to states where the product is restricted
- An MCC that accurately reflects supplement/CBD sales
These aren't formalities — they're how the bank documents that your products are the legal kind, which is what lets them say yes.
Claims will get you flagged
CBD marketing that promises to cure anxiety, treat pain, or prevent disease invites both regulatory scrutiny and chargebacks from customers who don't get the promised effect. Keep claims within what's defensible and treat claim compliance as ongoing work with your counsel. Overreaching copy is a frequent reason a CBD account gets reviewed and dropped after it's live.
Chargebacks and descriptors
CBD sees elevated "unrecognized charge" and "not as described" disputes. Defend your ratio against the ~0.9%/1% thresholds with a brand-matching descriptor, easy support, honest product descriptions, and fraud and dispute tooling that lets you catch disputes early. If you sell subscriptions of CBD, apply the same rebill-consent discipline through a proper recurring billing flow that any continuity model needs.
Expect reserves and priced-in risk
Because the category is federally gray and volatile, CBD approvals often come with a rolling reserve and higher effective rates. That's the cost of an acquirer willing to hold the risk on purpose. Treat the reserve as the price of stability rather than a red flag, and confirm the release schedule in writing.
Keep documentation current
COAs expire and formulations change. The merchants who stay approved keep lab reports current, keep labels and site copy in sync with what they actually sell, and disclose changes to their processor proactively. An account gets dropped not because CBD is banned, but because the paperwork stopped matching the product.
CBD is genuinely bankable when you stay on the hemp side of 0.3% THC, prove it with lab work, keep your claims defensible, and work with an acquirer that banks the category on purpose. Do that, and CBD processing becomes a stable, documented part of your business instead of an account waiting to be frozen.