All guides
High Risk

CBD Payment Processing: Why Merchants Get Shut Down & Solutions

Discover why CBD payment processing accounts are terminated and learn the step-by-step strategy to secure a stable, high-risk merchant account for your store.

OrbitBNK Advisory Team Jun 20, 2026 12 min read
CBD Payment Processing: Why Merchants Get Shut Down & Solutions

CBD merchants are frequently shut down because most mainstream payment aggregators (like Stripe, Square, or PayPal) classify hemp-derived products as prohibited or 'high-risk' under their Terms of Service, leading to automated account freezes once sales volume or manual reviews flag the business. To solve this, a merchant must transition to a dedicated high-risk merchant account that is explicitly underwritten by a bank willing to support CBD products and compliant with federal and state regulations.

The Core Conflict: Federal Legality vs. Banking Risk

The primary reason CBD payment processing remains a headache for business owners is the discrepancy between the 2018 Farm Bill and individual bank risk appetites. While the Farm Bill legalized the production and sale of hemp and its derivatives (provided they contain less than 0.3% THC), it did not mandate that banks must provide services to these businesses. Consequently, the industry exists in a regulatory 'grey area.'

For a payment processor, CBD represents a three-headed monster: regulatory uncertainty, high chargeback potential, and the risk of 'reputational damage.' Many Tier-1 banks simply choose to avoid the sector entirely rather than invest in the heavy compliance infrastructure required to monitor it. When you sign up for a 'low-risk' processor, you aren't actually approved; you are simply allowed to process until their automated systems realize what you are selling. This is why many merchants experience the 'honeymoon phase' followed by a sudden, devastating email saying their funds have been held for 180 days.

Why Your Merchant Account Was Really Shut Down

Understanding the specific 'why' behind a shutdown is crucial for preventing the next one. Usually, it falls into one of three categories:

1. The 'Stripe Trap' (Aggregate Processing)

Small businesses often start with aggregators because they are easy to set up. However, these platforms use a 'process first, ask questions later' model. They aggregate thousands of merchants under one giant merchant ID. Because CBD is technically on their prohibited list, your account is a ticking time bomb. As soon as a human reviewer or a machine-learning algorithm detects keywords like 'CBD,' 'Hemp,' or 'Tincture,' the account is flagged for termination.

2. MCC Code Misclassification

Every business is assigned a Merchant Category Code (MCC). Some unscrupulous 'grey market' processors will try to hide your CBD business under a generic retail or 'health supplement' code (like 5912 or 5411) to trick the banks. This is known as 'miscoding.' When the acquiring bank eventually audits the transactions and sees that a 'vitamin store' is actually selling CBD oils, they will shut down the account immediately for fraud and likely blacklist the merchant on the MATCH list (Member Alert to Control High-Risk).

3. Compliance and COA Failures

Even if you have a high-risk account, you can be shut down if your website compliance slips. This includes missing Certificates of Analysis (COAs) for every product batch, making prohibited medical claims (e.g., 'this cures cancer' or 'treats anxiety'), or failing to have a clear refund policy. If your lab results show even 0.31% THC, your processor may be legally required to sever ties to protect their own banking licenses.

The Immediate Roadmap: What To Do After a Shutdown

If you have just received a termination notice, do not panic and do not try to open another 'low-risk' account under a different name. This will only lead to further blacklisting. Instead, follow these steps:

Secure Your Funds

In most cases, a processor will hold your remaining balance for 90 to 180 days to cover potential chargebacks. While it is difficult to get this released early, you should immediately document all outstanding orders and shipping confirmations to prove that you are fulfilling your obligations to customers.

Audit Your Online Presence

Before applying for a new, legitimate CBD payment processing solution, audit your website. Ensure every product has a link to its COA. Remove any health claims that haven't been approved by the FDA. Ensure your Terms and Conditions and Privacy Policy are visible in the footer. If you need help understanding how your current processing costs compared to market rates before the shutdown, you can get a free statement review to see where you stand.

Prepare Your Documentation Package

High-risk underwriting is a manual process. You will need to provide a comprehensive 'stack' of documents:

  • 3-6 months of processing statements (if available) - 3 months of business bank statements - Articles of Incorporation and EIN - A valid government-issued ID for the owner - COAs for your top-selling products - A voided check or bank letter

How to Find Reliable CBD Payment Processing

Finding a long-term partner requires looking beyond the 'guaranteed approval' slogans. You need a processor that understands the nuance of the high-risk space.

Look for Transparent Pricing Models

Avoid 'flat rate' pricing (e.g., 4.95% flat). While it looks simple, it is usually much more expensive than Interchange-plus pricing. In an Interchange-plus model, you see the actual cost from the card brands plus a transparent markup. This is the only way to ensure you aren't being overcharged. If you are unsure if your current or proposed rates are fair, get matched with a processor through a platform that specializes in high-risk vetting.

Domestic vs. Offshore Processing

Domestic processing (US-based banks) is generally preferred because it offers lower rates and higher approval percentages for customers' cards. However, if your business is in a particularly 'hot' niche (like Delta-8 or high-potency topicals), you might need an offshore solution. A seasoned expert will be able to tell you which path is right for your specific product mix.

Avoiding Future Disruptions: Best Practices

Once you have secured a legitimate account, your job isn't over. Maintaining the account is just as important as getting it.

  • Maintain a low chargeback ratio: Keep your chargebacks under 1%. High-risk banks have a lower tolerance for disputes than standard banks. Use tools like 3D Secure or chargeback alerts to catch issues before they become formal disputes. - Communicate with your processor: If you are planning a massive sale or an influencer campaign that will spike your volume, tell your processor. Sudden spikes in revenue are a red flag for fraud. - Diversify your processing: For larger merchants, having a 'backup' or redundant merchant account is standard practice. If one bank decides to exit the CBD space, you can flip your traffic to the second account without a single minute of downtime.

Conclusion

CBD payment processing doesn't have to be a cycle of shutdowns and frozen funds. By moving away from aggregators and embracing a fully underwritten, high-risk merchant account, you can build a stable foundation for your business. Transparency with your bank, rigorous product compliance, and professional documentation are the keys to longevity in this industry. If you are tired of the uncertainty or have recently been shut down, the first step is to see exactly what you’ve been paying and how to optimize your setup. Upload your most recent merchant statement for a free statement review today, and let us help you find a processing partner that actually wants your business.

Frequently asked questions

Why did Stripe shut down my CBD business?+

Stripe is a payment aggregator that generally prohibits the sale of CBD and hemp-derived products in their primary Terms of Service. They use automated systems to flag and terminate accounts that sell high-risk products to protect their own banking relationships.

Is it legal to process credit cards for CBD?+

Yes, it is legal to process credit cards for CBD in the US, provided the products are derived from hemp and contain less than 0.3% THC per the 2018 Farm Bill. However, you must use a specialized high-risk merchant account rather than a standard processor.

What are the typical rates for CBD payment processing?+

While low-risk businesses might pay 2-3%, CBD merchants typically see rates ranging from 3.5% to 5.95%, depending on their processing history, volume, and whether they are using domestic or offshore banking.

How long does it take to get a CBD merchant account?+

The underwriting process for a high-risk CBD account typically takes between 3 to 7 business days, as it requires a manual review of your COAs, website compliance, and financial history.

Can I sell CBD on Shopify?+

Yes, you can sell CBD on Shopify, but you cannot use Shopify Payments (which is powered by Stripe). You must integrate a third-party high-risk payment gateway that is compatible with Shopify and a CBD-friendly processor.

See your real processing math

Upload your merchant statement for a free, line-by-line OrbitBNK review.

Start The Clearing

Keep reading