If you sell hemp-derived CBD, you've probably had a Stripe or Shopify Payments account frozen with no warning. That's not bad luck — it's policy. CBD is legal under the 2018 Farm Bill but classified as high-risk by mainstream processors. Here's exactly how to get a CBD merchant account online with a bank that actually wants your business.
This guide covers the legitimate hemp-CBD market (under 0.3% Delta-9 THC). Higher-THC products and recreational cannabis are a different conversation — and a different processor list.
Why mainstream processors freeze CBD accounts
Stripe, Square, PayPal, and Shopify Payments all prohibit CBD in their Terms of Service, even though the product is federally legal. Their acquiring banks classify hemp under the same MCC code as cannabis (5912/5993 with high-risk flags) and won't underwrite the chargeback exposure. Some merchants get months of "compliance by silence" — then a 24-hour shutdown notice when the bank's quarterly review hits.
What a real CBD merchant account looks like
A compliant CBD account is a dedicated high-risk merchant account placed with one of a handful of acquirers (Esquire Bank, Evolve, Axiom, Merrick) through a CBD-specialized ISO. Expect:
- Discount rate: 4.5–7.5% (vs. 2.9% on Stripe).
- Per-transaction fee: $0.25–$0.45.
- Monthly fee: $25–$95.
- Reserve: 5–10% rolling reserve, held 90–180 days.
- Chargeback fee: $25–$50.
- Setup time: 5–15 business days, sometimes longer.
Documentation banks will ask for
CBD underwriting is paperwork-heavy. Have everything ready before you apply — gaps cause weeks of delay.
- Articles of incorporation and EIN letter.
- Government-issued ID for all owners with 25%+ stake.
- 3 months of business bank statements, plus 3 months of any prior processing statements.
- Voided business check for funding.
- Certificate of Analysis (CoA) from an ISO 17025 lab for every SKU, showing under 0.3% Delta-9 THC.
- Supplier/manufacturer agreements showing chain of custody.
- Website screenshots of compliant labeling, age gate, refund policy, and FDA-compliant disclaimers (no disease/cure claims).
- Personal credit pull for the principal — 600+ FICO is the rough floor.
Site compliance the underwriter will check
Underwriters review your live website before approval. Common rejection triggers:
- Health claims ("cures anxiety," "treats pain," "FDA approved").
- Missing age verification gate (21+ or 18+ depending on state).
- No clear refund and shipping policy.
- No CoA links on product pages.
- Selling to states where the product is illegal (Idaho, Iowa for some forms — keep a state-blocking rule in checkout).
- Unclear or hidden ingredient labels.
Best gateways for CBD merchants
Your high-risk merchant account plugs into a gateway. The most common CBD-friendly options:
- Authorize.Net — works with most CBD acquirers, Shopify and WooCommerce plugins available.
- NMI — popular for white-label setups and recurring CBD subscription boxes.
- USAePay — common with mid-tier CBD ISOs.
- Pinwheel / Aeropay — ACH and bank-debit alternatives if card processing falls through.
Tips that actually speed approval
From dozens of CBD onboardings, the things that move the needle:
- Apply to 2–3 ISOs in parallel. Underwriting outcomes vary wildly between banks.
- Lead with a clean processing history if you have one. Even 3 months of low-chargeback Stripe history (before they shut you down) helps.
- Have a lawyer review your labels for FDA compliance. One claim can sink the application.
- Don't lie about MCC. Some merchants try to onboard as "health supplements." Banks check, the account gets closed, and you're TMF-listed — banned across most processors for 5 years.
Backup: ACH, crypto, and bank debit
Even with a real CBD merchant account, smart sellers run a secondary rail. ACH (via Aeropay, Pinwheel, or GoCardless) typically costs 0.5–1.5% with no chargeback risk and offers a fallback during card processor issues. Crypto checkout via BitPay or Coinbase Commerce is a small but reliable third option for CBD.
Figuring out how to get a CBD merchant account online comes down to three things: choose a high-risk-specialized ISO, prepare a complete documentation package up front, and make sure your website is fully compliant before underwriting reviews it. Pay the higher rates with eyes open — the alternative is another Stripe shutdown and a frozen reserve. With a stable account in place, you can finally focus on the business instead of the processor.
Frequently asked questions
Can I use Stripe or Shopify Payments for CBD?+
No — both prohibit CBD in their terms of service regardless of state legality. Some merchants operate undetected for a few months, but the inevitable shutdown freezes funds and triggers a TMF (MATCH list) entry that blocks future processors.
How much does CBD payment processing cost?+
Plan on 4.5–7.5% effective rate plus a 5–10% rolling reserve held for 90–180 days. Total cost of acceptance is typically 2–3x what mainstream ecommerce pays.
How long does CBD merchant account approval take?+
5–15 business days when paperwork is complete. Missing CoAs, label compliance issues, or low credit scores can push it to 30–45 days.
Do I need a separate gateway for CBD?+
You'll need a CBD-friendly gateway (Authorize.Net, NMI, or USAePay) configured with your high-risk merchant account. Mainstream gateways tied to Stripe or Square won't work.
Talk to an ecommerce payments specialist
Get a free side-by-side comparison tailored to your platform, AOV, volume, and risk profile.
No obligation. Fast review for online stores.