A compliant CBD merchant pays 3.5% to 7% on every card transaction. A standard retailer pays a fraction of that. That gap follows the high-risk label banks and card networks attach to CBD, and the label shapes every payment decision a hemp company makes. The global cannabidiol market reached an estimated $18.2 billion in 2025, yet many sellers still lose the ability to accept cards because of errors that have nothing to do with product quality. Most of those errors are avoidable.
The High-Risk Classification
Card networks treat CBD as high-risk for three reasons: elevated chargeback rates, unsettled regulation, and questions about product legality. The 2018 Farm Bill legalized hemp with a delta-9 THC concentration below 0.3% by dry weight. That federal footing is narrower than most operators assume. In November 2025, Congress passed a redefinition of hemp that measures total THC in place of delta-9 alone and caps products at 0.4 milligrams of THC per container, with the rules set to take effect in November 2026.
The practical result is a permanent premium. Acquiring banks price the added risk into fees, reserves, and underwriting terms. Analysts project the market will reach $39.7 billion by 2033, so more sellers keep entering a category banks still treat cautiously, and rising volume does not soften the underwriting. Planning a payment setup as though CBD were ordinary retail leads to misjudged cost and rejection at onboarding.
Using a Mainstream Aggregator
The first mistake usually happens before a single sale. Operators sign up with a general aggregator because setup takes minutes. Stripe applies a zero-tolerance policy and freezes accounts on discovery, PayPal does not work with CBD sellers at all, and Square prohibits the category in its acceptable use terms. These platforms are built for low-risk volume, and their compliance teams remove hemp merchants as soon as the products are identified.
A freeze costs more than a rejection. Outstanding settlement funds are held during review, and a business can wait months for money it has already earned. The account that was fast to open becomes the reason payroll is late.
Misclassified Merchant Category Codes
There is no dedicated code for CBD, so processors assign the closest fit. CBD oil and ingestible products commonly use MCC 5499, the code for miscellaneous food stores. Topicals and cosmetics may fall under MCC 5977, while vape e-liquids use MCC 5993. Forcing the business under a generic retail code to look lower-risk creates a mismatch between the stated category and the actual product.
Card networks audit for this. A code that does not match the goods sold looks like concealment, and concealment ends accounts. When a company runs more than one product line, the code must follow the line with the highest sales volume, even when a safer-looking category is available.
Processor Selection and Underwriting
A specialist underwrites the account around the risks a hemp seller actually faces. Dependable payment processing for cbd comes from providers that expect chargebacks, plan reserves, and approve accurate billing descriptors in advance, the same way processors handle firearms, supplements, or travel bookings. A general gateway tolerates the category until its compliance team notices, then closes the account.
Underwriting is where the relationship is tested. Underwriting that reviews certificates of analysis and monthly sales volume at signup is less likely to end in a freeze later. The questions that feel intrusive at signup are the ones that keep the account open.
Weak Billing Descriptors
The billing descriptor is the text a customer sees on a statement. When it does not match the store name, buyers dispute charges they do not recognize, and each dispute is a chargeback. CBD merchants are already near the network threshold of roughly 1% of transactions, so a run of unrecognized descriptors can push an account toward termination. A recognizable descriptor is one of the cheapest forms of chargeback control, and it depends on a processor willing to approve custom text at setup.
Card-testing fraud adds to the same ratio. Thieves run stolen numbers in small amounts to find which still work, and CBD stores absorb more of this activity than low-risk retailers do. Screening for rapid low-value attempts protects the descriptor line and the account behind it.
Reliance on a Single Processor
A hemp company that routes every sale through one account has a single point of failure. If that account closes, revenue stops the same day. Card networks can place a terminated merchant on the MATCH list, a record that blocks new accounts for up to five years, so a single termination can end card acceptance well beyond the original processor.
Operators reduce this exposure by holding more than one approved account and splitting volume across them. The setup costs more to maintain. It also means a compliance review at one bank does not close the business.
Unmanaged Volume Spikes
Underwriters set an expected monthly volume at approval. A sudden jump above that ceiling is one of the most common freeze triggers, because card networks treat rapid unexplained growth as a possible sign of fraud or an undisclosed change in the business. A successful promotion can look identical to a money laundering pattern from the bank’s side of the account. Merchants who expect a busy season tell the processor in advance and request a higher ceiling. Letting a holiday surge run unannounced risks a hold on the very revenue the promotion produced.
Reserves and Cash Flow Planning
High-risk accounts require reserves. A rolling reserve holds 5% to 15% of sales for 90 to 180 days before release, which means a merchant who budgets as though every sale settles immediately will run short. The money exists, but the bank holds it against future disputes. Reserves are predictable, and a business that models them into cash flow avoids the shortfall that pushes business owners toward worse processors and worse terms.
Terms are not fixed for the life of the account. A merchant with a clean processing history and a low chargeback ratio can often negotiate fees toward the lower end of the 3.5% to 7% range, and reserves shrink as the account builds a record. Steady volume and few disputes give an acquiring bank a reason to loosen terms. Churning through processors starts the pricing over at the high end every time.
Documentation and Ongoing Compliance
Visa and Mastercard allow hemp-derived CBD only when the merchant supplies certificates of analysis showing THC below the legal limit. The FDA still issues warning letters for unsubstantiated health claims, including in 2025. Medical claims on a product page hand an auditor a reason to act, so payment access depends on the storefront as much as the checkout.
Compliance runs continuously. Lab results expire and formulas change as regulations move. Keeping documentation current preserves the account. Filing once and forgetting eventually forfeits it.
Keeping the Account Open
The freeze is the expensive part. Once an account closes, settlement funds stay frozen for months, and the MATCH list can block a replacement for up to five years, which turns a preventable checkout mistake into a business-ending event. Payment compliance deserves the same attention a CBD brand gives to sourcing and labeling, because the checkout is where all of that work turns into revenue or disappears.
