Try to run CBD sales through a standard Stripe or PayPal account and you'll usually get the same ending: account closed, funds held for 90 to 180 days, no appeal. It's not personal. CBD sits on the prohibited list of nearly every aggregator, even when your product is fully hemp-derived and federally compliant.
So the question isn't "will a mainstream processor work for CBD." It won't, long term. The question is how to get a real high-risk merchant account that treats CBD as the legal product it is, and how to keep it.
Why mainstream processors reject CBD
Aggregators like Stripe, Square, and PayPal pool thousands of merchants under one master account. One regulatory headache from one seller can threaten the whole pool, so they ban entire categories rather than underwrite them one by one. CBD is on that banned list next to firearms, supplements with health claims, and adult content.
The trap is that onboarding feels fine. You sign up, you process for a week or a month, then a batch review flags your MCC or your product pages and the account is frozen. By then you may have thousands in pending payouts you can't touch.
A true high-risk processor underwrites you directly. They know what you sell before you process the first dollar, so there's no surprise shutdown when a reviewer notices the word "cannabidiol" on your homepage.
There's a second cost most people miss. When an aggregator freezes you, your customers' completed orders are stuck in limbo too. You've shipped product, the money is held, and refunds you owe come out of pocket because the held balance is untouchable. A single 90-day hold on even a modest CBD store can swallow a month of working capital. That's not a fee. That's a business-ending event for a thin-margin operation.
Aggregators vs direct merchant accounts
The distinction that matters is aggregation versus direct underwriting. An aggregator pools you into a shared master merchant account; a direct account gives you your own merchant ID (MID) under an acquiring bank that has agreed to your category. The MID is the difference between renting a desk in someone else's office and signing your own lease. One can evict you at will. The other has a contract.
This is why "instant approval" is a warning sign for CBD. Real underwriting takes a few business days because a human reviews your site, your COAs, and your volume estimate. Speed at signup almost always means you're in a pool that will offboard you the moment automated review catches the category.
What a CBD merchant account actually requires
High-risk underwriting asks for more than a mainstream signup, but it's nothing exotic. Expect to provide:
- A registered business entity (LLC or corp), not a personal account
- A business bank account in the same legal name
- Certificates of analysis (COAs) from a third-party lab proving your products are under the 0.3 percent THC threshold
- Clear product pages with no medical or disease claims ("cures anxiety," "treats seizures" will sink an application)
- Three to six months of processing history if you have it, plus an estimate of monthly volume and average ticket
The COAs matter most. They're how an acquirer proves to its sponsor bank that you're selling legal hemp, not a controlled substance. Keep them current and linked on your product pages. Our
breaks down the full document checklist by niche.
Pricing runs higher than mainstream flat rates. High-risk CBD processing often lands in the 3.5 to 5 percent range plus a per-transaction fee, sometimes with a rolling reserve of 5 to 10 percent held for the first several months. That reserve releases over time as you build a clean track record.
Don't let the higher rate scare you off. Run the math: a 2 percent gap on a 50,000 dollar month is 1,000 dollars. A single 90-day freeze on a mainstream account can lock up 50,000 dollars in payouts plus force out-of-pocket refunds. The "cheaper" rail that drops you is the expensive one. The reserve is annoying but recoverable; a frozen aggregator account often is not.
How to keep the account once you have it
Getting approved is half the job. Staying approved means keeping your chargeback ratio under control, usually below 1 percent of transactions. A few concrete moves:
- Bill descriptors should match your store name exactly, so customers recognize the charge and don't dispute it
- Ship fast and send tracking, because "never arrived" is the most common CBD chargeback
- Make your refund policy obvious and honor it quickly, since a refund is cheaper than a dispute fee
- Use a clear age gate and avoid any wording that reads as a medical claim
- Respond to every dispute with evidence, since acquirers reward merchants who fight invalid chargebacks rather than eating them silently
The medical-claim trap deserves extra attention because it kills more CBD accounts than chargebacks do. Words like "treats," "cures," "heals," or any named condition turn a legal supplement into an unapproved drug in a reviewer's eyes, and that's an instant decline or offboard. Describe what the product is, not what it allegedly does. "Full-spectrum hemp extract, 1000mg" is fine. "Relieves chronic pain" is a loaded gun pointed at your own account.
A frozen payout is worse than a slightly higher rate, every single time.
If you want speed, SellStein lets CBD merchants build an AI-generated storefront and connect high-risk-friendly payments in the same flow, without the mainstream-processor whiplash. You can compare what that costs on our
before you commit.
Frequently asked questions
CBD is legal to sell, the payments rail just hasn't caught up uniformly. Pick a processor built for the category, keep your COAs current, and treat chargeback prevention as a daily habit rather than a cleanup task. Then go set up a business bank account in your LLC's exact name today, because every underwriter will ask for it first.