Cannabis payment processing: what is actually available
Cannabis payment processing splits in two. Hemp-derived products under the federal threshold can be boarded properly with a bank that accepts the category. Plant-touching marijuana cannot take major card network payments in most states, because the plant is still federally scheduled. Anyone telling you otherwise is selling you a workaround.
Why does federal law decide what your register can do?
Card payments run on networks operated by banks, and banks answer to federal regulators no matter which state they sit in. Marijuana remains a federally scheduled substance, so a bank that settles those transactions is knowingly moving money it may have to treat as proceeds of a federal crime. State legalisation does not change that calculation, which is why the major card networks stay out.
Hemp is the exception, and it is a specific one. The 2018 Farm Bill removed hemp from the Controlled Substances Act, defining it as cannabis with no more than 0.3 percent delta-9 THC on a dry weight basis. Below that line, the product is legal federally and the payment question becomes a risk question rather than a legal one. That is covered on is CBD legal to sell online.
Who can offer cannabis payment processing today?
Nobody offers straightforward Visa and Mastercard acceptance for plant-touching retail in most states, and any vendor claiming to is describing something else. What is genuinely on offer today falls into a short honest list:
- Hemp-derived products under the federal threshold: boardable through banks that accept the category
- Smoke, vape and kratom retail: high risk by category, and boardable with the right file
- Plant-touching marijuana sales: no major card network acceptance in most states
- Cashless ATM schemes: not card acceptance, and the networks have acted against them
- Anyone promising a certain approval for plant-touching cards: walk away
Licensed dispensaries in most states run on cash, on debit rails through banking arrangements that come and go, and on compliant ACH or account-to-account products. Those options move, sometimes with little warning. We keep the honest version of that on dispensary payments rather than pretending the answer is settled.
What is wrong with a cashless ATM?
A cashless ATM looks like a card terminal at the counter, but it is not processing a purchase. It processes a rounded cash withdrawal that the customer then hands back for the sale, coded as an ATM transaction rather than retail. That is a misrepresentation to the card networks, and they have taken enforcement action against it. The shop is the party left exposed when it unwinds.
We will not sell one and we will not describe one as card acceptance. If someone has pitched you one, read cashless ATM risks before you sign anything. The short version: it works right up until it does not, and the failure takes your funds with it.
What can hemp, CBD and smoke shop retailers do instead?
A great deal, and this is where most of our work happens. Finished CBD sold under the federal threshold gets a real merchant account through a real bank, which is the whole of CBD merchant accounts. Growers, processors and wholesalers get their own path on hemp merchant accounts. Kratom is separate again, on kratom merchant accounts.
The counter matters too. Age checks, dense inventory and clean category reporting are what keep a shop out of trouble, whether the sale is hemp or accessories. Look at smoke shop POS and vape shop POS for how the register and the processing get set up together.
How do you tell a real processor from a workaround?
Ask three questions. Which bank sponsors the account, and will you see its name? What exactly is the merchant category code the transaction will carry? What happens to your funds if the account is closed during a review? A processor with a real answer to all three is worth talking to. One that changes the subject is selling risk it has quietly moved onto you.
We answer those three every time, including when the answer is that we cannot help with what you sell. If you want the mechanics of risk categories generally, that is on high-risk processing, and common questions are collected on our FAQ.
Which party in the chain is the one saying no?
It helps to know where the refusal actually happens, because vendors exploit the confusion. A card sale passes through four hands. The gateway is software that carries the transaction from your checkout or terminal. The processor routes it and settles the money. The acquiring bank, usually called the sponsor bank, is the party that accepts your business and carries the risk. The card networks set the rules everyone else operates under.
The no comes from the sponsor bank, and behind it from the networks. Both are federally regulated, so neither is moved by a state licence. That is why no amount of shopping around produces a plant-touching account: you are not looking for a friendlier salesperson, you are looking for a federally regulated bank willing to settle federally scheduled goods.
Aggregators are the fifth thing people mean when they say processor. Stripe, Square and PayPal put thousands of sellers under one shared merchant account, which is why signup takes minutes and why enforcement arrives without a conversation. Nothing about your business was reviewed, so a prohibited list is the only tool they have. The mechanics of the alternative are on high-risk processing.
What should you do the week an aggregator freezes you?
This is the most common emergency in this industry, and the first hour matters. An aggregator freeze usually arrives as an email, not a phone call, and access to the dashboard can go before you finish reading it. Work in this order:
- Screenshot the dashboard, the notice and the balance before access disappears
- Read the notice for the exact policy clause cited, then keep it with your records
- Switch checkout to another payment method the same day, even a slower one
- Tell customers with pending orders yourself before their cards get refunded for them
- Ask in writing when the held balance releases, and keep every reply
- Start a properly underwritten application instead of opening a second aggregator account
Two things not to do. Do not open a second aggregator account under a different name or a different site. That is the behaviour their systems are built to catch, and it converts a policy closure into a record that follows you to real underwriting. And do not accept a cashless ATM because it is the thing available on Tuesday. A short cash-only stretch costs less than a scheme the networks have already acted against.
Use the pause to do the boring work: tighten the claims on your site, get current lab reports in one folder, pull your last statements together. A file assembled in a bad week is the file that gets you boarded properly, which is the whole of CBD merchant accounts.
Why does your dispute ratio decide your account's future?
A chargeback is not a refund you chose to give. The cardholder disputes the charge with their own bank, that bank pulls the funds back out of your settlement, and you get a reason code and a window to answer with evidence. Win or lose, the dispute counts, and it is the count that matters more than the money.
The card networks run monitoring programs with published thresholds, and a business that crosses one enters a remediation process with fees and reporting attached. In an ordinary retail category that is a distant risk. In this one your account was already the one under review, so a rising ratio is the thing most likely to close an account that was otherwise working fine.
Most disputes in this world are not criminal fraud. They are customers who did not recognise the descriptor on their statement, who forgot a refill subscription, or who found a phone call to the bank easier than your refund form. All three are fixable with a matching billing descriptor, an obvious refund policy, a renewal notice before every recurring charge, and tracking on every shipment. Ask your processor where your ratio sits and what the threshold is, and ask monthly rather than after the letter arrives.
How can you check a vendor's claim yourself?
You do not need a payments background to test a pitch. Start with the provider's own published prohibited-business policy, which is a public page and is what their enforcement team actually reads. If your category is on it, no salesperson can override that, and no assurance that a workaround exists survives the first review.
Then ask for three specifics in writing: the sponsor bank's name, the merchant category code your transactions will carry, and what happens to settled funds if the account closes during a review. A real placement produces all three quickly. A workaround produces a change of subject, an offshore entity, or a code that describes a business you are not.
Finally, look at the receipt from any terminal being demonstrated to you. If a sale prints as a cash withdrawal with a rounded amount, that is not card acceptance, no matter what the sign on the counter says. We explain why that matters, and what the networks have done about it, on cashless ATM risks.
Straight answers to the questions we get most
Is there any way for a licensed dispensary to take Visa or Mastercard?
Not for plant-touching sales in most states, and we will not pretend otherwise. Marijuana is still federally scheduled, so the banks that operate those networks decline the category rather than manage it. What a licensed shop can board is any genuinely separate line that meets the federal hemp definition, and that has to be run as its own account rather than mixed into one.
Why does everyone else online say yes?
Because the answer being yes is how they get paid. Most pages promising card acceptance for plant-touching retail are describing a cashless ATM, an offshore account, or a miscoded merchant category. All three work until a review, and the shop carries the loss when the review comes, not the vendor who installed the terminal.
What is a merchant category code, and why should I care?
It is the code that tells the card networks what kind of business took the payment, and it travels with every transaction. If your code says something you are not, the transactions are misrepresented, which is grounds for termination and for holding your funds. Ask what code your account will carry and get the answer in writing before you sign.
Can I run cannabis sales through my hemp merchant account?
No, and this is the mistake that costs shops the most. An account boarded for hemp was underwritten for hemp, so plant-touching volume flowing through it is exactly the misrepresentation that triggers a closure and a fund hold. If you sell both, the hemp line needs its own account, its own descriptor and its own reporting.
Does state legalisation change any of this?
It changes what you may sell, not what a federally regulated bank will settle. That gap is the whole reason this category is stuck, and it is why the answer moves when federal policy moves rather than when a state votes. We keep this page current rather than leaving a claim up that stopped being true.
What can you actually help me with?
Hemp and CBD retail and wholesale, kratom, smoke and vape shop payments, and the point-of-sale side for any of them, placed with processors and their sponsor banks. We are an independent payments brand, not a bank or a lender. For plant-touching cannabis sales we can talk through what shops are using and what the risks are, but we will not sell you card acceptance that does not exist.
The longer versions live on can dispensaries take credit cards and dispensary payments, with more collected on our FAQ.
Get the honest version for your business
Tell us what you sell and which state you operate in. We will tell you what is available, what is not, and where the workarounds will cost you.