What makes CBD high risk?
What makes CBD high risk is not that the product is illegal, because hemp is not. It is four things stacked together: chargeback exposure on card-not-present sales, regulatory rules that differ by state, product claim risk in marketing copy, and aggregator policies that pushed the category to specialist banks.
What makes CBD high risk in a bank's eyes?
Four things stack up: chargeback exposure from subscription and first-time online buyers, regulatory ambiguity across fifty states, product claim risk when marketing drifts toward health promises, and aggregator policy that has pushed the whole category into specialist hands. None of those is about legality. A bank is pricing the chance of loss, and each factor adds to it.
Start from the legal ground, because it clears up half the confusion. Hemp with a delta-9 THC concentration of not more than 0.3 percent on a dry weight basis was removed from the federal controlled substances definition by the Agriculture Improvement Act of 2018, with the definition at 7 U.S.C. 1639o. The full picture is on is CBD legal to sell online. High risk is a pricing label, not a verdict on your business.
What does the high risk label actually mean to an underwriter?
It is a classification, not a verdict. It tells the bank to ask for more documentation, watch disputes more closely, review the account after boarding rather than only before, and possibly hold a reserve. Pricing follows from that work. The label is the bank saying it expects to spend more attention on your file, and it wants to be paid for the attention.
It helps to know who is actually exposed. When a cardholder wins a dispute, the money comes out of the merchant. When the merchant cannot pay, it comes out of the acquiring bank that sponsored the account. Everything an underwriter does is an attempt to answer one question: if this business stops paying, how much does the bank lose.
That is why documentation carries so much weight. A file with lab reports, a real refund policy and clean processing history lowers the bank's estimate of that number. Nothing about your product changed. The estimate changed.
Why do chargebacks hit this category harder?
Most CBD sales are card-not-present, to a first-time buyer, often on a subscription. That combination produces disputes in every industry it appears in. Add a product people buy hoping for a specific result, and some of those disputes arrive as dissatisfaction rather than fraud. The bank carries the loss if the merchant cannot cover it.
That last part is the whole mechanic. When a merchant cannot fund a chargeback, the acquiring bank does, which is why underwriting looks at your reserves, your refund policy and your dispute history before it looks at anything else. Fix the parts you control and you change how the file reads.
What is friendly fraud, and why does it show up here?
Friendly fraud is a real customer disputing a real purchase they made. They forgot the subscription, they did not recognise the billing descriptor, or the product did not do what they hoped. It is not a stolen card, so fraud tools never see it coming. Clear descriptors, obvious cancellation and fast support prevent more of it than any filter.
The practical fixes are unglamorous and they work. Put your brand name in the billing descriptor so it matches the store the customer remembers. Email before a renewal, not after. Make the cancel link as easy to find as the buy button. Answer support the same day, because a customer who reaches you does not call their bank.
Keep the evidence too. Order records, delivery confirmation, the terms the customer agreed to and your support thread are what a dispute response is built from. Merchants who keep that tidy win representments that merchants who do not keep it simply lose.
How does regulatory ambiguity affect underwriting?
Hemp is federally lawful under the 2018 Farm Bill definition, but states regulate product forms, testing, labeling and age limits differently, and those rules change. An underwriter is asked to approve an account today that must stay compliant for years across every state you ship to. Uncertainty that a seller can live with is uncertainty a bank has to price.
The production framework itself is public and stable, published by the Department of Agriculture at USDA Agricultural Marketing Service. The moving part is state retail law. An underwriter is not asking you to predict it. They are asking whether you have a process for keeping up with it.
What is product claim risk?
It is the risk that your marketing turns a lawful product into a regulatory problem. The FDA has stated CBD may not be lawfully added to food or marketed as a dietary supplement, and disease or treatment claims draw warning letters. Underwriters read your website before they approve you, and copy is the most common reason a clean file gets declined.
The agency's position on cannabis-derived products including cannabidiol is published at fda.gov. Read your own product pages against it. Customer-story claims, condition names and before-and-after language are the usual offenders, and they are usually written by someone who never expected a bank to read them.
Where does reputational and banking policy risk come from?
From inside the bank, not from your business. A bank has its own board policy, its own examiners, its own correspondent relationships and its own insurers. Any of those can decide a category is not worth the attention. When that happens the bank exits the whole category, with no complaint about any individual merchant in it. That is policy risk, and no seller can fix it from outside.
Understanding this saves you from taking it personally, and it changes what you ask for. The useful question to a processor is not whether they can approve you. It is which sponsor bank holds the account and whether that bank has written your category into its own policy. A category written into policy survives a staffing change. A quiet exception does not.
It is also the reason to avoid depending on one account forever. Knowing who your bank is, and what your file looks like, means you can move deliberately rather than during an outage.
Why did aggregators pushing CBD out make it riskier?
Because it concentrated the category. When Stripe, Square and PayPal exclude a whole industry, every seller in it lands with a smaller pool of specialist banks. Fewer banks means tighter underwriting, more documentation, and reserves that would not exist if the category were spread across the whole market. Exclusion is a cause of the risk pricing, not only a symptom.
It also explains the pattern sellers describe: approved in minutes, running for months, then closed without a conversation. That is not underwriting, it is a category sweep. The mechanic behind it is on why PayPal bans CBD, and the same logic hits neighbouring categories, which is why kratom merchant account and vape shop POS exist as separate conversations.
What does a reserve mean for your cash flow?
A reserve holds back part of your settlements so the bank has funds available if disputes land later. It is normal in this category and it is not a penalty. It does change your planning, because money earned this week is not all money you can spend this week. Ask how the reserve is taken, how long each amount is held, and what reduces it.
Plan around the deposit you actually receive rather than the sales figure in your dashboard. That one habit prevents most of the cash flow surprises in this category. If a reserve is part of your agreement, put the review criteria in writing at the start, so reducing it later is a conversation about facts rather than a favour.
What can a CBD seller do to lower their risk profile?
Publish current certificates of analysis, label accurately, make your refund policy easy to find and easy to use, answer support fast, gate age properly, and cut every health claim from your copy. Use a clear billing descriptor so buyers recognise the charge. Most of what an underwriter worries about, a well-run store has already solved.
Then apply where the bank has already approved the category. Finished consumer goods go through a CBD merchant account, wholesale and biomass through a hemp merchant account, and the checkout connects with a CBD payment gateway. We do not promise approval, because nobody honestly can. We do tell you what the file needs before you send it.
What else do sellers ask about risk pricing?
Is high risk a permanent label on my business?
It attaches to the category more than to you, so it does not lift because you had a good year. What does change is your standing inside the category. A long clean processing history with low disputes gives you options that a brand new file does not have.
Can I lower a reserve over time?
Often yes, and it is worth asking how before you sign rather than after. Banks generally look at processing history, dispute levels and how long the account has run. Get the review criteria in writing so you know what you are working toward.
Which single change helps a declined file the most?
Rewriting the website copy. Removing condition names, cure language and anything that reads as treating a disease fixes the most common reason a clean business gets declined. It costs a day and it changes how every underwriter reads the file.
Do disputes matter more than the amount of money involved?
Usually, yes. Underwriters look at the pattern and the trend more than any single loss. A rising dispute rate on small orders reads worse than one large refunded order, because the pattern predicts the future and the single event does not.
Does a subscription model make approval harder?
It raises questions rather than closing the door. Recurring billing invites disputes when customers forget, so show the renewal date clearly, email before you charge, and make cancelling genuinely easy. A well-run subscription is a normal account.
Will an underwriter really read my website?
Yes, including product pages, your blog and your customer-facing claims. Assume every line is part of the application. That is not a scare tactic, it is the single most useful thing we tell sellers before they apply.
Can Rooted Payments promise my account will be approved?
No, and nobody honestly can, because the approval belongs to the sponsor bank. What we can do is read your file the way an underwriter will, tell you what would get flagged, and say plainly if we do not think it is boardable as it stands.
Make your file easy to approve
Send us what you sell and how you sell it. A Rooted Payments specialist tells you what an underwriter will flag before you apply.