How to Get a CBD Payment Gateway in 2026

A CBD payment gateway lets your store take Visa and Mastercard online, bill repeat customers and sell in more than one currency. For a CBD brand that sells mostly online, card acceptance is what turns traffic into orders, and it is what keeps subscription customers paying month after month.

Getting one is the hard part. Stripe lists CBD as a restricted business and bans cannabis outright, most banks will not underwrite it, and accounts that do open are often closed after the first review. The rules also keep moving: the US redefines hemp in December 2026, and the UK and EU are still authorising CBD foods.

That is where we come in. Through one short intake form, Binderr Chooses, we place you with a regulated partner that accepts CBD, prepare the file they review, from lab reports to website checks, and run the application with you. Most CBD brands are taking card payments within 5 to 7 business days.

What Is a CBD Payment Gateway?

A CBD payment gateway is the connection between your online checkout and a bank that has agreed to process card payments for CBD products. It sends each card payment for approval, returns the answer to your store and passes approved payments to your merchant account, where the money settles before it reaches your business bank account. Our guide to what a payment gateway is covers the basics. The gateway is the easy part. The merchant account behind it, and the acquirer willing to hold it, is what makes CBD different.

Why CBD Is Treated as High Risk

Visa and Mastercard do not ban CBD. They leave the decision to each acquirer, and the acquirer carries the risk if a product turns out to be illegal where it is sold. That risk is real: the legal line between hemp, CBD and cannabis differs by country and, in the US, by state. CBD also attracts health claims that regulators pursue, subscription offers that drive disputes, and a history of brands that disappeared with customer money. Each of these lands on the acquirer first, so most of them choose not to take CBD at all, and those that do price the risk into rates and reserves.

Payment Gateway for Hemp and CBD Brands

Acquirers sort products into three groups. Hemp seed oils, hemp foods and CBD isolate with no THC are the easiest to approve. Full-spectrum and broad-spectrum CBD, which contain traces of THC, are approved with lab evidence that the THC is under the legal limit for each market. Products made to be intoxicating, such as delta-8 THC, THC gummies and anything sold as a cannabis alternative, are declined by almost every acquirer. A payment gateway for hemp and CBD brands is therefore approved product by product, and a single intoxicating line in your catalogue can sink the whole application.

High Risk CBD Gateway vs Mainstream Processors

Stripe's restricted business list allows CBD products containing only negligible amounts of THC, per local limits, only after review, and prohibits cannabis products and dispensaries. Many CBD brands open an account in minutes, take orders for a few weeks and are then closed when the review catches up, with funds held while it happens. A high risk CBD gateway is underwritten for CBD from day one: the acquirer reviews your products, lab reports and website before you take a payment, so the approval does not disappear once volume arrives. Our guide to how high risk payment processing works explains the model behind it.

Is CBD Legal to Sell Online in 2026?

Yes, in most of the US, the UK and the EU, but under different rules in each, and every one of them changes in 2026. Acquirers approve a CBD merchant market by market, so the first thing they check is whether each product is legal where you sell it.

United States

The 2018 Farm Bill made hemp legal if it held no more than 0.3% delta-9 THC by dry weight, and hemp-derived CBD has been sold nationally since. In November 2025, Section 781 of Public Law 119-37 redefined hemp. It now counts total THC, including THCa and delta-8, at 0.3% or less, and caps finished products at 0.4 milligrams of total THC per container. The change was due on 12 November 2026. A stopgap funding bill signed on 2 September 2026 moved most of it to 11 December 2026, while products containing cannabinoids the plant cannot produce naturally still lose hemp status on 12 November 2026.

CBD isolate with no THC is not affected. Full-spectrum oils and gummies may be, because 0.4 milligrams is a very small amount: a 5 milligram THC gummy holds 12.5 times the cap. Separately, the FDA does not allow CBD to be sold as a dietary supplement or added to food, and several states run their own rules on labelling, testing and age limits. Acquirers ask US brands which states they ship to and how they block the rest.

United Kingdom

In Great Britain, CBD food and drink products are novel foods and can only stay on sale if they appear on the Food Standards Agency's public list. In July 2025 the FSA kept its advice of 10 milligrams of CBD a day for healthy adults, set an advisory THC safety level, and confirmed that the enforceable limit is no more than 1 milligram of THC per container. It expects full authorisations to be granted from autumn 2026. A UK acquirer will check that your products are on the list before it approves you.

European Union

In the EU, CBD extracts are also novel foods and none has been fully authorised yet. In September 2026 EFSA issued its first positive safety opinion, setting a provisional safe intake of about 2 milligrams a day for a 70 kilogram adult, for CBD of at least 98% purity. The European Commission and member states still have to decide on authorisation, and national rules on cosmetics, oils and food differ. EU acquirers usually ask for the product category, cosmetic or food, and the member states you ship to.

How to Get a Payment Gateway for CBD

To get a payment gateway for CBD, you need a registered company, a business bank account, a compliant website, lab reports for every product and a clear list of the markets you sell to. The acquirer reviews all of it before approval. A complete file on the first submission is the single biggest factor in how fast you are approved.

Certificates of Analysis for Every Product

Every product needs a certificate of analysis from an independent, accredited lab, showing the batch number, the cannabinoid profile and the THC level. The certificate must match the label and the product page, and many acquirers want customers to reach it through a QR code or a link on the page. Missing, out of date or in-house certificates are the most common reason CBD applications stall. Under the new US rules, the certificate also has to show total THC per container, not only the percentage.

No Medical Claims on Your Website

CBD product pages cannot claim to treat, cure or prevent a disease. The FDA has sent warning letters to CBD companies for exactly that, and acquirers read every product page, blog post and review widget before they approve. Words like anxiety relief, pain treatment or cancer are enough for a decline. Describe the product, the ingredients and the lab results, and leave health outcomes out.

Age Checks, Shipping Rules and Restricted Markets

Acquirers expect an age check at checkout, usually 18 or 21 depending on the market, and shipping rules that block the states or countries where your products are not legal. They also look for a refund policy, clear terms, a customer service contact and your company's country on the checkout page, which Visa's rules require from every online merchant. If you sell by subscription, the trial terms and cancellation route must be visible before the customer pays.

Your Company and Processing History

You apply as a company, with its registration documents, proof of ownership down to the people behind it, ID for directors and owners, and a business bank account for settlement. If your bank is wary of CBD, our guide to how to open a high risk bank account covers the options. Acquirers run the same business verification checks payment firms are required to run. If you already process cards, three to six months of statements with low dispute rates are the best evidence you can offer. New brands can still be approved, usually with a higher reserve at the start. Our guide to how to set up a company covers the first step.

Why CBD Friendly Payment Gateways Are Rare

CBD friendly payment gateways are rare because very few acquirers want the legal and dispute risk that comes with CBD. The gateway software is easy to find. What is scarce is an acquirer that has decided to underwrite CBD, has done the legal work for each market and is willing to hold the account for years rather than months. Our guide to getting the best payment gateway provider covers what to look for in general.

What Mainstream Processors Allow

Stripe treats CBD with negligible THC as a restricted business that needs approval and prohibits cannabis entirely. PayPal's US acceptable use policy does not list CBD at all, and many brands learn their position only after an account review. The pattern is the same across all-in-one processors: they onboard quickly, review later and close accounts in bulk when their risk appetite changes. For a brand with stock and subscription customers, a closure means lost sales and funds held for months. Our guide to whether Stripe and PayPal allow high risk merchants covers both in detail.

Merchant Category Codes and Miscoding

Every merchant is given a merchant category code that tells card issuers what it sells, and our list of high risk merchant industries and MCC codes shows how the codes are used. Some CBD brands try to get approved as a general health store or cosmetics seller without mentioning CBD. The card networks treat that as transaction laundering. When it is found, and it usually is, the account is closed, funds are held and the business can be placed on Mastercard's MATCH list for 5 years, which blocks it from most acquirers. Our guide to what the Mastercard MATCH list is explains how that list works. Declaring CBD honestly costs a little more and lasts much longer.

Payment Gateways for CBD in the US and Europe

Payment gateways for CBD work differently in each market. US acquirers focus on the Farm Bill limits, state shipping rules and the December 2026 change. UK acquirers want to see your products on the FSA public list and the 1 milligram THC limit met. EU acquirers ask whether you sell cosmetics or food, and which member states you ship to. A brand selling in all three usually needs an acquirer comfortable with each market, or separate arrangements for the US and Europe. Our guide to international payment gateways covers settling in more than one currency.

What a CBD Payment Gateway Costs

A CBD payment gateway costs more than a standard one because the acquirer prices in the risk. Expect a higher percentage per payment, a small fixed fee per transaction, and a rolling reserve that holds back part of your sales for a few months. These are typical market ranges on the lower side for an approved CBD merchant.

On a USD 60 order at 4% plus USD 0.25, the processing cost is USD 2.65. That is higher than a mainstream processor, but the comparison that matters is with a processor that closes the account and holds the balance. Rates usually come down after six to twelve months of clean processing, and a strong file with low disputes starts at the lower end of every range. Our guide to high risk merchant account fees and rates goes line by line.

Rolling Reserves and Cash Flow

A rolling reserve is the part of your sales the acquirer holds to cover future disputes. At USD 100,000 a month in sales with a 10% reserve held for 180 days, the acquirer is holding up to USD 60,000 once the reserve is full, and it releases each month's portion when its hold period ends. Plan stock and marketing around that figure, not around your gross sales. Clean processing is the fastest way to have the reserve reduced, and some acquirers review it after six months.

How Long Setup Takes

With a complete file, most CBD brands are live within 5 to 7 business days with our partners. This is the timeline they work to, and our guide to setting up a high risk payment gateway covers each step.

Missing lab reports or product pages that need rewording are what push the timeline out. Having them ready before you apply keeps you inside the week. Read more: how to open a high risk merchant account.

Chargebacks and Subscriptions in CBD

Chargebacks decide whether a CBD merchant account survives. The schemes watch dispute ratios closely, and CBD's history of free trial offers means acquirers watch CBD ratios even more closely.

Free Trials and Card Scheme Rules

A free bottle that turns into a monthly charge is the offer that damaged CBD's reputation with acquirers. Visa's rules now require merchants to show the trial terms before payment and to remind the customer at least 7 days before the trial becomes a paid subscription, with a simple way to cancel. In the US, the Restore Online Shoppers' Confidence Act adds clear disclosure and consent rules. Visa also classes negative option subscriptions under MCC 5968 as high integrity risk. If you sell subscriptions, our guide to how subscription payment gateways work covers the rules in full.

Scheme Monitoring Thresholds

Visa's acquirer monitoring programme flags an online merchant once fraud and disputes reach 1.5% of transactions with at least 1,500 cases a month in the US, Canada, Europe and Asia Pacific. Mastercard's excessive chargeback programme starts at 100 chargebacks and a 1.5% ratio in a month. Acquirers act well before either line, usually around 1%. A merchant closed for excessive disputes can end up on the MATCH list, which is why dispute control matters more than rate. A high risk CBD gateway is watched on these ratios from the first month, so a clean start matters.

How to Keep Disputes Low

Use a billing descriptor customers recognise, send a receipt and tracking number with every order, answer emails quickly and refund when a complaint is fair. Keep subscription terms plain and cancellation easy. Chargeback alerts from the card networks let you refund before a dispute is filed, and fraud screening at checkout, covered in our guide to fraud prevention for high risk merchants, handles the rest. Our guide to chargeback management for high risk merchants covers the tools.

Taking CBD Payments on Your Store

Most CBD brands sell through WooCommerce or Shopify, and both can take card payments through an approved acquirer. What changes is how the gateway connects and what each platform charges on top. Our guide to high risk ecommerce merchant accounts covers the account side for online stores.

WooCommerce and Shopify for CBD

WooCommerce is the most common platform for CBD, because it lets you install the plugin your acquirer provides and keep full control of product pages. The usual stack for an online CBD store is a high risk merchant account, CBD payment gateway, WooCommerce storefront and a fraud tool. Shopify works too, but when you use a third-party gateway instead of Shopify Payments it adds a transaction fee of 2%, 1%, 0.6% or 0.2% per order depending on your plan, and our guide to high risk payment processors for Shopify covers that route. For WooCommerce, the set-up is covered in high risk payment gateways for WooCommerce.

Other Ways CBD Customers Can Pay

Cards carry most online CBD sales, but a second method protects you if card processing is paused. In the US, ACH and eCheck payments are common for repeat orders. In Europe, bank transfers and open banking payments work well for larger orders. Some brands also accept crypto, which carries its own rules. Our guides to eCheck and open banking payment gateways and how crypto payment gateways work explain both.

Common CBD Payment Mistakes

These are the mistakes that cost CBD brands their merchant accounts most often, roughly in the order they happen. Each one can cost you a place with one of the few CBD friendly payment gateways, and some follow you to the next application.

Starting on a Mainstream Processor

An account that opens in minutes and closes after the first review costs more than a higher rate. A payment gateway CBD sellers can keep is worth more than a cheaper one that closes. Stock ships, customers expect orders, and the balance is held for months while the closure is processed.

Hiding CBD Behind a Generic Category

Miscoding looks like a shortcut and ends in termination and a possible MATCH listing that blocks you for 5 years.

Selling Without Current Lab Reports

Certificates that do not match the label, or that come from the manufacturer's own lab, are the fastest way to stall an application. Under the 2026 US rules they must also show total THC per container.

Making Health Claims

One product page that promises pain relief or anxiety treatment is enough for a decline, and it invites regulators as well as acquirers.

Ignoring the December 2026 Change

Full-spectrum products that are legal today may exceed the new 0.4 milligram per container cap. Check your catalogue now, not after your acquirer asks.

Bottom Line

A CBD payment gateway is easy to find and hard to keep. The brands that keep one declare CBD honestly, back every product with a current lab report, keep health claims off their site, block the markets where they cannot sell and run subscriptions by the card scheme rules. Plan for the 2026 US change now, and treat reserves as part of your cash flow.

We set it up through one intake form with a regulated partner that accepts CBD, and most brands are live within 5 to 7 business days. If you also sell supplements, our guide to payment gateways for supplements and nutraceuticals covers that category.