CBD merchant account: what underwriters actually want to see

Why banks treat legal CBD as high-risk

Acquiring banks aren't ruling on legality. They're pricing three risks. State law is a patchwork, so a national online store is always shipping into some jurisdiction with stricter rules than federal law. The FDA actively enforces against health claims, and a bank processing for a merchant who says CBD "treats anxiety" is adjacent to that enforcement. And CBD's dispute rates run high: subscription refill disputes, "didn't work" refund fights, and shipping delays on a product people order when they're already frustrated. Rather than underwrite all that per-merchant, most mainstream processors ban the category. The ones that accept it price it at 4 to 6% with reserves.

Which banks accept CBD (and why lists are useless)

The honest answer: a small, changing set of US acquiring banks, almost always accessed through specialist ISOs rather than directly, plus some European acquirers for EU merchants. The set changes because sponsor banks enter and exit the category as their own regulators lean on them. Elavon's 2019 exit is the famous example: it entered CBD, signed thousands of merchants, then gave them 45 days to leave. Any article naming "the 5 banks that accept CBD" is stale within months. What you actually want is an ISO or processor who will tell you which bank your MID sits with, how long that bank has been in the category, and what happened to their merchants during the last bank exit. Those three answers tell you more than any list.

The document packet, specifically

CBD underwriting is document-heavy, and incomplete packets are the main reason "2-week approvals" take two months. Have ready:

• Certificates of Analysis (COAs) from a third-party lab for every SKU you sell, current within roughly 12 months, showing THC under 0.3%
• Corporate documents, EIN, and government ID for each owner
• 3 to 6 months of bank statements, plus prior processing statements if any
• Supplier or manufacturer agreements showing your hemp source
• A website that already complies: no disease or treatment claims anywhere (including customer reviews you display), visible terms, refund policy, and shipping restrictions for states you exclude

The website review is where most applications die. Underwriters read product pages the way an FDA lawyer would. "Supports relaxation" survives review. "Helps with insomnia" doesn't. Audit your pages, and your republished reviews, before you apply.

The account you get is conditional

Approval isn't the end of scrutiny. Expect periodic re-requests for updated COAs, a reserve of 10% or more, and the standing risk that your sponsor bank exits the category with 30 to 60 days' notice, like Elavon did. That last risk is why CBD merchants increasingly run a second rail that has no sponsor bank in it at all. Crypto checkout through Flint can't be exited by a bank, which makes it the stable half of a CBD payment stack rather than a replacement for the card half.