If you sell vape or hemp products online through Shopify, you've probably heard the horror stories. A store owner wakes up to find their Shopify Payments account frozen, their PayPal balance held, or their Stripe account terminated — all without a single warning. Revenue stops. Customers can't check out. And the funds already earned? Locked up for months.
This isn't a rare edge case. It's happening to legally compliant vape and hemp merchants across the United States every single week in 2026. And it's not limited to just Stripe, PayPal, and Shopify Payments. Square, Adyen, Wix Payments, Afterpay, Klarna — even the Visa and Mastercard networks themselves — are all tightening restrictions on vape and tobacco transactions.
The frustrating part is that most of these store owners aren't doing anything illegal. They're selling FDA-compliant products, collecting the right taxes, and verifying customer ages. But none of that matters if your payment setup violates the internal policies of your processor or the rules set by the card networks.
The Core Problem: Your Products Are Legal, But Your Processor Doesn't Care
Here's the disconnect that catches most vape merchants off guard: legality and processor eligibility are two completely different things.
You can hold every state license, register with the ATF under the PACT Act, implement robust age verification, and sell only FDA-authorized products — and you'll still get shut down. That's because virtually every mainstream payment processor maintains its own Acceptable Use Policy (AUP) that prohibits or restricts tobacco and vaping products regardless of their legal status in your jurisdiction.
Who Has Blocked Vape Merchants?
| Processor | Status | Key Detail |
|---|---|---|
| Stripe / Shopify Payments | Blocked | Tobacco & e-cigarettes explicitly restricted. Can hold funds 90–180 days. |
| PayPal | Blocked | Pre-approval required for e-cigarettes; almost never granted. |
| Square | Blocked | Bans all age-restricted products outright, including tobacco and vape. |
| Adyen | Restricted | Requires express written approval; rarely granted to small retailers. |
| Wix Payments | Blocked | Inherits restrictions from Stripe and Adyen depending on territory. |
| Afterpay / Klarna | Blocked | Both classify vape as prohibited dangerous goods. |
Stripe is explicit. Tobacco and e-cigarette sales are listed as a restricted business category, and account termination can happen at any time without prior notice. According to Stripe's own terms, they can close an account "at any time for any or no reason" under Section 6.1(b) of their service agreement. When they do, they can hold your funds for 90 to 180 days or longer.
PayPal is similarly blunt. Their Acceptable Use Policy states that e-cigarettes, including e-liquids containing nicotine, cannot be sold through PayPal without pre-approval — and that pre-approval is almost never granted. PayPal classifies vape products alongside tobacco regardless of whether the products actually contain tobacco.
Shopify Payments is powered by Stripe on the backend. That means every Shopify store using Shopify Payments is automatically subject to Stripe's AUP. Even if Shopify allows you to list vape products on their platform, using Shopify Payments for those transactions is a policy violation that can trigger an immediate shutdown.
Square bans age-restricted products outright, including tobacco and vape. Their terms prohibit any product that must legally be sold to someone over a certain age. Even their CBD program explicitly excludes CBD vape cartridges and smokable hemp. If Square discovers you're selling vape products, they will freeze your account — and the outcome is almost always termination.
Adyen, which powers payments for many large e-commerce platforms, classifies tobacco and e-cigarettes as a restricted category requiring express written approval before onboarding. In practice, gaining that approval is extremely difficult for small and mid-sized vape retailers. Adyen evaluates risk based on card network requirements, chargeback rates, and what they describe as "reputational impact" — and vape products consistently fail that assessment.
Wix Payments inherits restrictions from both Stripe and Adyen (depending on territory) and explicitly prohibits tobacco and e-cigarette transactions.
Buy Now, Pay Later providers have followed suit. Afterpay (owned by Block, the same company behind Square) explicitly lists tobacco, e-cigarettes, and vaping products as prohibited dangerous goods. Klarna also prohibits or restricts tobacco and vape transactions and reserves the right to suspend services for any violation.
It Goes Deeper: Card Network Rules
What many merchants don't realize is that the restrictions don't just come from individual processors — they originate at the card network level. Visa and Mastercard both classify tobacco and vape merchants under MCC 5993 (Cigar Stores and Stands) and subject them to enhanced monitoring programs.
Visa's Integrity Risk Program (VIRP), introduced in 2023, categorizes high-risk merchants into tiers with escalating oversight requirements. Tobacco and vape merchants processing card-not-present transactions — which includes every online sale — must be formally registered with Visa by their acquiring bank, and Visa charges annual registration fees for this category. Mastercard operates a similar Specialty Merchant Registration Program with its own compliance requirements.
In 2025, both card networks invested heavily in AI-based monitoring tools that scan transaction metadata, website content, and shopping cart behavior to identify merchants whose actual business activity doesn't match their registered MCC. Merchants who try to fly under the radar by miscoding their business face immediate account termination and potential MATCH list placement.
Why 2026 Is Worse Than Previous Years
Payment processor crackdowns on vape merchants aren't new, but three converging forces are making 2026 the most dangerous year yet for store owners who haven't taken action.
1. Regulatory Tightening at Every Level
The regulatory environment around vape products is intensifying from every direction. At the federal level, the FDA has authorized fewer than 40 specific tobacco and menthol-flavored products through the PMTA process, which means the vast majority of flavored vape products on the market lack formal authorization. The FY 2026 Agriculture Appropriations bill has given federal authorities expanded power to seize and destroy unauthorized shipments at the border.
At the state level, 2026 is the year of the "directory system." California's Unflavored Tobacco List (UTL), fully implemented in January 2026, automatically treats any product not on the approved list as flavored — and therefore illegal to sell. Texas has gone further, restricting the sale of pre-filled disposable vapes manufactured in China under Senate Bill 2024. These regulatory shifts make payment processors even more nervous about vape merchants.
2. Increased Chargeback Scrutiny
Vape stores have historically faced higher-than-average chargeback rates. Customers dispute subscription renewals they forgot about, file claims when products don't meet expectations, or initiate chargebacks rather than going through return processes. For payment processors that aggregate all merchants into a single risk pool — like Square, Stripe, and PayPal — a higher chargeback ratio in the vape vertical creates systemic risk. This is why vape merchants often report being dropped in waves: a single regulatory shift or enforcement action can trigger a processor to shut down thousands of accounts overnight.
3. Attorney General Enforcement Actions
State attorneys general are increasingly targeting online vape retailers for compliance failures. In late 2025, attorneys general from California and New York City sent formal letters to dozens of Shopify vape stores identifying specific compliance violations. When a payment processor learns — through news coverage, regulatory filings, or their own monitoring — that a merchant has been flagged by a state AG, that's often the final trigger for account termination.
The Five Most Common Triggers for Account Shutdowns
Using Shopify Payments by Default
When you set up a new Shopify store, Shopify Payments is enabled by default. Many merchants launch their stores without realizing they need to switch to a third-party gateway. Shopify allows you to sell vape products on their platform, but they restrict Shopify Payments from being used for those transactions. The moment their automated compliance system flags your product listings, your checkout can be disabled and payouts frozen overnight with little to no explanation.
Missing or Inadequate Age Verification
Every vape store operating online in the United States must comply with federal age verification requirements under the PACT Act, mandating a dual-factor verification process. Research published in JAMA in 2024 found that among 156 purchase attempts from online vape retailers, only 1% of deliveries involved an actual ID scan, and over 78% had no interaction with delivery personnel at all. If your store lacks visible, robust age verification, you're signaling to processors that you're a compliance risk.
Non-Compliant Product Listings
Product pages that contain health claims, glamorized marketing language, or imagery that could appeal to minors are red flags for both regulators and payment processors. This includes product descriptions that position vaping as a "healthy alternative," packaging that resembles candy or toys, and any marketing that could be interpreted as targeting underage users.
Tax and Licensing Gaps
The PACT Act requires online vape sellers to register with the ATF and with the tobacco tax administrators of every state they ship into. Research from the Tobacco E-commerce Lab found that among retailers studied, over 84% failed to charge required state excise taxes, and only 40% appeared to hold proper state tobacco retail licenses. Payment processors increasingly cross-reference merchant compliance against regulatory databases.
Shipping via Prohibited Carriers
The PACT Act prohibits the use of USPS for shipping vape products to consumers. Both UPS and FedEx have also implemented their own restrictions on consumer tobacco shipments. Despite this, research shows that over 80% of online vape deliveries still arrive via USPS. If a processor discovers you're shipping through prohibited channels, your account is at immediate risk.
How to Protect Your Vape Store: A Step-by-Step Action Plan
Step 1: Move Off Shopify Payments Immediately
If you're currently using Shopify Payments for any vape or hemp product sales, this is your most urgent priority. Switch to a dedicated high-risk payment gateway that explicitly supports vape and tobacco merchants. Options in this space include providers like Authorize.Net and NMI, which are commonly integrated with Shopify through high-risk merchant account providers. Yes, you'll pay a slightly higher per-transaction fee (typically 0.5% to 2% above standard rates), but that's a manageable cost compared to having your entire revenue stream shut off without warning.
Step 2: Implement Robust Age Verification
Install a proper age verification solution that goes beyond a simple "Are you 21?" checkbox. Look for solutions that verify customer identity against commercial databases at the point of purchase, as required by the PACT Act. This isn't just a legal requirement — it's a signal to payment processors and regulators that your store takes compliance seriously.
Step 3: Audit Your Compliance State by State
If you're selling vape products online and shipping across state lines, you need to understand the specific requirements of every state you ship into. This includes state tobacco retail licenses, excise tax obligations, product directory registrations, flavor restrictions, and local ordinances. This is where the complexity explodes — the United States has a patchwork of 50+ state-level frameworks plus hundreds of local ordinances. California alone has multiple city-level regulations layering on top of state law.
Step 4: Clean Up Your Product Listings
Review every product page on your store for language, imagery, or claims that could be flagged. Remove any health claims. Ensure product images don't use designs that could be interpreted as youth-oriented. Include all required warnings and disclaimers prominently on product pages.
Step 5: Get Your PACT Act Registration in Order
Register with the ATF and with the tobacco tax administrators of every state you ship into. Set up your monthly reporting process. Use only compliant delivery carriers and require adult signature with ID verification on delivery.
Step 6: Establish a Redundant Payment Infrastructure
Don't rely on a single payment processor. Even with a dedicated high-risk merchant account, having a backup gateway configured and ready to activate can save your business. Many experienced vape merchants maintain relationships with two or more high-risk processors to ensure continuity.
The Hidden Cost of Doing Nothing
A payment shutdown doesn't just pause your revenue — it cascades through your entire business:
- Frozen funds: Processors can hold your balance for 90 to 180+ days after termination.
- Lost customers: Shoppers who can't check out don't wait around. They find another store.
- MATCH list risk: A termination for policy violations can place you on the MATCH list, making it significantly harder to get approved by any other processor — for up to five years.
- Reputational damage: Customers who see payment errors at checkout lose trust in your brand.
What Comes Next
The regulatory landscape for vape retailers isn't getting simpler. More states are implementing product directories. Federal enforcement is expanding. And payment processors are only getting more aggressive about de-risking their portfolios.
The merchants who survive and thrive in this environment will be the ones who treat compliance not as a checkbox but as a core business function — with the right payment infrastructure, up-to-date state registrations, real age verification, and a forward-looking compliance strategy.
Automate your compliance with Vapely
Vapely Compliance handles state-by-state regulatory tracking, product classification, and Shopify checkout blocking — so your payment processors stay confident.
Protect Your Store with Vapely →