The payment processor crackdown is real — and accelerating

In Q1 2026, three of the most important payment processors for e-commerce merchants — Stripe, Shopify Payments, and PayPal — all quietly updated their acceptable use policies to either ban or severely restrict vape, nicotine, and hemp product sales. For thousands of Shopify store owners, the first sign was a termination notice in their inbox.

⚠ Critical NoticeIf you received a “merchant account review” notice from Stripe, Shopify Payments, or PayPal in 2026, you have 5–14 business days before your funds are frozen.

What triggered the 2026 crackdown

Three converging regulatory events forced payment processors to act:

1

FDA enforcement letters reached critical mass

The FDA issued over 1,200 warning letters to online vape retailers in 2025. Payment processors facing their own regulatory scrutiny began treating vape merchants as a liability category — the same way they treat firearms and adult content.

2

State AG enforcement created chargeback spikes

Multi-state attorney general investigations led consumers to file chargebacks en masse. Processors flag accounts with chargeback ratios above 1% — many vape merchants hit 4–8% during AG enforcement waves.

3

Card network updated merchant category codes

Visa and Mastercard tightened MCC 5912 (drug stores) and introduced new reporting requirements for tobacco-adjacent merchants, forcing acquirers to increase reserves or terminate accounts.

Which products are flagged

Processors aren't just flagging disposable vapes. Any Shopify store carrying these product categories is at risk:

Is your store at risk?

Run a free compliance audit and find out exactly which products and policies are exposing you to fines and payment processor terminations.

Run Free Audit →

How to protect your Shopify store

📋 Action RequiredCompliance documentation — not just compliance itself — is what keeps payment processors from flagging your account. You need to be able to prove you are compliant on demand.

The merchants who are keeping their payment processing accounts in 2026 are doing three things: running age verification through a processor-approved provider, maintaining a documented compliance audit trail, and removing any products that can't be legally sold online.

Vapely's automated compliance monitoring creates exactly that audit trail — a timestamped, regulation-by-regulation record of your store's compliance status that you can share with payment processors during account reviews.