CBD Merchant Accounts and Payment Gateways for the UK and EU
Published - 02 July 2025
Revised - 14 August 2026
Libby James is the founder and Managing Director of Merchant Advice Service. Since 2016, she has worked directly with businesses and payment providers across merchant accounts, card processing, payment gateways and complex provider requirements.
Libby specialises in high-risk, declined and harder-to-place merchants, as well as businesses requiring specialist payment methods, integrations or international support. She writes and reviews Merchant Advice Service content, drawing on practical experience gained from real merchant enquiries and provider relationships.
Finding card processing for a CBD business is rarely as simple as finding a payment provider that says it accepts “CBD”.
Two businesses both selling cannabidiol products can present completely different risks to an acquiring bank.
One might be an established retailer selling oils and capsules linked to recognised novel-food applications. Another might import its own products, sell several cannabinoids, make health claims on its website or ship into multiple countries.
From a payments perspective, those are very different businesses.
For CBD merchants, successful payment processing therefore depends on three things working together:
the product, the compliance evidence and the payment provider’s appetite.
A suitable CBD merchant account should support what the business actually sells, how it sells it and the countries in which it operates.
This guide explains what payment providers assess, what documentation CBD merchants may need, why applications get declined and when established businesses should consider reviewing or switching their existing card-processing arrangement.
Yes, potentially.
UK CBD businesses can obtain merchant accounts and payment gateways, but provider choice is more restricted than it is for conventional retail.
Approval normally depends on factors including:
The important point is that an acquiring bank should knowingly approve CBD activity.
Opening a standard ecommerce account and describing the business simply as “health products”, “supplements” or “cosmetics” can create problems later if the provider discovers that CBD forms part of the range.
Merchant Advice Service is an independent UK payments information and provider-matching service with experience helping businesses assess payment options for specialist and higher-risk sectors, including CBD.
For CBD businesses, identifying a suitable provider requires a clear understanding of the products being sold, the jurisdictions involved, website and product information, applicable compliance requirements and the individual provider's acceptance criteria.
The main issue is not that CBD itself automatically makes a business unsafe.
The difficulty for acquiring banks is the regulatory complexity around the products.
CBD sits across several potential regulatory areas.
Depending on the product, these can involve:
Pure CBD itself is not controlled under the Misuse of Drugs Act, but the Home Office explains that consumer CBD products can contain controlled cannabinoids such as THC. Products containing controlled substances may themselves fall within controlled-drug legislation unless an applicable exemption or licensing route applies.
That means a payment underwriter cannot simply ask:
“Does this company sell CBD?”
They need to understand:
“What exactly does this company sell, what is in it, where did it come from and can the merchant demonstrate its route to market?”
That is the real underwriting issue.
One of the biggest mistakes when applying for a CBD merchant account is treating every CBD product as though it falls into the same category.
It does not.
Ingestible CBD products can fall within the novel-food regime.
The Food Standards Agency confirms that CBD extracts, isolates, synthetic CBD products and foods containing them are classed as novel foods. Novel foods require authorisation before being legally placed on the market.
England and Wales currently operate a register of CBD products linked to novel-food applications.
The register includes products that met the FSA's criteria for remaining on the market while their applications progress. The FSA makes clear that inclusion on the list does not amount to approval or endorsement.
For a CBD merchant account application, an underwriter may therefore ask:
This is much stronger evidence than simply telling a provider:
“All our CBD products are legal.”
CBD food businesses should not assume that the England and Wales Public List applies across the whole UK.
Food Standards Scotland is responsible for CBD food regulation in Scotland. As of July 2026, it states that CBD food products require novel-food authorisation and that no CBD food products have yet been authorised in Scotland. In March 2026, FSS launched consultation on the first three CBD novel-food applications.
This geographical distinction matters to payment providers.
A merchant selling throughout Great Britain may therefore face different regulatory considerations from one selling only in England.
A CBD skincare or cosmetic business creates a different underwriting profile from a CBD supplement retailer.
The payment provider may want to see:
Particular care is needed with medicinal claims.
The MHRA states that a CBD-containing product marketed for a medical purpose falls within medicines legislation. Medicinal products generally need the relevant marketing authorisation before lawful sale or advertising.
A cosmetic description such as:
“CBD massage balm”
therefore creates a very different compliance issue from claims that the product:
“treats arthritis”, “relieves chronic pain” or “reduces anxiety”.
The latter may cause both regulatory and acquiring problems.
CBD vaping should not automatically be treated as identical to CBD food or supplements.
The regulatory route and provider appetite can differ.
A business selling both:
should disclose the complete range rather than apply under whichever category appears easiest to place.
For a mixed vape and CBD retailer, the acquiring decision may depend on the most restricted part of the product range.
Merchants should be particularly careful about assuming that products described as “CBD flower”, “hemp flower” or “low-THC cannabis” have the same status as purified CBD.
Cannabis itself remains a Class B controlled drug, subject to limited statutory exceptions and licensing arrangements. The Home Office's guidance explains that the legal status depends on the actual plant material and controlled cannabinoids involved.
A payment provider may therefore refuse products even where the merchant believes they are permitted.
Legal status should be established independently rather than relying on a supplier description or another retailer selling the same product.
A recurring issue with CBD merchant account applications is not necessarily the business itself.
It is that different parts of the application tell different stories.
For example:
The application says the merchant sells CBD oils.
The website also contains:
The merchant says it is a retailer.
Supplier documents suggest it is also:
The business says products are compliant.
But the underwriter cannot easily match:
The problem becomes uncertainty.
And in higher-risk underwriting, uncertainty often produces either:
more questions, slower approval or a decline.
A strong CBD merchant account application should make it easy for an underwriter to understand the entire product chain.
Requirements vary between providers, but established CBD businesses should expect more detailed due diligence than a conventional ecommerce retailer.
This may include:
Providers may request:
This can be particularly important for CBD.
An underwriter may ask for:
A generic certificate for the ingredient may not necessarily answer questions about the actual finished product being sold.
Where possible, documentation should clearly connect the product on the website with its manufacturer, batch and regulatory evidence.
Certificates of analysis, often referred to as COAs, can be important in CBD underwriting.
They can help demonstrate what a product actually contains.
Depending on the product, testing might include:
The FSA has previously commissioned analysis of CBD products looking at areas including cannabinoids, contaminants, pesticides, metals and extraction-related residues.
For payment underwriting, the important issue is often not simply possessing a laboratory report.
It is whether the report can be connected to:
the product being sold + the supplier + the relevant batch or formulation.
CBD businesses sometimes concentrate heavily on company documents and forget that the underwriter is also likely to inspect the website.
The website should accurately explain:
The product descriptions should also match what was disclosed in the merchant account application.
This is one of the biggest areas where an otherwise credible CBD application can become problematic.
The FSA stated in June 2026 that there are currently no authorised health claims for CBD foods and that CBD food businesses should not claim their products relieve pain, improve sleep or treat illness.
The ASA similarly warns businesses that unlicensed CBD products should not be presented as medicines or advertised using medicinal claims.
That means wording such as:
can create significant issues.
Payment providers may review:
Removing a claim from the checkout page while leaving the same claim across social media does not necessarily solve the problem.
The FSA currently recommends that healthy adults consume no more than 10mg CBD per day from CBD food products.
It advises that vulnerable groups including under-18s, pregnant or breastfeeding people, people trying to conceive and people taking medication should avoid CBD unless under medical direction.
This is consumer-safety guidance rather than a payment rule.
However, payment providers assessing CBD merchants may look at:
because these help demonstrate how the business approaches product compliance.
There is rarely one universal reason.
Common problems include:
Some acquiring banks simply exclude the sector.
A perfect application does not change a provider's risk policy.
An application may be accepted for one product type but later reviewed when additional restricted products are discovered.
The provider may not be able to establish:
Health or medicinal claims can alter how the product is viewed.
The provider may support UK CBD retail but not sales into all of the merchant's overseas markets.
An established payment account does not automatically cover a materially different product range.
Another provider may still consider the business, but it needs an accurate explanation of what happened.
For example, a CBD business may also sell:
The entire website normally needs to fit within the provider's acceptable-use policy.
Not every CBD business contacting MAS needs a new account because it has been declined.
Some already process successfully but have been with the same high-risk provider for several years.
That creates a different question:
Does the current CBD merchant account still represent good value?
CBD businesses often obtain their first account when they have:
The pricing and reserve agreed at that stage may reflect those circumstances.
A business may now have:
but still be paying the same original high-risk pricing.
That is a sensible point to review the market.
Potentially.
There is no guarantee, because the replacement acquirer must still be comfortable with the CBD business.
But an established merchant may find differences in:
The highest-value comparison is normally based on actual merchant statements, not an advertised rate.
For an established CBD merchant considering switching, MAS would ideally look at:
three recent merchant statements + current product range + website + current reserve and settlement terms.
That allows the cost question and the underwriting question to be considered together.
This is particularly important in CBD.
A new salesperson may offer an attractive headline price before the compliance team has reviewed:
That is not the same as having a properly approved CBD merchant account.
Before cancelling an existing facility, confirm that the replacement provider has knowingly underwritten the actual business.
For an established CBD business, continuity can be more valuable than saving a small amount on transaction fees.
Some CBD merchants are asked to maintain a reserve.
This can mean a percentage of card turnover is held for a defined period to protect the acquirer against future liabilities.
Whether a reserve is required can depend on:
A CBD merchant that accepted a reserve when first launching can ask whether it remains necessary after developing a strong processing history.
Possible outcomes might include:
The provider is not required to agree.
However, the cash-flow effect should be included when comparing merchant accounts.
A provider charging slightly less but holding considerably more cash might not be the better commercial option.
A merchant account and payment gateway perform different functions.
The acquiring account allows the business to accept and settle card transactions.
The payment gateway connects the ecommerce checkout to the payment infrastructure.
A CBD ecommerce business may therefore need both:
CBD-compatible acquiring + a CBD-compatible gateway.
Gateway requirements may include:
A gateway integration working technically does not mean the underlying acquiring bank has approved CBD.
Both sides of the arrangement should support the business.
An ecommerce platform and the payment provider are separate considerations.
A merchant can potentially operate its website on a mainstream ecommerce platform while using an external payment gateway and acquiring arrangement suitable for CBD.
Before changing providers, check:
Do not rebuild a functioning ecommerce website unnecessarily if the actual problem is the acquiring arrangement.
CBD ecommerce merchants can face disputes for reasons including:
Useful controls can include:
Chargeback performance can influence both provider appetite and future pricing.
Subscription or repeat-delivery CBD models introduce additional considerations.
The merchant should make clear:
The provider also needs to knowingly support recurring transactions.
Subscription complaints can become chargebacks quickly when consumers do not recognise repeat billing.
Cross-border CBD sales can make acquiring materially more complicated.
A product that can be sold through one regulatory route in England should not automatically be assumed to be permissible throughout Europe.
Within the EU, novel foods require pre-market authorisation through the applicable EU regime, while national rules and controlled-substance requirements can also affect individual markets.
A CBD merchant selling internationally should therefore be ready to identify:
Payment providers may approve some markets and exclude others.
Do not use a payment provider's acceptance as evidence that selling the product into a particular country is lawful.
Potentially.
A second acquiring route can sometimes be appropriate for:
But every provider should know what it is processing.
A secondary account should never be used to:
For many CBD businesses, one properly underwritten and appropriately priced account is preferable to several fragile arrangements.
Do not immediately submit applications to every high-risk provider available.
First establish why the account was closed.
Possible reasons include:
Ask the provider, where possible, for:
Then gather the documentation a replacement provider will need.
MAS has a separate guide to terminated merchant accounts explaining the wider issues around replacement processing, MATCH and Visa merchant-screening systems.
This is probably the simplest test of whether a CBD business is ready for acquiring review.
For every CBD product sold, could the merchant identify:
If the answer is unclear, the payment provider may struggle with exactly the same questions.
Resolving those gaps before applying can prevent a great deal of unnecessary back-and-forth.
Do not compare providers on price alone.
Confirm exactly which products are accepted.
Check where customers can be located.
Compare:
Check:
Understand:
Confirm:
Check:
And most importantly:
obtain confirmation that the provider has knowingly accepted the actual CBD activity.
Merchant Advice Service has experience helping businesses with restricted and more complex payment requirements, including CBD.
The objective is not to send an application everywhere.
It is to understand the merchant first and consider routes that fit the actual business.
MAS may help with:
This includes understanding:
before considering suitable providers.
A decline does not necessarily mean the business cannot obtain card processing.
The first question is why the original provider was unsuitable.
Where a merchant already has card-processing history, MAS can consider its existing arrangement against potential alternatives.
This may include:
Where another provider appears suitable, the new arrangement should be properly underwritten and tested before the existing facility is cancelled.
MAS can also consider gateway requirements including:
Final acceptance, pricing and terms remain with the payment provider.
CBD is a good example of why a merchant should not choose a payment provider purely from a generic list of “high-risk processors”.
Different CBD businesses can sell very different products and operate across different markets. Merchant Advice Service recommends establishing exactly what is being sold, where customers are located, how products are described and what supporting documentation is available before considering provider options.
The goal should be a payment relationship that accurately reflects the real business, rather than obtaining an approval that may later prove unstable because important information was not understood at the outset.
You do not need to send every compliance document in the first message.
A useful starting point is:
Also include:
This allows MAS to understand both the commercial opportunity and whether another provider is likely to support the product range.
The process normally starts with understanding the business.
For CBD merchants this may mean:
For an existing merchant switching provider, the current account should normally remain active while any replacement arrangement is reviewed, underwritten and tested.
This article provides general payments information rather than legal, food-safety, medicines or controlled-drug advice. CBD regulation depends on the exact product and market. Businesses should confirm their position with the appropriate regulator and obtain specialist legal advice where necessary.
Written or reviewed by Libby James, founder of Merchant Advice Service and specialist in merchant payments and complex provider requirements.