A payment gateway for CBD is the software that carries a card payment from your online checkout to a merchant account whose bank has approved hemp-derived CBD. In 2026 that usually means Authorize.Net or NMI connected to a high-risk CBD merchant account, because the payment options built into Shopify and WooCommerce exclude CBD, Stripe restricts it and Square told sellers to remove CBD and hemp items by October 15, 2026. The gateway is the easy part. Whether you can take cards at all depends on the account behind it.
If you are opening your first CBD store, that order of operations saves you weeks of setting up a checkout that never gets switched on. If a processor has just dropped you, it explains why moving to another all-in-one platform rarely sticks, and what to put in place instead so the next account lasts.
CBD Payment Gateways: Key Takeaways
- A CBD payment gateway is checkout software; the merchant account behind it is what has to approve CBD.
- Authorize.Net and NMI are the gateways most CBD stores use, on an account from a high-risk provider.
- Shopify Payments and WooPayments exclude CBD, Stripe restricts it, and Square’s cutoff passed on October 15, 2026.
- Look for hosted card fields, a card vault, an account updater, fraud filters and 3-D Secure.
What Is a Payment Gateway for CBD, and How Is It Different From a Merchant Account?
A payment gateway for CBD connects your checkout to the card networks, while the merchant account is the bank relationship that decides whether you may process CBD sales in the first place. Most online sales pass through three parties. The gateway takes the card details from your checkout page, encrypts them and sends them on for approval. The processor routes that request through Visa or Mastercard to the customer’s bank. The acquiring bank holds your merchant account, settles the money to your business account and carries the risk if sales go wrong.
That last party is the one that cares about CBD. Gateway software such as Authorize.Net and NMI does not publish CBD rules of its own, because it does not hold your funds. The acquiring bank does, and it underwrites your products, your website and your lab results before it lets a single card through. That is why the same gateway can work perfectly for one CBD brand and be unavailable to another.
What the gateway does
- Collects card details securely at checkout
- Sends each payment to the card network for approval
- Stores cards as tokens for reorders and subscriptions
- Runs fraud filters, 3-D Secure and refunds
What the merchant account does
- Approves your CBD products in underwriting
- Sets your processing limits and any reserve
- Deposits card sales into your bank account
- Handles chargebacks with the card networks
All-in-one platforms such as Stripe, Square, Shopify Payments and WooPayments blur this line. They bundle the gateway and the account into one sign-up, so when their policy changes, both disappear at once. A standalone gateway on a dedicated CBD merchant account keeps those decisions separate. You choose the checkout software, and a bank that has already reviewed hemp-derived CBD holds the account. Our CBD payment processing page explains what that bank looks at before it approves you.
Best CBD Payment Gateways to Consider in 2026
The CBD payment gateways that work in 2026 are standalone gateways, mainly Authorize.Net and NMI, connected to a merchant account approved for hemp-derived CBD. The built-in options on the big platforms do not. Here is how the options CBD owners ask us about compare as of October 2026.
| Option | Works for CBD? | What it is | Store platforms |
|---|---|---|---|
| Authorize.Net | Yes, on a merchant account approved for CBD | Standalone gateway | Shopify (payments app), WooCommerce (official extension), Magento, BigCommerce |
| NMI | Yes, through a provider whose bank approves CBD | Standalone gateway sold through partners | Shopify (NMI app), WooCommerce and Magento (third-party plugins), BigCommerce |
| Payment Nerds CBD gateway setup | Yes, once your account is approved | Authorize.Net or NMI on a CBD merchant account we set up | Shopify, WooCommerce, Magento, BigCommerce |
| Shopify Payments | No. Excludes hemp, CBD and THC | Built-in gateway and account | Shopify |
| WooPayments | No. WooCommerce says it cannot be used for CBD | Built-in gateway and account | WooCommerce |
| Stripe | Restricted. Needs Stripe’s review; CBD over the local THC limit is prohibited | Gateway and account in one | Most platforms |
| Square | No. Sellers had to remove CBD and hemp items by October 15, 2026 | Gateway and account in one | Square Online, WooCommerce |
| PayPal | No published CBD program | Wallet and account in one | Most platforms |
Authorize.Net
Authorize.Net is the gateway most CBD stores start with, because almost every store platform supports it and high-risk providers board it routinely. Its standard plans include the Advanced Fraud Detection Suite, a Customer Information Manager that stores cards as tokens, Automated Recurring Billing and an Account Updater that refreshes expired cards. It suits a store that sells one-off orders and some subscriptions on Shopify, WooCommerce or Magento.
Pros
- Widely supported, including an official WooCommerce extension
- Fraud filters, card vault and recurring billing on standard plans
- Easy for a high-risk provider to set up on a CBD-approved account
Considerations
- Its Shopify app is only offered in certain countries
- Recurring billing is basic next to a dedicated subscription app
- Approval still depends entirely on the merchant account behind it
NMI
NMI is a white-label gateway that merchants usually get through a payment provider, which is why it shows up so often in high-risk setups. Its Customer Vault stores cards as tokens, its Automatic Card Updater keeps stored cards current, and its fraud tools and Payer Authentication handle 3-D Secure. It suits growing brands that want more control over routing, subscriptions or several merchant accounts behind one checkout.
Pros
- Flexible, with a strong card vault and card updater
- Can sit in front of more than one merchant account
- Shopify app plus WooCommerce and Magento plugins
Considerations
- WooCommerce and Magento plugins come from third parties, so quality varies
- You get it through a provider, so support runs through them
- Features differ by the plan your provider offers
Shopify Payments, WooPayments, Stripe, Square and PayPal
These are fine payment tools for low-risk products, and many CBD brands keep one running for merchandise that is not hemp. They are not a home for CBD sales. Shopify says Shopify Payments does not support hemp, CBD or THC products, and WooCommerce says WooPayments cannot be used for them. Stripe lists CBD with negligible THC as a restricted business that needs its review, and prohibits CBD over the local THC limit, including edibles. Square told sellers to remove CBD and hemp items by October 15, 2026, and PayPal’s acceptable use policy has no CBD program. One trap is worth knowing: WooCommerce’s help page still names Square as the U.S. option for CBD stores hosted on WordPress.com, which no longer works after Square’s cutoff. Self-hosted WooCommerce can use any gateway.
If one of these platforms has just closed your account, the move is not to a different all-in-one platform. Move to a CBD merchant account with a gateway on top. Our comparison of the best CBD merchant accounts covers the providers that board these accounts, with fees, reserves and approval times.
What Happens When a Customer Pays for CBD Online?
Every online CBD order passes through the same five steps, usually in a couple of seconds:
- The customer enters their card in payment fields that the gateway hosts on your checkout.
- The gateway encrypts the card and checks it against your fraud filters.
- The request goes to the card network and on to the customer’s bank.
- The bank approves or declines, and the answer comes back through the gateway.
- Your merchant account settles the approved sale to your bank, usually within a few business days.
If the account behind step five is not approved for CBD, the first four never get the chance to run.
What Features Should You Look for in a CBD Payment Gateway?
Look for a gateway that keeps card data off your website, stores cards safely for reorders, and gives you the fraud and dispute tools a high-risk account is judged on. CBD merchant accounts are watched closely for chargebacks, so a gateway’s fraud settings matter as much as its price.
Gateway features to confirm
- Hosted card fields: card numbers go straight to the gateway, never your server. A hosted or pop-up payment form can keep you on the shortest PCI questionnaire, SAQ A, which since 2025 also asks you to confirm your site is protected against malicious scripts. Fields built into your own page usually mean the longer SAQ A-EP.
- A card vault: tokens instead of card numbers, so reorders and subscriptions work without storing cards yourself.
- An account updater: refreshes expired or reissued cards so subscription renewals do not fail.
- Fraud filters: address and CVV checks, order-velocity limits and IP or country rules you can tune.
- 3-D Secure: for authenticated sales, Visa shifts liability for qualified fraud chargebacks to the card issuer.
- A clear billing descriptor: a store name customers recognize on their statement, which prevents “I don’t know this charge” disputes.
- Card-data portability: a written process for moving stored cards if you ever change gateways.
Card-data portability is the one owners forget. Gateways such as NMI can move stored cards to another PCI-compliant provider through a secure transfer, but it needs both providers’ approval and can take days to weeks. Ask before you sign, not on the day your account is closed. Our pricing page lists our published rates.
How Do You Set Up a Payment Gateway for a CBD Store?
To set up a payment gateway for a CBD store, get the merchant account approved first, then connect the gateway that account supports to your store and test it before launch.
Apply for a CBD merchant account
Have your product list, current certificates of analysis (lab reports), website policies and processing history ready. Our CBD merchant account guide lists what underwriters ask for.
Choose the gateway that fits your platform
Authorize.Net or NMI, matched to your store platform, your subscription app and the fraud tools you want.
Connect it to your store
Add the gateway’s app or extension in your store’s payment settings and paste in the credentials from your provider.
Turn on fraud filters and 3-D Secure
Set address and CVV rules and velocity limits before you take a live order.
Test in sandbox, then live
Run test orders, then one real sale and one refund, and check both reach your gateway and bank deposit reports.
Platform details differ. On Shopify, the gateway replaces Shopify Payments and Shopify charges a fee on outside gateways, which our guide to how CBD payments work on Shopify walks through. If you also sell in person, the same merchant account can run your counter. Our Shopify POS for CBD retail guide and our guide to online POS for regulated products cover the register side.
How Do the 2026 Hemp Rules Affect CBD Payment Gateways?
The 2026 hemp rules do not change how a gateway works, but they change which products your merchant account will let it process. Under Public Law 119-37, hemp is measured by total THC, and final hemp-derived products are capped at 0.4 milligrams of total THC per container. Products with cannabinoids that cannot be naturally produced by the plant lose hemp status on November 12, 2026, and the rest of the new definition takes effect on December 11, 2026, after Public Law 119-103 moved it.
Expect your acquiring bank to review your catalog against those rules. Remove anything over the new limits from your store before the date that applies to it, because a declined product review can put the whole account at risk, not just one SKU. Congress could still move these dates, so check the current law before a large order.
CBD Payment Gateway FAQs
Q: What is the best payment gateway for CBD?
A: For most stores it is Authorize.Net or NMI on a merchant account approved for hemp-derived CBD. The account matters more than the gateway, because the acquiring bank decides whether you can process CBD at all.
Q: Can I use Stripe for CBD?
A: Only with Stripe’s approval. Stripe lists CBD with negligible THC as a restricted business that needs its review, and it prohibits CBD with THC above the local legal limit, including CBD edibles.
Q: Does PayPal accept CBD payments?
A: PayPal does not publish a CBD program for U.S. merchants, and its acceptable use policy bars transactions involving certain controlled substances or products that present a risk to consumer safety. Get written approval before relying on it.
Q: Is a payment gateway the same as a merchant account?
A: No. The gateway is the software that sends card payments for approval. The merchant account is the bank relationship that approves your CBD products and deposits your sales.
Q: Can I keep my saved customer cards if I switch gateways?
A: Usually, yes. Gateways can move stored cards to another PCI-compliant provider through a secure transfer, but both providers have to agree and it can take days to weeks.
Q: Does Payment Nerds support THC or delta-8 products?
A: No. Payment Nerds does not support marijuana or THC sales. Hemp-derived CBD stores are reviewed individually against the current federal hemp definition and the acquiring bank’s rules.
How to Choose the Right CBD Payment Gateway
The right payment gateway for CBD is the one that sits on an account built for CBD. Authorize.Net and NMI both do the job well. What decides whether your checkout is still running next year is the bank that approved your products, how your fraud tools are set up and whether you can take your stored cards with you if you ever need to.
At Payment Nerds we set CBD brands up with all of it: a merchant account underwritten for hemp-derived CBD, an Authorize.Net or NMI gateway connected to your Shopify, WooCommerce, Magento or BigCommerce store, and the fraud and dispute settings tuned before launch. If you are opening your first store or replacing an account that was closed, our CBD merchant account team will look at what you sell and confirm what fits. You can also read our guide to getting a CBD merchant account first, or see how our CBD payment gateway setup works.
Sources
- Shopify Help Center. “Payment options for hemp sales on Shopify.” Accessed October 2026.
- WooCommerce. “Selling CBD with WooCommerce.” Accessed October 2026.
- Stripe. “Prohibited and Restricted Businesses.” Accessed October 2026.
- PayPal. “Acceptable Use Policy” (last updated October 29, 2022). Accessed October 2026.
- Marijuana Moment. “Square Tells Businesses To Stop Selling Hemp And CBD Products In Light Of Upcoming Federal Ban.” 2026. Accessed October 2026.
- Authorize.Net. “How Payments Work.” Accessed October 2026.
- NMI. “Payment Gateway.” Accessed October 2026.
- PCI Security Standards Council. “Important Updates Announced for Merchants Validating to Self-Assessment Questionnaire A.” 2025. Accessed October 2026.
- Visa. “Visa Secure” (merchant resources). Accessed October 2026.
- U.S. Congress. “Public Law 119-37” (hemp definition, Sec. 781). Accessed October 2026.
- U.S. Congress. “Public Law 119-103” (effective dates). Accessed October 2026.
