PayPal CBD policy: why the ban happens
The PayPal CBD policy is a prohibited-business rule, not a legal ruling. Aggregators put thousands of sellers under one shared merchant account, so they exclude whole categories instead of underwriting each seller. Hemp and CBD get excluded that way. Your product can be federally legal and still be outside their contract.
What does the PayPal CBD policy actually say?
PayPal publishes an acceptable use policy that lists the businesses it will not support, and drug and drug-paraphernalia categories sit inside it. Hemp and CBD sellers have long been caught by that language. The policy is a live document that PayPal revises, so read the current version before you build a store around it rather than trusting a summary anyone wrote last year.
PayPal's current acceptable use policy is published at paypal.com. We link it rather than quote it on purpose, because these documents change and a stale quote on our site would be worse than no quote at all. Read it against exactly what you sell, including any delta-8 or delta-10 items, which tend to be handled differently from plain CBD.
Why does an aggregator ban a product that is federally legal?
Because an aggregator is not underwriting you. Stripe, Square and PayPal put thousands of sellers under one shared merchant account, approve them in minutes and sort out the risk afterward. That model only works if entire categories are excluded up front. CBD is legal and it is also a category the shared account cannot carry, so it gets written out.
The trade is speed for durability. Instant sign-up is genuinely useful when you sell coffee mugs. It is the wrong shape for a category the shared account was never built to carry, and it means the review that closes you comes after you have already sent traffic and built the store. We walk through how underwritten boarding works instead on high risk processing.
Is a policy ban the same thing as an illegal product?
No, and confusing the two costs sellers years. A prohibited-business list is a private commercial decision by a company choosing which risks it wants. Federal law on hemp and the acceptable use policy of a payments app are unrelated documents. One is a statute. The other is a contract term that the company can change on a Tuesday.
The legal side is settled enough to state plainly. Hemp with a delta-9 THC concentration of not more than 0.3 percent on a dry weight basis was removed from the federal controlled substances definition by the Agriculture Improvement Act of 2018, with the definition at 7 U.S.C. 1639o. Separately, the FDA has said CBD may not be lawfully added to food or marketed as a dietary supplement, which it explains here. Both facts matter to underwriting. Neither is what the aggregator's policy is about. Full detail sits on is CBD legal to sell online.
What happens when an aggregator closes a CBD account?
It usually arrives as an email, not a conversation. The account stops accepting payments immediately, and settled funds can be held while the review runs. Sellers often lose the payment method on their busiest week, because automated review tends to trigger on rising volume. There is rarely an appeal that puts the same account back.
Sellers describe the same sequence over and over. A good month, a volume spike, an automated flag, then a closure notice with a reserve on the balance. If you are reading this with an open account still running, treat it as borrowed time and build the replacement before you need it, not during the outage.
How is a real merchant account different?
A merchant account is underwritten for your business specifically, with a sponsor bank that has approved your product category before the first sale. You submit the file, the bank reviews it, and the approval is about you rather than about a category. That is slower to open and far harder to lose without warning.
The application asks more of you: business documents, product detail, lab certificates of analysis, your site's claims and your refund policy. That is the trade. The bank looks at your actual business before saying yes, so the yes means something. What underwriting looks for is on what makes CBD high risk, and the account itself is on CBD merchant account.
Can a CBD store still use a normal checkout?
Yes. The checkout your customer sees does not have to change. A hosted gateway takes the card, the transaction routes to a bank that has approved hemp and CBD, and the buying experience looks like any other store. What changes is who is behind the account, which is the part that decides whether it survives.
Most stores keep their platform and swap only the payment layer. See CBD payment gateway for how that connects, or hemp merchant account if you sell raw flower and biomass rather than finished consumer goods.
Stop rebuilding after every shutdown
Tell us what you sell and where you sell it. A Rooted Payments specialist walks you through what a bank actually needs to see.