How Ecommerce Platforms Handle CBD Payment Rules

Shopify will not move a single CBD sale through its own checkout, even though it powers more than 14% of the U.S. ecommerce market. A merchant can build the store and stock it, then reach the moment of payment only to find that Shopify Payments declines the category outright. The platform a CBD brand picks controls the storefront and the payment paths behind it, and some of those paths close the moment the first hemp order goes through. The differences between the major platforms are financial long before they are anything else.

Shopify’s Hemp Restriction

Shopify allows the sale of hemp-derived CBD, but its in-house processor, Shopify Payments, does not support the category. A CBD merchant has to connect an outside gateway instead. Shopify then applies a third-party transaction fee on top of the regular plan cost, a charge that stores using Shopify Payments avoid. The platform also asks the merchant to accept a legal agreement that places the compliance burden on the seller.

The result is a workable setup with extra steps. A CBD brand on Shopify gets the platform’s design tools and checkout flow, but it pays more per sale and takes on the legal responsibility itself. Among the busiest online stores, Shopify leads the field, which is why its hemp stance shapes the playbook many founders copy. The discovery that payments are not built in usually arrives late, after the store is already designed and close to launch.

The Third-Party Gateway Requirement

Because the built-in option is closed, a Shopify CBD store routes transactions through a separate gateway connected to an approved merchant account. Gateways such as Authorize.Net and NMI connect the storefront to the bank that holds the account. Setting up reliable payment processing for CBD on a platform like Shopify means lining up two pieces, the gateway and the underlying merchant account, before the store can take its first order.

A brand that skips the merchant account and assumes the platform will handle payments finds the checkout dead on launch day. The storefront software takes an afternoon. Authorize.Net and NMI pass the transaction to a bank that holds the approved merchant account, and that bank approval is the part that takes time, often one to three weeks, while the product line is reviewed.

Platform Flexibility Compared

BigCommerce takes a more open stance. It does not restrict hemp catalogs and supports a large set of outside gateways, around 55 of them, without adding a platform percentage on top of the third-party processor. BigCommerce has no payment system of its own, which is part of why it stays neutral toward outside gateways and the merchants that need them. WooCommerce, built on WordPress, gives the most control of the three. WordPress runs more than 40% of all websites, so its hosting and plugin options are wide, and WooCommerce itself is open-source and charges no platform transaction fee, so it accepts any compatible CBD gateway a merchant chooses.

WooCommerce powers roughly a third of all online stores by count, which gives CBD sellers a deep pool of compatible plugins and gateways to draw from. That flexibility matters to a CBD seller because it lowers the running cost and reduces the odds of a forced exit. Early CBD retailers favored WooCommerce for that reason, since a self-hosted store is harder to shut down than an account on a hosted platform that can revise its rules at any time.

Platform Lock-In and Account Risk

A hosted platform owns the terms, and it can change them. CBD merchants on hosted platforms have been removed before when policies tightened, which is the textbook case of vendor lock-in, the cost and difficulty of moving a store, its data, and its integrations to another system once it is established. A brand built entirely inside one hosted platform has little leverage if that platform decides hemp no longer fits its policy.

Self-hosted software like WooCommerce reduces that exposure because the store runs on infrastructure the merchant controls. The trade is more setup work and more maintenance, accepted in exchange for not depending on one company’s risk appetite.

Fees Layered on Top of Processing

The platform fee is separate from what the gateway and processor charge. On Shopify, a CBD store pays the monthly plan, the third-party transaction fee for not using Shopify Payments, and the high-risk processing rate on top. Those layers add up fast on a category that already pays a premium to accept cards.

Scale raises the totals and leaves the per-sale structure untouched. Shopify reached $378.44 billion in gross merchandise volume across its platform in 2025, a figure that shows how much commerce flows through these systems. Shopify’s own revenue passed $11.5 billion in 2025, yet a hemp seller on the platform still pays the same stacked rate a much smaller store does. The per-sale economics for a high-risk seller stay stacked with extra charges no matter how large the platform grows.

Regulation Behind the Platform Rules

Platform caution traces back to unsettled law. The Food and Drug Administration still does not permit CBD in food or supplements, and it has pointed to safety unknowns as the reason, asking Congress to write new rules instead. CBD also operates under a patchwork that differs by state and city. States like Colorado allow CBD in food and drinks while others forbid it, so a product legal to sell in one market can be barred in the next. A platform serving thousands of merchants avoids exposure to that uncertainty, so it pushes the category toward specialized processors and places the compliance duty on the seller.

A federal change under consideration would tighten hemp THC limits further, which would push some products off the market and force sellers to re-verify what they can legally ship. This is why the payment question and the legal question are the same question. A platform’s CBD policy shows how much regulatory risk it will tolerate, and that tolerance sets the rules every merchant on it follows.

Choosing the Right Platform for CBD

Before committing to a platform, a CBD founder should confirm one thing first, that a compliant gateway and merchant account can connect to it cleanly. The storefront features matter less than that connection, because a polished store that cannot take payment earns nothing. A 2023 Healthline survey found 25% of U.S. adults have tried CBD or are interested in it, and steady demand for its uses and benefits keeps pulling new sellers online. The ones who last tend to settle the payment path before they pick a theme. Confirm gateway compatibility, read the platform’s hemp policy in full, and secure the merchant account before launch.