If you sell CBD and you take cards through a popular point-of-sale app, the ground just shifted under your feet. The Square CBD policy has changed. Hemp and hemp-derived CBD products are on the way out, and the clock is ticking. This guide breaks down what the notice says, why it happened, which dates matter most, and how to rebuild your payment setup before your revenue takes a hit.
What the New Square CBD Policy Says
Merchants started receiving emails in early August 2026. The message told sellers that CBD and hemp-derived products, sold online or in person, would no longer be allowed on the platform, and pointed to a change in federal law as the reason. Two versions of the notice went out, and the difference matters a lot.
| Mixed catalog (some hemp) | Mostly hemp catalog | |
| Catalog action | Remove all CBD and hemp items by October 15, 2026 | Remove items, then export all data |
| Account status | Stays open for non-CBD sales | Closes November 5, 2026 |
| What you keep | Register, online store, reporting | Nothing after the closure date |
| Loan repayment | Continues as a share of daily card sales | Moves to an alternative arrangement, such as a payment plan |
| Business impact | A merchandising problem | A continuity problem |
Sellers who kept their accounts were told that only the affected CBD and hemp items were affected, and that non-CBD products could continue selling as usual. That sounds mild. For a shop where hemp drives most of the revenue, it is not mild at all.
A company spokesperson said the platform is notifying affected sellers and helping them update catalogs where possible so they can keep processing. A page that once marketed the platform to CBD businesses has since been taken down.
Why the Square CBD Policy Changed: The Federal Law Behind It
This is not a random risk decision. It traces back to one paragraph in a spending bill.
On November 12, 2025, Congress passed a new federal definition of hemp, and the President signed it with a one-year delay built in. Under Section 781 of the 2026 appropriations act, hemp shifts to a total THC standard of 0.3% on a dry weight basis, counting THCA and delta-8, and finished hemp cannabinoid products face a cap of 0.4 milligrams of total THC per container. The law is Public Law 119-37, Division B.
Three changes drive everything:
- Total THC replaces delta-9 only. The test now measures total tetrahydrocannabinols after decarboxylation, which sweeps in THCA, delta-8, delta-10, THCP, and other isomers.
- A container cap, not a serving cap. Any final product with more than 0.4 milligrams of total THC per container falls outside the definition. “Container” means the innermost retail packaging, such as a bottle, bag, box, can, or cartridge.
- Lab-made cannabinoids are out. Synthetic and lab-created cannabinoids are excluded. Industrial hemp grown for fiber and grain stays protected.
For scale: industry and legal analysts estimate the change makes roughly 95% of today’s hemp-derived THC products federally noncompliant once it takes effect. The affected CBD market is large, with the hemp THC category valued around $28 billion. Banks and credit card processors read that math the same way. A category that loses most of its legal product line becomes a category their risk teams no longer want.
Where the Law Stands Right Now
The date changed after the notices went out.
On August 8, 2026, the Senate passed a bipartisan funding bill carrying a provision that delays the hemp ban, and rejected an effort to strip that provision by a vote of 61-32. The full measure cleared the Senate 90-6. The House followed on September 1 with a 370-48 vote, and the President signed H.R. 6500, the Continuing Appropriations and Extensions Act, 2027, on September 2, 2026.
Section 781 of Public Law 119-37 now takes effect December 11, 2026 instead of November 12.
Read the fine print before you exhale. Three things did not change.
- The rule itself is untouched. The delay moves the date. It does not soften the total THC standard or the 0.4 milligram container cap.
- Converted cannabinoids keep the original date. The delay covers naturally occurring cannabinoids. Products built on cannabinoids synthesized or converted outside the plant, including delta-8, delta-10, HHC, and THC-O, lose federal hemp status on November 12, 2026 as originally scheduled. If your catalog leans on converted cannabinoids, your deadline did not move at all.
- The reprieve runs 29 days and is tied to a funding bill. Federal funding lapses December 11, the same day the hemp restrictions take effect. The next spending bill is the vehicle that could deliver another delay, a permanent framework, or nothing.
Standalone bills would push the date to 2028, repeal the change, or replace it with a regulatory framework. As of early September 2026, they remained in committee with no vote scheduled.
Asked before the delay passed whether the platform would revisit its stance if the ban were lifted or reversed, the spokesperson said the company continues to evaluate its policies but had nothing specific to share. Congress has since delivered the delay. The catalog and closure dates in the merchant notices have not moved.
The Deadline That Actually Matters for Your Business
The catalog removal deadline is October 15, 2026. Account closures for hemp-heavy sellers begin November 5, 2026. The statute now takes effect December 11, 2026.
Both commercial deadlines land ahead of the law they point to, and the gap just widened to nearly two months. That is normal. Processors do not price legal reality. They price legal risk, and they build in margin on both ends. So the business deadline arrives first, with no hearing or appeal window.
The delay proves the point rather than softening it. Congress moved the statutory date by 29 days. The merchant deadlines stayed exactly where they were.
What Happens If You Keep Selling Past the Deadline
Do not test this one. Square prohibits restricted items across the board, and selling outside its product limits has long put an account at risk of being shut down. Violations can trigger account reviews, funds held on your balance, or account termination.
Applying that same pattern to the current notice, leaving restricted CBD SKUs live in your Square dashboard after the stated date carries real risk to the account itself, not just to the listings. That reading is based on how the platform has handled prohibited items in the past, not on a published statement about this specific deadline. Pull the items on time and keep the decision out of a risk analyst’s hands.
Who Gets Hurt First
Not every hemp business feels this the same way. Retail storefronts still have a customer standing at the counter. Losing card acceptance is painful, but there is a cash drawer and foot traffic.
Wholesale operations run on invoices, terms, ACH, and checks. A card processor exit is an inconvenience. Direct-to-consumer brands have one way to get paid. A card, through a processor, in real time. There is no cash option online. When the channel goes dark, online merchant processing does not decline. It stops.
That is the cruel part of the timing. As states tightened milligram caps and retailers cleared shelves ahead of November, many small brands leaned harder on DTC. It became the highest-margin channel and the only one they truly owned. Now, the payment rail under that channel is the first thing to switch off.
How the Square CBD Program Worked, and What It Cost
To understand why this exit stings, it helps to remember what the program did for the industry.
For years, Square was one of the few payment processors that let hemp-derived CBD retailers accept payments through a mainstream platform. Most big names in the CBD space said no. Square said yes, and thousands of small shops built their registers, their online stores, and their reporting around that yes.
You Could Not Just Open an Account and Start Selling CBD
A standard Square account did not cover CBD. To sell CBD products, you applied to the Square CBD program and waited for approval.
Approved merchants had to submit a stack of documentation:
- Proof that you operate as a registered business entity, plus your business license
- Recent bank statements
- Detailed product descriptions for every item
- Your store URL and your social media accounts
- Your refund policy
- A certificate of analysis for each product from an accredited lab, confirming THC levels
Review timelines ran from several business days to a few weeks. Documentation gaps caused most delays.
Square Prohibits a Long List of Products
Square prohibits marijuana and marijuana derived products, anything with more than 0.3% THC content, and illegal drugs. Hemp flower sat on the prohibited list. CBD vape cartridges are generally not allowed either.
Geography mattered too. Coverage ran to US states where hemp CBD is legally permitted, and prohibited countries stayed off the map. Merchants also had to comply with all local, state, and federal regulations, along with Square’s own acceptable use of rules and PCI standards.
That last point deserves weight. Square’s policy could be updated at any time, and the program ran on beta-status terms. Beta means the rules and the economics can move without much notice.
Square CBD Fees Ran Above Standard Square Rates
Square charged more for CBD transactions than for ordinary retail sales. The reason is the high-risk classification. Regulatory uncertainty and higher chargeback exposure push CBD transactions into the high-risk bucket, and pricing follows risk.
Card-present sales on Square POS, online checkouts, and keyed-in payments through the virtual terminal each carried their own premium above the standard Square account rate. We keep those numbers general on purpose, since published rates move and beta terms move faster.
The gap looks small on a single sale. It compounds. As sales volume grows, higher processing fees pull real money out of margin every month, which is why growing CBD businesses often outgrow platform pricing long before they outgrow the platform’s features.
Health Claims Could Trigger Account Reviews
Square bans claims that CBD products treat, cure, or help with medical conditions. Anxiety, depression, PTSD, inflammation, and cancer all sat on the forbidden list, and the restriction covered product pages and marketing materials, not just packaging.
This one caught a lot of sellers. Many CBD brands build their entire marketing voice around wellness and symptom relief. Unapproved claims could trigger account reviews, account holds on your funds, or termination. Held funds hit cash flow immediately, and a small brand rarely has the reserves to wait it out.
Why This Happened So Fast: Aggregator vs. Real Merchant Account
The speed of this change tells you something about how the account was structured in the first place. A payment facilitator, sometimes called an aggregator, signs up merchants under one shared master account. You get instant onboarding and a clean app. You do not get your own merchant identification number. Your business sits inside a pool with millions of others. That structure is exactly why an entire category can be switched off with a single policy update and one email.
A dedicated merchant account through an ISO like AllayPay works differently. We review your account, then place you with an acquiring bank that underwrites you as an individual merchant. You hold your own MID. Your account exists because a bank looked at your specific operation and said yes.
| Payment facilitator | Dedicated merchant account through an ISO | |
| Onboarding | Minutes, automated | Days to weeks, document review |
| Underwriting | Category-level rules | Business-level review |
| Your MID | Shared | Your own |
| Pricing model | Published rates with a high-risk premium | Custom pricing built around your volume and mix |
| High-risk tolerance | Low | Built for it |
| Sudden sales spikes | Can trigger account reviews and holds | Reviewed against underwriting you already passed |
| Policy changes | Applied to a whole category at once | Negotiated with a named bank relationship |
| Support | Ticket queue | Dedicated account rep |
| Appeal path | Limited | Direct human contact |
Neither model is wrong. A coffee shop rarely needs the second option. A hemp brand almost always does.
Do Not Reboard on Another Aggregator
This is the most common mistake we see after a category exit. A merchant moves from one aggregator to the next, only to hit the same wall a few months later.
Several major online payment platforms have prohibited hemp-derived products for years and have not reversed those policies since the 2018 Farm Bill legalized them. One large acquirer exited the CBD category back in 2019, and the category has never returned to mainstream rails. A specialist ecosystem had to rebuild what disappeared in a month.
Store platforms add a wrinkle. Some let hemp merchants build a storefront, even though their in-house payments product still says no. In those cases, you need a third-party gateway to complete the checkout.
There is a second trap. Aggregator risk models watch for pattern changes. A strong month, a viral product, or a holiday run can look like fraud to an automated system. Sudden sales spikes trigger account reviews and account holds, and your money sits still at the exact moment you need it to restock. A high-risk merchant account built for your business absorbs that growth instead of flagging it.
If You Have a Loan Tied to Your Card Sales
Read the loan section of your notice twice. The outstanding balance and terms stay the same. The mechanism is what changes. Platform loans usually repay automatically as a percentage of daily card sales. Slow week, small payment. When the card rail goes away, that variable repayment can convert to a fixed payment plan.
Read that again. Fixed repayment tied to the calendar, starting right when sales through that channel drop. Open the conversation now. Get terms in writing. Bring your bookkeeper and CPA into the room before the closure date, not after.
Your 60-Day Migration Plan
Follow this order. The sequence matters more than the speed.
Step 1: Export everything this week
Pull your customer list, full catalog, complete sales history, all reports, and your tax forms from your Square dashboard. Do it now, not on the last day when everyone else is doing the same thing.
Your customer list is the real asset. Email and SMS files survive any platform. Everything else can be rebuilt.
Step 2: Score your catalog SKU by SKU
Pull your certificates of analysis. Calculate total THC per container for every item, and remember that THCA counts toward it now.
Sort each product into three buckets:
- Compliant under the new definition
- Reformulates cleanly
- Genuinely at risk
Guessing costs money in both directions. Some sellers pull products they could have kept. Others keep products they should have cut.
Step 3: Apply for a dedicated merchant account
Start this in week one, not week six. Underwriting takes longer than most sales reps suggest. Budget for weeks of document requests.
Have these ready before you apply:
- Business formation documents and licenses
- Recent bank statements and processing statements
- Certificates of analysis for each product
- Product pages and full item descriptions
- Refund and shipping policies
- Website with clear age gating and compliant claims
Much of this overlaps with what the Square CBD program already asked for, so pull the file you built for that application and update it.
Step 4: Build redundancy
Two merchant accounts. Two gateways. Treat payment rails the way careful operators treat banking relationships. Never single-thread the thing that collects your money.
Step 5: Run both rails in parallel
Do not cut over the same week your old rail dies. Process real orders through the new gateway. Confirm settlement timing and payout schedules. Test your checkout, your subscriptions, and your refunds.
Step 6: Clean the catalog by October 15
Remove the flagged items from both your in-person and online catalogs by the stated deadline in the notice you received.
Step 7: Cut over before November 5
Close the loop before the closure date arrives. Then let the old account go.
Five Mistakes to Avoid Right Now
- Waiting for Congress. The delay to December 11 already happened, and the merchant deadlines did not move with it. A statutory date can change with one vote. An underwriting decision does not.
- Applying to another aggregator. Fast approval today, closed account in six weeks.
- Skipping the COA math. You cannot plan a catalog you have not measured.
- Leaving your customer data on the platform. Export before, not after.
- Starting underwriting in October. Document review takes real time.
How AllayPay Supports CBD and Hemp Merchants
AllayPay is an ISO built for high-risk industries. We set up merchant accounts, so you hold your own MID. We also provide hardware and software integrations, from POS to payment gateways. You get payment processing specialists who stay with you after onboarding instead of a chat widget.
What that looks like in practice:
- Underwriting review before you apply, so surprises get caught early
- Placement with banks that already understand hemp risk
- Custom pricing built around your volume, your channels, and your product mix
- Multiple gateway options and balanced volume across accounts
- Fraud prevention and chargeback tools that work with your risk profile, not against it
- POS and inventory management options for the retail floor
- In-person and online setups, including terminals, virtual terminal access, and payment links
- A named account rep who answers the phone
The goal is simple. Stable payment infrastructure that grows with you, instead of a shared account that can drop an entire category overnight.
Ready to talk? Contact us today for a free account audit before the October deadline.
Frequently Asked Questions Regarding Square CBD Payment Processing
Does Square still allow CBD sales?
No. Under the current Square CBD program, CBD and hemp-derived products are being removed from the platform. Sellers were instructed to remove those items from their catalogs, both in-store and online, by October 15, 2026, and were told the products would no longer be permitted after that date.
Why did Square change its CBD policy?
The company cited a change to federal law that redefines which hemp and hemp-derived products are legal. Section 781 of the 2026 appropriations act shifts hemp to a total THC standard and caps finished products at 0.4 milligrams of total THC per container. Processors respond to that kind of shift by narrowing the categories they support.
When does the Square CBD policy take effect?
October 15, 2026 is the catalog removal deadline. November 5, 2026 is when accounts close for sellers whose catalogs are mostly hemp. The underlying federal change now takes effect December 11, 2026, after Congress moved it from November 12. The business deadlines still land first, and the gap is now close to two months.
How did the Square CBD program work?
A standard Square account did not cover CBD. Merchants applied to the Square CBD program and submitted business registration documents, bank statements, product descriptions, store and social media accounts, a refund policy, and a certificate of analysis for each product confirming THC levels. Approved merchants could then accept CBD payments in person and online.
Why were Square CBD fees higher than standard Square rates?
CBD carried a high risk classification. Regulatory uncertainty and higher chargeback exposure put CBD transactions in that bucket, so Square charges more for them than for ordinary retail sales. The program also ran on beta-status terms, which meant pricing and rules could change. We keep specific figures general, because published rates move.
What CBD products did Square prohibit?
Square prohibits marijuana and marijuana derived products, anything above 0.3% THC content, and illegal drugs. Hemp flower is prohibited, and CBD vape cartridges are generally not allowed. Sales into prohibited countries are blocked, and merchants must comply with local, state, and federal regulations.
Can I make health claims about CBD products on Square?
No. Square bans claims that CBD products treat, cure, or help with conditions such as anxiety, depression, PTSD, inflammation, or cancer. Those claims can trigger account reviews, account holds on your funds, or account termination.
What happens if I keep selling CBD products on Square after the deadline?
Based on how the platform has handled prohibited items historically, leaving restricted SKUs live past the stated date puts the account at risk of review, held funds, or termination. Remove the items on time and confirm the change in your Square dashboard.
Will my account be closed or can I keep selling other products?
It depends on which notice you received. Sellers with mixed catalogs were told that their accounts would remain open for non-CBD sales. Sellers whose catalogs are mostly hemp were told that the account itself would close. The second version has been reported publicly by an affected merchant rather than confirmed in a broad company statement, so treat the specific notice sent to your business as the authority.
Can I still sell CBD in person with Square?
No. The Square CBD policy covers both in-person and online sales. The instruction applies to the full catalog in both channels.
Does the Square CBD policy affect my Square Loan?
The outstanding balance and loan terms stay the same. Repayment mechanics can change. Sellers who lose card processing may be moved to an alternative arrangement, such as a payment plan, instead of the usual percentage of daily card sales. Ask for those terms in writing early.
Will Square reverse its CBD policy if Congress delays the ban?
There is no sign of it so far. Congress moved the effective date to December 11, and the October 15 and November 5 merchant deadlines stayed in place. Asked about this before the delay passed, the spokesperson said the company continues to evaluate its policies and has nothing specific to share.
What is the new federal hemp law?
Public Law 119-37, enacted November 12, 2025, reimposes federal controls over certain hemp products. It moves hemp to a 0.3% total THC standard, counting THCA and delta-8, and caps finished hemp cannabinoid products at 0.4 milligrams of total THC per container. The FDA was tasked with publishing guidance that identifies permitted cannabinoids and defines “container.”
Has the hemp ban been delayed?
Yes, by 29 days. The Senate passed the measure 90-6 on August 8, 2026, the House followed 370-48 on September 1, and the President signed H.R. 6500 on September 2. Section 781 now takes effect December 11, 2026. The delay covers naturally occurring cannabinoids only. Converted cannabinoids such as delta-8, delta-10, HHC, and THC-O still lose federal hemp status on November 12, 2026.
Which payment processors still accept CBD merchants?
Specialist high-risk acquirers and ISO agents continue to serve this space. Several major mainstream platforms have prohibited hemp-derived products for years and did not change course after the 2018 Farm Bill. Look for a provider like AllayPay that gives you your own dedicated merchant account rather than a shared one.
Can a high risk merchant account replace Square for CBD payments?
Yes, and for most CBD sellers it is the stronger long-term setup. A high risk merchant account gives you your own MID, underwriting built for high risk industries, custom pricing, and gateway options for both card-present and online sales. That is stable payment infrastructure you keep, rather than access you borrow.
Should I move to another popular payment app instead?
That approach usually backfires. Aggregators apply rules at the category level, allowing a hemp business to be removed in a single policy update.
How long does it take to get a CBD merchant account approved?
Takes, on average, less than 2-3 business days.
What should I do first if I receive the notice?
Export your data. Customer list, catalog, sales history, reports, and tax forms. Then apply for a dedicated merchant account here. Do those three things this week.
