Hemp E-commerce
Hemp CBD Shopify store setup guide for 2026
DispensaryVA Editorial TeamPublished
Powered by StealthAgents
Powered by StealthAgents
Hemp E-commerce
Shopify is where most hemp and CBD brands build their ecommerce business. The platform supports tens of thousands of hemp stores across the United States, and its policy changes since the 2018 Farm Bill have made the setup process more predictable than it used to be.
The platform itself is not the hard part. The layers around it are: payment processing, FTC-compliant product copy, age verification, and shipping carrier compliance. Each one requires a specific decision before you launch, and missing any one of them can result in a suspended store, refused shipments, or an FTC inquiry. This guide covers each layer in the sequence you should build it.
Shopify allows hemp and CBD product sales in states where hemp commerce is legal. The 2018 Farm Bill federally legalized hemp products with less than 0.3 percent delta-9 THC by dry weight, and Shopify updated its policy to reflect that change, opening the platform to hemp merchants in eligible states.
To access hemp product listings, you submit a hemp merchant application through your Shopify store admin. The application asks you to attest that your products comply with applicable laws and contain no more than 0.3 percent delta-9 THC by dry weight. Shopify reviews the application, typically within a few business days, and enables hemp product listings once it approves.
One decision to make before you submit the application: Shopify Payments does not process hemp or CBD transactions. You need to integrate a third-party payment gateway from the start, not after the store goes live.
The merchant application checklist covers three categories. You confirm that your products contain no more than 0.3 percent delta-9 THC by dry weight. You confirm that you sell only to states where hemp is legal. You confirm that you will not make unsubstantiated health claims about your products.
Beyond the application, Shopify requires that every CBD product listing carry a compliant disclaimer on the product page itself. The disclaimer must state that the product is not intended to diagnose, treat, cure, or prevent any disease. Placing this language only in the site footer is not enough.
These are binding conditions, not suggestions. A store that violates either the application terms or the listing requirements can be suspended without advance warning.
Payment processing is the most operationally difficult part of running a hemp ecommerce business. Stripe, Square, PayPal, and Shopify Payments all decline hemp and CBD merchants. The path forward is a high-risk processor, and the selection is smaller than most new hemp operators expect.
The processors that reliably work for hemp stores in 2026 include NMI (Network Merchants Inc.), PayKings, iPayTotal, and Authorize.net when paired with a hemp-friendly acquiring bank. Each one charges higher fees than standard processors, typically 2.5 to 3.5 percent per transaction, along with a rolling reserve of 5 to 10 percent held for 90 to 180 days before it releases. These terms reflect the underwriting risk of the product category.
| Payment Processor | Transaction Fee | Rolling Reserve | Reserve Release Period | Accepts Hemp Merchants |
|---|---|---|---|---|
| NMI (Network Merchants) | 2.5%-3.5% | 5%-10% | 90-180 days | Yes |
| PayKings | 2.75%-3.5% | 5%-10% | 90-180 days | Yes |
| iPayTotal | 2.9%-3.75% | 5%-10% | 90 days | Yes |
| Authorize.net (hemp-friendly bank) | 2.9% + $0.30 | Varies by bank | 90-180 days | Bank-dependent |
| Stripe / PayPal / Shopify Payments | Not available for hemp | N/A | N/A | No |
Approval requires documentation. Expect to provide third-party certificates of analysis (COAs) for your products showing THC content at or below 0.3 percent, your USDA hemp license or state department of agriculture registration, business bank account history, and a written explanation of your product catalog and marketing practices. Operators who sell multiple product types should document each category separately. The documentation requirements are similar to what cannabis operators face when sourcing regulated payment options for their businesses.
The Federal Trade Commission applies the same standard to hemp CBD health claims that it applies to any unsubstantiated health claim. A product description that says a product relieves anxiety, reduces inflammation, or improves sleep is making a health claim. The FTC requires competent and reliable scientific evidence to support any claim that a product affects the structure or function of the body.
In practice, write product descriptions that say what the product is, not what it does to the body. "Full-spectrum hemp extract, 1,000 mg, from organically grown Kentucky hemp" is compliant. "Relieves chronic pain and reduces inflammation" is not. The safe vocabulary set includes: "contains CBD," "full-spectrum," "broad-spectrum," "isolate," and factual statements about cannabinoid content, serving size, and sourcing origin.
Avoid softened health language that still implies physiological effects. "Supports restful sleep" and "promotes calm" remain health claims under FTC interpretation even when framed carefully. Every hemp product listing should carry the FDA disclaimer: "These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease." Place it below the product description, not only in the site-wide footer.
Federal law does not require age verification for hemp products, and most states do not impose a hard requirement. But adding an age gate protects your store from chargeback patterns that high-risk processors flag when an operator sells age-sensitive products to buyers of unknown age.
Shopify does not include a native age verification gate. The three apps hemp operators use most are AgeChecker.net, Looksy, and Bouncer. AgeChecker.net connects to an identity verification API that checks buyer name and date of birth against public records. It is the highest-confidence option and the one many high-risk processors prefer to see in place. Looksy and Bouncer offer self-attestation gates, which are faster to set up but rely on the buyer's honesty rather than independent verification.
Configure the age gate at the cart or checkout entry point, not only on individual product pages. A buyer can reach checkout directly from a search result, a Google Shopping listing, or a shared link, bypassing any product-level age gate entirely.
USPS is the most reliable carrier for hemp products, including hemp flower. Following the 2018 Farm Bill and a subsequent policy update, USPS permits hemp products to be mailed provided the sender includes a signed self-certification document with each shipment. The certification attests that the contents are a compliant hemp product under the Farm Bill. The required self-certification format is available in the USPS Domestic Mail Manual and through the USDA hemp regulations page.
FedEx and UPS allow processed hemp products (oils, gummies, topicals, capsules) but prohibit hemp flower. Both carriers require that shipments comply with all applicable laws at the origin and the destination. Neither provides a hemp-specific certification form; the compliance burden falls on the shipper through standard shipping documentation.
Setting up compliant shipping in Shopify means two things. Configure your shipping zones to exclude states where your specific products are not legal to ship. And make sure your fulfillment workflow generates the correct USPS self-certification for every hemp shipment, whether you manage fulfillment in-house or through a third-party logistics partner.
Shopify's shipping zone settings let you block checkout to specific states at the product level. Under Settings, then Shipping and Delivery, you can configure product-level shipping profiles that restrict certain products from reaching states where they are prohibited.
Delta-8 THC and THCA products require a separate configuration. The legal status of delta-8 varies significantly across states. Many states have explicitly prohibited delta-8 even while they allow standard hemp CBD products. If your catalog includes delta-8 or THCA items, you need a dedicated shipping zone profile for those products that excludes the states where they are restricted.
The state restriction map is not static. New laws, emergency regulations, and attorney general guidance can change the legal status of a product type within a matter of weeks. Hemp brands that treat their shipping zone configuration as a set-and-forget setting typically discover the problem through carrier returns or chargeback disputes rather than proactive monitoring.
Once your Shopify store is live, the compliance work shifts from initial setup to ongoing monitoring. The recurring tasks fall into three categories: COA management, processor and carrier communications, and state law tracking.
COA monitoring means tracking batch numbers and re-testing schedules for every product in your catalog. Third-party COAs carry expiration timelines that vary by processor and sales channel requirement. A hemp business VA maintains a running COA log, flags upcoming re-test deadlines, and coordinates with your testing lab to keep documentation current.
Processor and carrier communication is the second standing task. High-risk payment processors conduct periodic account reviews and request updated documentation from hemp merchants. Carriers revise their hemp policies without providing much lead time. A VA assigned to this track monitors policy channels and alerts you when changes affect your store's operations.
State law tracking is the third. DispensaryVA's hemp business VA services cover all three of these tasks for brands that want a dedicated compliance resource without pulling the founder away from product development and marketing. A dedicated support role can monitor assigned policy sources, maintain review records, and route changes to the operator without taking over legal or compliance judgment.
Does Shopify allow hemp and CBD products?
Yes. Shopify allows hemp and CBD product sales in eligible US states through its hemp merchant application. You submit the application through your store admin, attest to product compliance with the 2018 Farm Bill, and receive approval before listing hemp products. Shopify Payments does not process hemp transactions, so a third-party payment gateway is required regardless of your product type.
What payment processor should I use for my hemp Shopify store?
The processors that reliably work for hemp stores in 2026 include NMI, PayKings, iPayTotal, and Authorize.net with a hemp-friendly acquiring bank. All carry higher fees and reserve requirements than standard processors. Approval requires product COAs, business bank history, and your USDA hemp license or state agricultural registration.
Do I need age verification on my hemp store?
Federal law does not require it, but adding age verification at checkout reduces chargeback exposure and satisfies many high-risk processor preferences. AgeChecker.net, Looksy, and Bouncer are the most-used Shopify apps for this purpose. Configure the gate at checkout entry, not only on individual product pages.
Can I ship hemp products with USPS?
Yes, including hemp flower. USPS allows hemp shipments under the 2018 Farm Bill provided each shipment includes a signed self-certification document. FedEx and UPS allow hemp oils, gummies, topicals, and capsules but do not allow hemp flower under their current policies.
What health claims can I make about my hemp products?
You cannot make disease claims or unsubstantiated health claims under FTC guidelines. Product descriptions should state what the product is, not what it does to the body. Every hemp product listing should carry the FDA disclaimer stating the product is not intended to diagnose, treat, cure, or prevent any disease.
How do I keep my state restriction settings current?
Review your Shopify shipping zones against the current state hemp law map at least quarterly, and more often if you sell delta-8 or THCA products. Assigning ongoing state law monitoring to a dedicated hemp business VA is the most reliable way to keep configuration current without consuming founder time.
Getting a compliant hemp Shopify store built requires sequencing: the merchant application first, then the payment gateway, then the product listings with compliant descriptions and proper disclaimers. The operational work that follows launch, monitoring COAs, staying current with processor requirements, and tracking state law changes, is what most hemp brand founders underestimate when they plan the go-live. A trained hemp business VA handles that standing work on a regular cadence so it does not pull the founder away from the decisions only a founder can make.