Health and wellness payments for Cannabis businesses.
Cannabis businesses require specialised payment solutions due to the evolving regulatory landscape. Cardflo delivers a secure and adaptable payment orchestration platform, facilitating compliant transaction processing and revenue optimisation for both medical and recreational cannabis markets.
- Industry
- Cannabis businesses
- Category
- Health
- Cardflo support
- Yes
The overview
Cannabis payments involve a complex intersection of national legislation, regional regulations, and strict card scheme rules. Because many jurisdictions classify cannabis products as restricted or high risk, traditional merchant acquirers often decline to provide services, citing potential reputational risk or AML compliance concerns.
This gap is filled by specialised high risk PSPs and payment orchestration layers that can manage transactions through boutique acquirers or cross-border frameworks.
The mechanics rely heavily on precise Merchant Category Code (MCC) assignment and rigorous KYB processes to ensure that every participant in the flow is licensed and compliant.
For the merchant, this means managing a payments stack that is resilient to sudden changes in risk appetite from individual financial institutions.
Modern cannabis payment infrastructure focuses on transparency, ensuring that transaction descriptors are accurate and that fund settlement occurs through legitimate banking channels, avoiding the grey-market tactics that previously led to mass account terminations.
How it works
Merchant Onboarding and KYB
The merchant undergoes rigorous Know Your Business (KYB) checks. This involves verifying state-level or national licences for cultivation, distribution, or retail.
Acquirers require full transparency regarding the product range and ownership structure to ensure all activities align with both local law and the risk policies of the settlement bank.
Secure Transaction Authorisation
When a customer initiates a purchase, the gateway captures the card data and transmits it via 3DS protocols where required.
The transaction is tagged with the appropriate MCC and sent to a specialist acquirer that maintains a specific risk appetite for the cannabis sector, ensuring the issuer receives valid data.
Intelligent Smart Routing
To mitigate the risk of declines, the platform routes the transaction to the most appropriate acquirer based on geographical location, transaction value, and historical performance.
This distribution reduces the impact if a single banking partner chooses to pause processing for the cannabis vertical, maintains business continuity.
Automated Dispute Management
The system monitors for chargebacks and retrieval requests. Since high risk sectors often face higher fraud rates or 'friendly fraud', documented evidence including proof of delivery and licence verification is organised systematically.
This ensures that representment is handled efficiently to protect the merchant's MID and overall reputation.
Settlement and Reserve Management
After successful authorisation and capture, funds are settled into the merchant's account, typically following a short delay.
A rolling reserve is often applied by the acquirer to cover potential future disputes or refunds, providing a financial buffer that satisfies the risk management requirements of the scheme.
Why it matters
Banking Stability and Continuity
Cannabis merchants frequently face the risk of account closures if their primary acquirer shifts its risk policy. By utilising a payment orchestration approach with multiple acquirer connections, a business can avoid total operation outages.
This redundancy ensures that if one channel is restricted, volume can be shifted to another authorised partner without needing to re-integrate the entire checkout system or disrupt the customer experience.
High Risk Approval Optimisation
Issuer side declines are common in restricted industries due to lack of data clarity. Using specialised descriptors and ensuring the correct MCC is utilised improves the likelihood of successful authorisation.
This professionalised approach moves cannabis retail away from cash-only constraints, allowing for larger basket sizes and improved data analysis through digital payment records, which are essential for long term financial planning and scaling operations.
Regulatory notes
Scheme Compliance and Integrity
Card schemes like Visa and Mastercard have specific rules regarding the sale of cannabis. Merchants must ensure they operate only in jurisdictions where the product is legal and must adhere to strict 'Brand Protection' policies.
Failure to disclose the nature of the business or attempting to hide transactions through 'clean' MIDs can result in massive fines and permanent blacklisting on the MATCH list, which prevents the merchant from obtaining processing services in the future.
AML and KYC Obligations
Payment providers for the cannabis industry are subject to enhanced due diligence under Anti-Money Laundering (AML) regulations. This requires continuous monitoring of transaction patterns to detect suspicious activity.
Merchants must facilitate this by providing transparent sales data and maintaining up-to-date corporate documentation. In the EU, this also interacts with PSD2 and upcoming PSD3 directives regarding secure authentication and the reporting of fraudulent electronic payment transactions.
Use cases
Licenced Medical Dispensaries
Businesses providing pharmaceutical-grade cannabis under strict medical supervision require robust payment systems that can handle recurring prescriptions and categorise medical spending for tax purposes.
Hemp and CBD Retailers
Vendors of non-psychoactive cannabis derivatives often face similar banking hurdles. They benefit from global acquirer access to sell across jurisdictions with varying legal thresholds for THC content.
Cannabis E-commerce Platforms
Online retailers need advanced fraud prevention and age verification tools integrated into the payment flow to ensure compliance with delivery regulations and to minimise card-not-present fraud.
Wholesale Cultivation and Distribution
B2B entities require high-limit processing and efficient settlement for large volume transactions between growers, laboratories, and retailers, moving away from the security risks associated with cash-in-transit.
By the numbers
Typical scheme thresholds require high risk merchants to keep disputes below this range to avoid entering monitoring programmes.
Industry data suggests that moving from a generic gateway to a specialised high risk setup can significantly improve authorisation success.
This is a common sector standard for the retention of reserve funds to mitigate potential tail-end disputes and liability.
Related terms
Book a scoping call to see how Cardflo would set you up.
What's included.
- Integration with boutique and specialist acquirers specialising in high risk merchant categories.
- Support for 3D Secure to reduce fraudulent transactions and meet SCA compliance requirements.
- Dynamic routing of transactions to optimise approval rates across different geographical regions.
- Comprehensive monitoring of chargeback ratios to maintain good standing with card schemes.
- Detailed reporting and analytics for transparent reconciliation and tax compliance auditing purposes.
- Automated capture and refund management to streamline daily retail and wholesale operations.
- Access to network tokens to improve security and reduce the scope of PCI-DSS compliance.
- Customisable soft descriptors to improve customer recognition and reduce unintentional dispute requests.
- Multi-currency settlement options for international hemp and CBD traders seeking to minimise FX costs.
- Robust KYB and AML checks to ensure all supply chain participants hold valid licences.
Talk to an acquiring specialist about your MID setup.
Common questions.
Why is it difficult for cannabis businesses to obtain a standard merchant ID?
Most Tier 1 acquirers are governed by conservative risk management policies and federal banking laws that may conflict with regional cannabis legislation. Even where legal, the industry is classified as high risk because of its regulatory volatility and potential for higher-than-average chargeback rates.
Consequently, cannabis merchants usually require a specialised MID managed by an acquirer that has specific board-level approval to process for this sector, often involving higher scrutiny and different fee structures compared to low risk retail.
How does 3D Secure assist in cannabis payment processing?
3D Secure (3DS) adds an authentication layer that helps verify the identity of the cardholder. For cannabis merchants, this is particularly beneficial as it can shift the liability for certain types of fraud-related chargebacks from the merchant to the issuer.
Furthermore, many high risk acquirers mandate the use of 3DS to mitigate the inherent risks of the sector. Implementing SCA via 3DS 2.
0 also ensures compliance with PSD2 if the business operates within the European Economic Area.
What is the role of the Merchant Category Code in this vertical?
The MCC is a four-digit number used to classify a business by the types of goods or services it provides.
In the cannabis industry, using the wrong MCC (such as misrepresenting a dispensary as a general health food store) is considered transaction laundering and can lead to immediate account termination and heavy fines from card schemes.
Compliant processing requires using the MCC that most accurately reflects the business activity, even if it results in higher interchange rates.
Can cannabis merchants use standard payment gateways like Stripe or PayPal?
Generally, mass-market PSPs have strict terms of service that prohibit the sale of cannabis or cannabis-derived products. Attempting to use these services often leads to frozen funds and permanent bans.
Instead, cannabis businesses must use a payment orchestration platform or a gateway that specifically connects to high risk acquirers who are comfortable with the legal complexities of the industry and provide the necessary infrastructure for compliant settlement.
What is a rolling reserve and why is it applied to these accounts?
A rolling reserve is a risk management tool where the acquirer holds back a percentage of the merchant's gross sales (typically 5% to 10%) for a set period, such as six months.
This fund acts as a security deposit to cover potential chargebacks, refunds, or scheme fines.
In the cannabis sector, this is a standard requirement due to the higher risk profile, ensuring that the acquirer is not left with a financial liability if the merchant ceases trading.
How does tokenisation benefit cannabis retailers?
Tokenisation replaces sensitive card data with a non-sensitive equivalent, known as a token. For cannabis retailers, this reduces the burden of PCI-DSS compliance and protects customer data from breaches.
If a merchant uses network tokens, they can also benefit from higher authorisation rates, as these tokens are updated automatically by the schemes when a card expires or is replaced, ensuring that recurring or returning customer payments do not fail unnecessarily.
Related industries.
Ready for velocity?
Tell us about your business. We'll match you with the right acquiring partners and the right route, typically inside a week.