How Vape and Tobacco Shops Accept Credit Card Payments

Written by Tyler DurbinApril 26, 2026
Merchant Alternatives is reader-supported. When you make purchases through links on our site, we may earn a commission. This is always at no additional cost to you and helps us continue to provide accurate, transparent and up-to-date information on the things that matter most to your business, for free.

TL;DR: Vape shops and tobacco retailers cannot use Stripe, Square, PayPal, or Shopify Payments -- all four prohibit tobacco and vape products in their terms of service. To accept credit cards, you need a dedicated high-risk merchant account through a specialized ISO. Expect processing rates of 3.5 to 5 percent, rolling reserves of 5 to 15 percent held for up to 6 months, and annual card network registration fees totaling $1,450. Online sellers face additional hurdles: the PACT Act requires ATF registration and monthly state reporting, USPS and all major private carriers have banned vape shipments, and mandatory age verification software is non-negotiable. This guide covers every layer -- from MCC codes to chargeback prevention -- so you can build a compliant, stable payment stack for your vape or tobacco business.

Table of Contents

The US tobacco retail market generates approximately $75.9 billion in annual revenue, and the vape and e-cigarette segment alone is projected to reach $42 billion by 2030. Despite that scale, owners of vape shops, cigar stores, smoke shops, and tobacco outlets face a payment processing landscape that treats them as one of the most restricted merchant categories in retail. Mainstream processors shut down accounts without warning. Major shipping carriers refuse to touch vape products. Federal and state regulators can make entire product lines illegal overnight. And yet, credit card acceptance is not optional -- cash-only operations lose customers and signal instability to landlords, banks, and suppliers alike.

This guide explains exactly how the payment processing system treats vape and tobacco merchants, what you need to get approved, what it costs, and how to stay compliant as you grow.

Why Vape and Tobacco Shops Are Classified High Risk

When a vape or tobacco shop applies for a merchant account, the acquiring bank assigns a Merchant Category Code (MCC) that determines how the business is classified for underwriting and pricing. The primary code for tobacco retailers is MCC 5993 -- Cigar Stores and Stands, which covers brick-and-mortar cigar shops, tobacco stores, smoke shops, and vape stores where nicotine products generate the majority of revenue. Mastercard strictly mandates MCC 5993 for tobacco retailers whether they operate in-store or online. Attempting to use a general retail code to avoid the high-risk classification is considered merchant identity misrepresentation and will result in account termination and possible placement on the MATCH list -- the industry blacklist that can make it nearly impossible to obtain a new account.

The "high risk" designation stems from six converging factors that banks and card networks take seriously:

Regulatory volatility. The FDA's Premarket Tobacco Product Application (PMTA) process can wipe out entire product lines in a single enforcement action. In May 2023, the FDA issued marketing denial orders for approximately 6,500 flavored e-cigarette products from 10 companies in a single week. When products are suddenly federally illegal to sell, processor exposure to chargebacks and legal liability rises sharply. The 2022 synthetic nicotine loophole closure -- where Congress extended FDA authority to regulate nicotine from any source -- retroactively changed the status of thousands of products already on shelves.

Higher-than-average chargeback rates. Vape shops face chargebacks from multiple sources: friendly fraud on delivered packages, underage buyers using a parent's card, auto-renewal subscription disputes, and dissatisfied hardware customers. A chargeback ratio above 1 percent triggers card network monitoring programs and can lead to immediate account termination. Card networks impose strict thresholds on vape merchants, and exceeding them results in monthly fines that can reach thousands of dollars.

Age-restricted products. All tobacco and vape products require age verification by federal law. Online, the risk is amplified because age verification is harder to guarantee than a physical ID check at the counter. FDA regulations require retailers to check photo ID for any customer who appears under 30 -- a rule that took effect September 30, 2024. Failure to enforce age restrictions exposes merchants to FDA enforcement actions, state fines, and civil liability that the processor also shares.

Political pressure on card networks. In April 2026, a coalition of 14 state attorneys general wrote directly to major credit card companies urging them to strengthen Know Your Customer practices and terminate accounts linked to illicit vape sales. This kind of political pressure increases reputational risk for processors working with vape merchants, further restricting access to mainstream processing.

PACT Act compliance burden. Online sellers must register with the ATF and every state they ship into, file monthly reports, maintain detailed shipping records, and use PACT-compliant carriers. Non-compliance is a federal offense. Processors underwriting online tobacco merchants must assess whether those systems are actually in place before extending credit card acceptance.

Card network registration requirements. Both Visa and Mastercard require tobacco and vape merchants to be formally registered with the card networks. Visa's annual high-risk registration fee increased to $950 per acquiring provider as of April 1, 2024, while Mastercard charges $500 per acquiring provider annually -- a combined $1,450 that is typically passed directly to the merchant.

Which Processors Will Not Accept Vape and Tobacco Merchants

The four most commonly used payment platforms by small retailers all prohibit vape and tobacco products in some form. Understanding exactly where each draws the line helps you avoid costly account terminations.

Stripe is the most explicit. Stripe's Restricted Businesses list identifies "Tobacco products including e-cigarettes, cigars, and e-liquid" and "Herbal cigarettes" as restricted categories. Production equipment marketed specifically for tobacco product manufacturing is also restricted. Merchants who attempt to use Stripe for vape or tobacco sales risk sudden account termination and fund holds of up to 180 days.

Square permits tobacco sales for in-store customers only at traditional brick-and-mortar locations. Internet, mail-order, and telephone orders for tobacco or vape products are not permitted through Square. Age-restricted items including tobacco and vape are treated as a banned category for card-not-present transactions. The practical implication: Square may work for a traditional brick-and-mortar tobacco shop processing in-person swipe transactions only, but it is not suitable for any online tobacco or vape sales. Many vape shops report account instability even for in-store use once their product mix is identified.

PayPal prohibits the sale of e-cigarettes and e-liquids containing nicotine without pre-approval -- and in practice, PayPal does not grant those approvals for e-cigarette merchants. Cigarette transactions are prohibited outright. Vape merchants attempting to use PayPal report sudden account closures with funds frozen for 180 days -- a pattern consistent with PayPal's treatment of other high-risk categories.

Shopify Payments (powered by Stripe) does not support high-risk industries including vape products. Merchants building vape stores on the Shopify platform must integrate a third-party high-risk payment gateway to process card payments. Shopify's storefront platform itself does permit vape and tobacco merchants with compliance measures in place -- the restriction applies exclusively at the payments layer. Merchants who use Shopify Payments for vape or tobacco products risk frozen payouts and suspended accounts during Shopify's routine audits of high-risk categories.

Clover and POS-bundled processors carry a particularly dangerous risk. When Clover terminates a smoke shop merchant account, the Clover hardware itself is locked to the initial processing relationship and cannot be reprogrammed. The merchant must purchase entirely new equipment. Even initially approved smoke shop accounts can be terminated during underwriting reviews once the full product mix -- including vape devices, e-liquids, delta-8, CBD, and kratom -- is fully evaluated.

Processor In-Store Tobacco Online Tobacco Vape / E-Liquid Risk on Violation
Stripe Prohibited Prohibited Prohibited Termination + 180-day fund hold
Square Allowed (in-person only) Prohibited Prohibited Account termination; hardware usable
PayPal Prohibited (cigarettes) Prohibited Prohibited (de facto) Account freeze + 180-day fund hold
Shopify Payments Prohibited Prohibited Prohibited Frozen payouts + account suspension
Clover (via ISOs) Risk of termination Prohibited High risk Termination + hardware lock
Sources: Stripe Restricted Businesses, Square Community, Vapestorm, Spectrum Payment Solutions, AllayPay

How a Legitimate High-Risk Merchant Account Works

Rather than aggregated accounts like those Stripe or Square provide -- where thousands of merchants share one master account with the acquirer -- vape and tobacco shops need dedicated merchant accounts through acquiring banks that specialize in regulated industries. These accounts are set up by high-risk ISOs (Independent Sales Organizations) that maintain established relationships with acquiring banks willing to underwrite the tobacco and vape category. Both Visa and Mastercard require that tobacco and vape merchants be registered with the card networks through the ISO and acquirer before processing begins.

When applying for a vape or tobacco merchant account, prepare these documents before contacting a processor:

  1. Government-issued photo ID for all business owners and principals
  2. Current, valid business license for the tobacco or vape product category
  3. Employer Identification Number (EIN) or business tax ID
  4. Three to six months of business bank statements showing consistent cash flow
  5. Three to six months of prior credit card processing statements, if available (chargeback rate and volume are closely reviewed)
  6. Full product list demonstrating the store's product mix and confirming no prohibited items are sold
  7. Working website with live age verification gate, return and refund policy, privacy policy, and terms of service
  8. Age verification and compliance documentation showing the software system in use (AgeChecker.Net, BlueCheck, Veratad)
  9. PACT Act compliance documentation for online sellers: ATF registration confirmation, list of states registered in, and the monthly reporting process
  10. Lease agreement for brick-and-mortar locations, which some underwriters require

Sources: FTx POS, Payment Nerds, Vector Payments

Approval for a vape or tobacco merchant account typically takes between 5 and 15 business days. Specialized high-risk ISOs that maintain pre-established acquiring bank relationships for tobacco and vape can sometimes approve accounts in 24 to 72 hours if documentation is complete. Incomplete documentation -- missing website pages, missing processing history, unlisted products -- is the primary cause of approval delays and outright denials.

Some merchants turn to offshore payment processors when US-based options feel limited. While offshore acquirers may have more permissive underwriting standards, the risks are significant: currency conversion fees, more complex chargeback disputes across jurisdictions, banking delays on fund withdrawals, and continued exposure to US card network rules if the processor routes through Visa or Mastercard. For US-based vape and tobacco retailers serving US customers, a US-domiciled high-risk ISO with multiple acquiring bank relationships is generally safer and more legally sound than an offshore arrangement.

MerchantAlternatives.com maintains a comparison of high-risk merchant account providers for vape and tobacco retailers, including options for in-store and online sellers. EPD is among the high-risk processors listed in that comparison for merchants in regulated industries like vape and tobacco retail.

Step Typical Timeline Notes
Application and document submission Day 1 Incomplete docs are the top cause of delays
Underwriting review Days 1-5 Bank reviews chargeback history, product list, website compliance
Card network registration (Visa + MC) Days 3-10 Required before any processing begins; fees of $1,450 apply
Gateway and terminal setup Days 5-12 Age verification integration tested at this stage
Account approval and first transaction Days 5-15 (standard), 24-72 hours (fast-track) Rolling reserve deductions begin immediately upon approval
Sources: Payment Nerds, Vector Payments

What Pricing to Expect for Vape and Tobacco Processing

Vape and tobacco merchants should expect processing rates meaningfully above the standard retail range. Standard retail credit card processing rates typically run between 1.5 and 3.5 percent per transaction. For vape shops specifically, established merchants generally pay between 3.49 and 3.95 percent. New merchants with no processing history, or merchants operating exclusively online, are often quoted 4 to 6 percent by underwriters assessing elevated risk. For the broader high-risk category, rates can reach as high as 12 percent depending on chargeback history and risk profile.

In-person brick-and-mortar tobacco shops with clean processing history may qualify for rates at the lower end of the high-risk range -- around 3 to 4 percent -- because card-present EMV transactions carry significantly lower fraud exposure than online card-not-present orders.

Rolling reserves are a standard feature of high-risk merchant accounts and represent the most significant cash flow impact for new vape and tobacco merchants. A rolling reserve is a percentage of daily credit card sales withheld by the processor for a set period, functioning as a security deposit against future chargebacks. Most rolling reserves for high-risk merchants fall between 5 and 15 percent of monthly processing volume, held for 90 to 180 days. For a vape shop processing $50,000 per month at a 10 percent reserve, $5,000 per month is held for up to 180 days -- tying up $30,000 in working capital at any given time. Merchants must factor this into cash flow projections before signing any processing agreement.

Beyond rate and reserve, the full fee structure for a vape or tobacco merchant account includes:

Fee Type Typical Range Notes
Processing rate (per transaction) 3.49% to 6%+ Lower end for established in-store; higher for new online merchants
Rolling reserve 5% to 15% of monthly volume Held 90-180 days; released on rolling basis
Visa + Mastercard registration $1,450/year ($950 + $500) Annual fee; passed from acquirer to merchant
Monthly account/service fee $25 to $75/month Standard for dedicated high-risk accounts
Payment gateway fee (online) $10 to $25/month Required for ecommerce integrations
Chargeback fee (per dispute) $20 to $100+ High-risk accounts face higher per-dispute fees than standard retail
Setup fee $100 to $500 One-time; varies by ISO
PCI compliance (Level 4 merchant) $300 to $1,000/year SAQ-based; processor may charge $70-$120 as a separate PCI fee
Sources: Bankcard International Group, TailoredPay, Chargeflow, SISA Infosec

PCI non-compliance penalties are worth noting because many small vape shop owners overlook them. Non-compliance fines start at $5,000 to $10,000 per month for the first three months and can reach $100,000 per month after six months of continued non-compliance. For vape merchants, PCI compliance also intersects with age verification technology requirements and tokenized payment systems, so the annual compliance cost is best treated as a fixed operating expense rather than an optional one.

For a detailed breakdown of high-risk processing rate structures, see MerchantAlternatives.com's high-risk merchant account guide.

How FDA PMTA Rules and State Flavor Bans Affect Your Payment Processor

The FDA's Premarket Tobacco Product Application process is the single biggest source of regulatory uncertainty for vape retailers -- and by extension, for the processors and acquirers who underwrite them. Under the 2009 Family Smoking Prevention and Tobacco Control Act, all new tobacco products (including e-cigarettes, which were "deemed" tobacco products in 2016) must obtain FDA marketing authorization before being sold commercially.

Applications for e-cigarette products were filed for more than 6.5 million products by the September 9, 2020 court-ordered deadline. The FDA has issued marketing authorization for only 23 e-cigarette products, while issuing marketing denial orders for millions of others. For retailers, this means that popular products can go from legal to federally prohibited in a single enforcement action -- a scenario that creates immediate chargeback exposure for any processor who has extended credit to the merchant during the transition period.

The synthetic nicotine situation illustrates the whiplash effect. When manufacturers began switching from tobacco-derived nicotine to synthetic nicotine to evade FDA authority, Congress amended the law in March 2022 to give the FDA authority to regulate nicotine from any source. The provision took effect April 14, 2022, and manufacturers of synthetic nicotine products had until May 14, 2022 to file PMTAs. Applications for nearly 1 million synthetic nicotine products were filed; the FDA issued refuse-to-accept letters for more than 925,000 of them.

State flavor bans add a layer of jurisdictional complexity that directly affects online sellers' payment processing and shipping operations. A retailer in one state may be processing an order for a customer in another state where the product is now illegal to receive. Payment processors underwriting online vape accounts assess whether the merchant has systems in place to screen and block prohibited orders by state.

State Flavor Ban Scope Menthol Banned Effective Date
California All flavors including menthol; exempts loose-leaf pipe, hookah, premium cigars Yes December 2022
Massachusetts Complete ban on all flavored tobacco and vape including menthol Yes 2020
New York All non-tobacco characterizing flavors Yes Active
New Jersey All characterizing flavors including menthol; first state with all-encompassing flavor ban Yes April 2020
Rhode Island All ENDS flavors; tobacco and menthol exempted No January 2025
Sources: ZOFO, Truth Initiative, Rhode Island Division of Taxation, Ecigator

Enforcement of state flavor bans is real and growing. In August 2024, the New Jersey Attorney General issued notices of violation and $4,500 civil penalty demands to 19 retailers for selling banned flavored vapor products following undercover inspections. A year after California's ban took effect, flavored e-cigarette sales decreased by 67 percent in that state -- but more than 40 percent of total e-cigarette sales in late 2023 were still of prohibited flavors, primarily through unauthorized disposable products. Processors monitoring merchant activity in ban states flag continued sales of prohibited products as a contract violation.

How the PACT Act Changed Online Nicotine Sales and Shipping

The Prevent All Cigarette Trafficking Act of 2009 was originally designed to prevent mail-order cigarette tax evasion. In December 2020, Congress amended it through the Preventing Online Sales of E-Cigarettes to Children Act, buried in the 5,593-page FY 2021 Consolidated Appropriations Act, extending PACT Act requirements to all electronic nicotine delivery systems (ENDS). The practical result for online vape retailers was sweeping and immediate.

The PACT Act now requires all online sellers of vape and tobacco products to:

  • Register with the ATF and every state into which the seller ships
  • File monthly reports to the ATF and each state, including the name, address, product type, quantity, manufacturer, and shipping carrier for each recipient
  • Verify customer age at point of sale using a compliant age verification system
  • Use a carrier that verifies age and requires adult signature at delivery

The carrier restriction has been the most operationally disruptive consequence of the PACT Act expansion. USPS issued a final rule effective October 21, 2021 prohibiting delivery of ENDS products directly to consumers. FedEx prohibited all vape product shipments effective March 1, 2021. UPS followed, banning all vaping product shipments throughout its domestic network effective April 5, 2021, covering devices and e-liquids regardless of nicotine content. DHL joined the ban as well. Combustible cigarettes have been non-mailable via USPS since the original 2009 PACT Act.

The combination of USPS prohibition and voluntary bans by all three major private carriers effectively ended consumer-facing online vape shipping via any mainstream carrier. Specialty carriers that comply with PACT Act requirements -- offering adult signature, age verification, ATF registration support, and state reporting documentation -- are the only legal path for online sales. These specialty carriers typically charge premium rates compared to USPS or UPS ground.

For payment processors, the PACT Act compliance burden is part of the underwriting evaluation. A processor who discovers that a vape merchant is shipping through USPS or a non-compliant carrier is exposed to regulatory risk. Merchants who can demonstrate full PACT Act compliance during underwriting -- ATF registration confirmation, state registration list, carrier documentation -- will face a significantly smoother approval process.

How Age Verification and Tobacco 21 Compliance Work at Checkout

On December 20, 2019, President Trump signed legislation raising the federal minimum age of sale for all tobacco products -- including e-cigarettes -- from 18 to 21, effective immediately. The federal Tobacco 21 law applies to cigarettes, cigars, e-cigarettes, e-liquids, hookah tobacco, pipe tobacco, smokeless tobacco, and all products containing nicotine from any source, including synthetic nicotine. There are no exemptions for military personnel.

In August 2024, the FDA issued a final rule requiring retailers to check a photo ID for anyone under 30 attempting to purchase covered tobacco products. This rule took effect September 30, 2024. For in-store operations, compliance means staff must physically request ID from any customer who appears under 30. Online, compliance requires a software-based age verification system that meets federal and state requirements.

AgeChecker.Net is one of the most widely adopted platforms for online vape and tobacco age verification. For approximately 90 percent of US customers, verification is instant: the system checks name, date of birth, and address against public records. If instant verification fails, the customer is prompted to upload a government-issued photo ID via webcam or mobile device -- a process taking 10 to 30 seconds. Photo IDs are deleted immediately after verification unless the customer explicitly consents to storage. Pricing is $0.50 per accepted verification plus a $25 per month base fee, with no charge for declined or abandoned verifications. AgeChecker.Net can also be configured to block purchases from specific states with flavor bans or shipping restrictions -- a feature that helps online sellers stay compliant with state-level restrictions automatically.

BlueCheck is a dedicated age verification platform serving online vape and e-cigarette stores. BlueCheck's verification process requires customers to provide a photo ID document such as a passport or driver's license, and integrates with Shopify and other major ecommerce platforms. Veratad provides enterprise-grade identity and age verification for regulated industries, cross-referencing customer information against authoritative identity data sources in real time.

Adult signature at delivery is the final compliance layer for shipped orders. Mastercard's online tobacco merchant requirements mandate adult signature confirmation for delivered orders. The PACT Act also requires it. Beyond the legal obligation, adult signature documentation is the single strongest piece of evidence a merchant can present when disputing a "non-delivery" chargeback -- the most common form of friendly fraud in online vape retail. Merchants must ensure their specialty carrier's signature capture system generates documentation that is retained and accessible for dispute resolution.

Which POS Systems Are Built for Tobacco and Vape Retail

Standard retail POS systems are not designed for the compliance requirements of vape and tobacco retail. Age verification at point of sale, multi-unit inventory tracking (carton, pack, and single-unit levels simultaneously), product variation management (flavors, nicotine strengths, wrapper types), and excise tax reporting all require purpose-built functionality that general retail software does not include.

KORONA POS is built specifically for smoke shop, vape shop, and tobacco retail environments. Features include built-in ID scanning for age verification at every sale, real-time tracking of thousands of SKUs, multi-location management, and integrated compliance reporting. The system handles complex inventory including product variations by flavor, nicotine strength, and size, as well as carton and pack level tracking with low stock alerts.

Cigars POS is a specialized system for tobacco stores, smoke shops, and cigar lounges, designed specifically for cigar and tobacco inventory management with automated reporting features that reduce manual processing time significantly.

TORO Cigar POS is purpose-built for cigar shops. TORO handles automatic multi-pack tracking -- tracking a box of 25 cigars both as a unit and as 25 individual sticks simultaneously -- and tracks physical locations within the store, including walk-in humidor, display case, backstock, and aging room.

POS Highway (NCR Counterpoint) serves vape shops, cigar stores, and lounges with real-time inventory control, barcode scanning, automated purchasing, and loyalty program integration. Cloud-based multi-location management allows centralized control and consolidated reporting across multiple store locations.

One compliance note for loyalty programs: the 1998 Tobacco Master Settlement Agreement restricts how tobacco manufacturers can fund retail promotions. Key MSA restrictions include prohibitions on branded merchandise distribution and gifts to consumers without proof of age documentation. Retailer-run loyalty programs that are not funded by tobacco manufacturers have more flexibility, but any manufacturer-funded loyalty or rewards component must include age documentation requirements.

How to Prevent Chargebacks as a Vape or Tobacco Retailer

Chargebacks are the most direct threat to a vape or tobacco merchant account's survival. Once a chargeback ratio exceeds 1 percent of monthly transactions, card network monitoring programs activate. Continued excess triggers monthly fines and eventually forces the processor to terminate the account. Understanding the specific triggers common to vape and tobacco retail is the foundation of effective prevention.

The most common chargeback causes for vape and tobacco merchants are: friendly fraud where customers claim non-delivery on packages that were actually received; underage buyers using a parent's or family member's card, where the cardholder disputes the transaction after discovering the purchase; auto-renewal subscription disputes for e-liquid or pod recurring orders; products not matching their description online; and defective vape hardware that fails on arrival. Sources: Payment Nerds, Vector Payments.

For in-store sales: Use EMV chip readers for all in-person transactions. Since the EMV liability shift, merchants who do not use chip readers bear 100 percent responsibility for fraudulent card-present transactions. Capture digital or physical signatures for high-value purchases. Display return and refund policies prominently at the register. Train staff to redirect unhappy customers toward a store credit or refund rather than letting them walk out and call their bank.

For online sales: Require adult signature at delivery -- it is the strongest evidence of customer receipt. Use AVS (Address Verification System) and CVV verification on every transaction, with fraud filters set to strict. Flag high-risk order patterns for manual review: mismatched billing and shipping names, first-time orders far above average basket size, and international billing addresses for domestic shipping. Age verification software serves double duty as fraud prevention -- most teenage buyers using a parent's card will abandon the cart when asked to upload a photo ID. Use clear, descriptive billing descriptors so the merchant name appears recognizably on the customer's card statement. Retain all documentation: tracking numbers, adult signature confirmations, age verification records, and customer communication logs.

For defective hardware returns, a documented policy accepting returns within 30 days with original packaging gives customers a legitimate resolution path. A merchant who can produce customer service correspondence showing a refund was offered has a strong position when disputing "product not as described" chargebacks. Note in your policy that e-liquid and consumable products are non-returnable once opened for health and safety reasons -- this preempts a common dispute trigger.

MerchantAlternatives.com's high-risk merchant account resources include additional chargeback prevention guidance specific to regulated retail categories.

What to Do If You Also Sell CBD

Many vape and smoke shops carry CBD (hemp-derived cannabidiol) products alongside tobacco and nicotine items. CBD creates a separate and distinct set of payment processing considerations that can complicate -- or in some cases jeopardize -- the merchant's existing tobacco account.

The MCC code difference matters. CBD and hemp products are often classified under MCC 5912 (Drug Stores and Pharmacies) or other codes -- not MCC 5993 (Cigar Stores). A smoke shop selling both tobacco and CBD may need separate merchant accounts for each product category, or a single account under the dominant product code with full product mix disclosure to the underwriter. Misclassification can result in account termination and MATCH list placement.

On the processor side, Stripe does not currently support CBD or hemp-derived cannabinoid products in the US under standard terms. Square permits hemp CBD sales with restrictions, but enforcement is inconsistent and accounts are periodically terminated. PayPal formally prohibits cannabis-related transactions and terminates CBD accounts when discovered.

The safest approach for a mixed-inventory smoke shop is full disclosure to your high-risk processor during underwriting -- disclosing the complete product mix, including CBD, upfront. Undisclosed CBD inventory discovered during a routine account review is a common reason why apparently stable tobacco merchant accounts are suddenly terminated.

For detailed guidance on CBD payment processing, including approved processors and compliance requirements, see MerchantAlternatives.com's CBD payment processing guide.

Frequently Asked Questions

Can vape shops accept credit cards?

Yes, vape shops can accept credit cards -- but not through mainstream processors like Stripe, Square, or PayPal, which prohibit tobacco and vape products in their terms of service. Vape shops must use dedicated high-risk merchant accounts through specialized payment processors that work with regulated industries. These accounts are available from high-risk ISOs and typically carry processing rates of 3.5 to 5 percent plus annual card network registration fees of $1,450. Approval typically takes 5 to 15 business days with complete documentation.

Why do Stripe, Square, and PayPal refuse tobacco and vape merchants

Stripe explicitly lists tobacco products, e-cigarettes, cigars, and e-liquid as restricted businesses in its legal terms. Square prohibits tobacco and vape for internet and mail-order sales. PayPal prohibits e-cigarette sales and has functionally banned vape merchant accounts. These processors operate as payment aggregators, pooling merchants under one master account -- a structure that cannot accommodate the individualized underwriting, rolling reserves, and card network registration that high-risk categories like vape and tobacco require.

How much does vape shop credit card processing cost

Vape shop processing rates typically run from 3.49 to 3.95 percent per transaction for established merchants with processing history, and from 4 to 6 percent for new merchants or those operating exclusively online. Beyond the transaction rate, the full cost includes rolling reserves of 5 to 15 percent of monthly volume held for 90 to 180 days, Visa and Mastercard registration fees totaling $1,450 per year, monthly account fees of $25 to $75, and chargeback fees of $20 to $100 or more per dispute. For a shop processing $50,000 per month, the all-in cost of payment processing typically runs between $2,000 and $4,000 per month including the reserve impact on cash flow.

Can you ship vape products through USPS, FedEx, or UPS

No. USPS banned delivery of electronic nicotine delivery systems to consumers via a final rule effective October 21, 2021. FedEx banned vape shipments effective March 1, 2021, and UPS banned all vaping product shipments effective April 5, 2021, covering devices and e-liquids regardless of nicotine content. DHL also participates in the ban. Online vape retailers must use specialty carriers that comply with PACT Act requirements, including adult signature at delivery. Combustible cigarettes have been non-mailable via USPS since the original 2009 PACT Act.

What POS system works best for a vape or tobacco shop

Specialized tobacco and vape POS systems are far better suited to the compliance demands of this retail category than general-purpose software. KORONA POS offers built-in ID scanning and multi-SKU tracking specifically for smoke shops and vape stores. TORO Cigar POS provides automatic multi-pack tracking for cigar retailers. Cigars POS is designed for tobacco stores and cigar lounges. POS Highway (NCR Counterpoint) supports multi-location management and loyalty program integration for vape and cigar shops. These platforms handle age verification, inventory tracking by product variation, and excise tax reporting -- features standard retail POS systems do not include.

Key Takeaways

  • Mainstream processors are off-limits. Stripe, Square (for online), PayPal, and Shopify Payments all prohibit vape and tobacco products. Using them risks account termination and fund holds of up to 180 days. Only dedicated high-risk merchant accounts through specialized ISOs work for this category.
  • MCC 5993 is mandatory and non-negotiable. Mastercard requires MCC 5993 for all tobacco retailers. Misrepresenting your business category to obtain a standard merchant account constitutes merchant identity fraud and can result in MATCH list placement, making future account approval extremely difficult.
  • Budget for the full cost, not just the rate. Processing rates of 3.5 to 6 percent are only the beginning. Rolling reserves of 5 to 15 percent held for up to 6 months, card network registration fees of $1,450 per year, monthly fees, and chargeback fees all add up. For a $50,000-per-month shop, the reserve alone ties up $30,000 in working capital.
  • Online sellers face PACT Act compliance before the first transaction. ATF registration, state-by-state registration, monthly reporting, and PACT-compliant specialty carrier arrangements must all be in place before any online sale. USPS, FedEx, UPS, and DHL have all banned vape product shipments.
  • Age verification software is required infrastructure, not optional. The federal Tobacco 21 law and the FDA's September 2024 photo ID rule make age verification mandatory. For online sellers, platforms like AgeChecker.Net, BlueCheck, and Veratad are the legal standard. Adult signature at delivery is required by both Mastercard and the PACT Act for shipped orders.
  • State flavor bans require active order screening. California, Massachusetts, New York, New Jersey, and Rhode Island all have significant flavor ban restrictions. Online sellers must screen orders against prohibited states and block or restrict shipments of banned products -- failure to do so is a contract violation with your processor and a state enforcement risk.
  • Chargeback prevention is account survival. A chargeback ratio above 1 percent triggers card network monitoring programs. EMV terminals, AVS and CVV verification, adult signature confirmation, clear billing descriptors, and a documented return policy for defective hardware are the core prevention stack for vape and tobacco retailers.
  • CBD in your inventory requires full upfront disclosure. If your smoke shop carries CBD alongside tobacco products, disclose the complete product mix during underwriting. Undisclosed CBD discovered during a routine account review is one of the most common reasons stable tobacco merchant accounts are terminated without warning.
Written by 

Tyler Durbin