Crypto payments for CBD businesses — a rail with no account to freeze

Why CBD businesses keep losing their payment processor

Ask a CBD founder what keeps them awake and it is almost never demand, formulation or freight. It is the email that begins "following a routine review of your account". The product is legal where they sell it, the lab reports are in a folder, the labels were drafted by a lawyer — and the merchant account is closing in ten business days anyway.

This is not bad luck, and it is usually not anything you did. It is a structural mismatch between how hemp is regulated and how card acceptance is underwritten. Four facts drive it.

First, the product is legal and the category is ambiguous. Hemp under 0.3% delta-9 THC is an agricultural commodity in the US, and licensed cultivation is regulated by the USDA. But the FDA has been explicit that CBD is not authorised as a food additive or a dietary supplement, and the EU's novel food assessments for CBD extracts remain open. A compliance officer at an acquiring bank reads that and sees a category where the rules could change, a category where some sellers are careless, and a category where a regulator's warning letter to someone else can land on their desk. They are not judging your business. They are managing a portfolio.

Second, "high-risk" is a price and a set of controls, not a label. Once you are coded that way, the quote arrives with a premium discount rate, a per-transaction fee, a monthly gateway charge, an annual review and — the part that hurts cash flow most — a rolling reserve: a percentage of every settlement held back for months against future disputes. It is your revenue, it is earned, and you cannot spend it on the inventory that generated it.

Third, underwriting never really finishes. The file stays open. A new SKU, a new claim on a landing page, a spike in volume after a good month, a change in your fulfilment partner, an affiliate writing something enthusiastic about anxiety — any of these can trigger a review. Miscoding is worse: a merchant placed under a category that does not describe what they sell can be accused of transaction laundering, which ends in termination and a listing on the card networks' terminated-merchant file that follows the principals for years.

Fourth, the dispute profile is genuinely difficult. Wellness products are bought on hope and judged on feeling. Subscribe-and-save, the model that makes CBD unit economics work, is also the model that produces the most "I did not authorise this" claims. Under the Visa Core Rules, a cardholder's dispute window runs long after delivery, and the card networks run acquirer-level monitoring programmes with dispute-ratio thresholds. A brand that crosses one is not merely fined — it becomes the account the acquirer wants off its book.

Five money flows in a CBD business, and how each one breaks

• DTC store orders. A $60 tincture, a $35 balm, card-not-present, sometimes paid at a premium rate with a reserve on top. The rail your entire revenue depends on is a contract someone else can cancel.
• Subscribe-and-save. The engine of retention and the source of most disputes. A card-on-file subscription dies the day the acquirer leaves, taking the payment credentials with it.
• Wholesale to stockists. Pallets to health shops, gyms, pharmacies and smoke shops on net-30 or net-45, paid by bank transfer whenever the buyer's accounts department gets to it. You financed the production run.
• The storefront or market stall. A hemp shop, a wellness counter, a weekend market. Card-present acceptance for this category is harder still, so a lot of it runs on cash, with all the counting, banking and shrink that implies.
• Affiliates and creators. Dozens or hundreds of small monthly payouts, often international, where a $70 commission loses a meaningful slice to transfer fees and FX before it lands.

What a terminated merchant account actually costs

The Friday email. Notice periods in high-risk agreements are short, and they are counted in business days. By the time you have read it, called your account manager and found their replacement is "in underwriting", your checkout is a page that takes money on Thursday and errors on Monday. The ad spend does not pause itself.

The reserve you cannot touch. A percentage of months of settlements, held for a period measured after the account closes. It is the working capital you would have used to buy the next production run, and you will get it back roughly when you no longer need it.

The re-underwriting spiral. The replacement processor sees a closed account in your history and prices accordingly. The next one sees two. Each round costs more, asks for more documents, and holds more back. Founders describe it as running the same company on progressively worse terms for reasons no one will put in writing.

The terminated-merchant listing. If a termination is coded as a compliance breach rather than a commercial decision, the principals can find every future application refused across the industry for years — a business that is perfectly legal and quietly unbankable.

The disputes that arrive after the product is consumed. A customer used three months of a tincture, decided it did nothing, and called their bank instead of your support inbox. You lose the goods, the shipping, the fee and the dispute fee, and you add a mark to a ratio that decides whether your account survives the quarter.

The stockist who pays when it suits them. Forty-five days after delivery becomes sixty after a reminder. Meanwhile your grower, your extractor, your filler and your co-packer were all paid on delivery.

The affiliate you cannot pay properly. A creator in another country who sent you 40 orders this month is owed $280, and the cheapest way you have of sending it costs a double-digit percentage and takes a week. So you batch it quarterly, and they promote someone else.

Why cards and banks structurally fail this category

None of this is a technology problem, which is why no amount of documentation solves it. Each rail assumes something a CBD brand cannot satisfy.

Card acceptance assumes someone will carry your liability. An acquirer is not a pipe; it is a guarantor. If you take prepaid orders and disappear, the acquirer refunds the cardholders out of its own pocket. Everything else — the reserve, the underwriting, the review, the termination clause — exists to price and contain that exposure. A category with open regulatory questions and an above-average dispute rate is expensive to guarantee, so it is either priced heavily or declined.

Card payments are reversible by design. The cardholder's bank decides a dispute, months after the goods were consumed, using evidence you submit into a process you do not control. For a consumable wellness product this is not an edge case, it is a line item. We wrote the general version of this in reducing chargebacks on your online store.

Custodial processors hold your money before you do. Whether the hold lasts two days or ninety, there is a balance with your name on it sitting inside a company that answers to its own risk committee. A balance that exists can be frozen. That is the whole mechanism behind every horror story in this category — and it is the mechanism a non-custodial processor removes entirely.

Banking follows acquiring. Operators who lose an acquirer often find the business current account reviewed next, because the same de-risking logic applies. The same pattern plays out in other lawful-but-flagged sectors; we covered it for licensed operators in high-risk merchant account alternatives.

And bank transfers do not fix the B2B side. A wholesale invoice paid by transfer is slow, opaque and, across borders, expensive. It is final, which is something — but it arrives when the buyer's finance team decides, not when your terms say.

How Payzum handles crypto payments for CBD businesses

Payzum is a non-custodial, crypto-only payment processor. Both halves of that matter more here than in almost any other vertical.

Non-custodial means the money never sits in a Payzum balance. The customer pays from their wallet to a wallet you control. There is no settlement account, no rolling reserve, no payout schedule, no risk desk deciding when you get paid, and — this is the part that changes how the business feels — no balance for anyone to freeze. The settlement is the payment. There is no merchant account in the card sense, so there is nothing to terminate, nothing to re-underwrite and no file to reopen when you add a SKU.

Crypto-only means the rail is on-chain and the payment is final once confirmed: roughly 0.4 seconds on Solana, around two seconds on Base and Polygon, with network fees measured in cents rather than a percentage of the order. Final means final — there is no dispute window, no representment process and no ratio to monitor. Turn on auto-convert to USDC or USDT and "crypto" never means price exposure: whatever the customer sends, what lands in your wallet is a dollar stablecoin. (USDT vs USDC for payments covers how the two differ.)

The instruments, mapped to how a CBD brand actually sells

• Hosted checkout and a drop-in plugin — the DTC store. Redirect, modal or inline checkout on your existing storefront, or the drop-in plugin that registers as another payment method next to your card gateway. The customer picks "pay with USDC", the order confirms in seconds, and your fulfilment system gets a webhook. Start-to-finish walkthrough in adding crypto checkout to your store.
• Recurring subscriptions — subscribe-and-save that survives. A renewal paid on-chain cannot be reversed by a call to a bank, and it does not depend on a card-on-file vault that belongs to a processor who may leave. See crypto subscriptions without chargebacks.
• Invoices with expiry, reference and overpayment detection — wholesale. Issue the stockist an invoice with your PO number as the reference and an expiry that matches your terms. It is paid in seconds from anywhere, it is final, and the system flags the buyer who rounds the amount or pays two invoices in one transfer. Reconciliation stops being a spreadsheet exercise.
• Payment links and buttons — everything off the store. A sample pack for a buyer, a pre-order on a new batch, a trade-show order taken on a phone, a custom white-label run. No code, no page to build.
• POS with a fresh QR per sale — the storefront and the market stall. Any phone or tablet becomes the terminal: type the amount, show the QR, watch it confirm. Give each member of staff a PIN with per-cashier analytics so every sale is stamped with who took it — the accountability a cash drawer never gives you. Details in Payzum POS.
• Mass payouts by CSV and EVM stablecoin payouts — affiliates, creators, growers. One file, one batch: affiliate commissions, influencer fees, a grower's instalment, a co-packer, a freelance designer in another country. Stablecoins on Polygon, Arbitrum, Optimism, Base, BNB Chain or Avalanche, plus BTC, LTC and DOGE batches. Format and flow in crypto mass payouts.
• REST API with signed webhooks — automation. Ship on confirmation, sync orders to your ERP, mark a subscription active, push a wholesale payment into your accounting package. API keys, an integration playground and signed webhooks so your systems can trust the event.

Honest scope: what this does not do

It does not make you compliant, and it is not a way around anything. Your cultivation or import licence, your certificates of analysis, your THC limits, your labelling and health-claim rules, your age gating and your tax obligations are exactly as they were — a payment rail has no opinion on any of them, and you should be sceptical of anyone who implies otherwise. Payzum runs KYC on merchants, and jurisdictions that restrict what you may sell restrict it regardless of how you get paid.

It is also crypto-only: Payzum settles in crypto to your wallet, with optional auto-convert to USDC or USDT. It does not deposit fiat into a bank account. Moving stablecoins onward — to an exchange, a card, a treasury — is a separate decision you make with your own providers. And because on-chain payments are final, a refund under your returns policy is a payment you initiate, so your policy needs to be written down and accepted at checkout before you need it.

Finally: most brands run this alongside cards, not instead of them, at least at first. Every order that comes through it is an order with no fee percentage, no reserve and no dispute risk — and a share of revenue that a termination letter cannot touch.

How to set up crypto payments for your CBD store, step by step

1. Create the merchant account and connect your wallet. Sign up at merchant.payzum.com, complete KYC, and enter the wallet address you control — hardware wallet, company wallet or an exchange deposit address if that is where you want dollars to land. Payzum never holds a balance on your behalf.
2. Pick your chains and switch on auto-convert. Enable the networks your customers actually use — Solana, Base and Polygon confirm in seconds and cost cents — and turn on auto-convert to USDC or USDT so every order settles as a dollar stablecoin regardless of what was sent.
3. Add the checkout to your store. Install the drop-in plugin or point your existing checkout at the hosted flow. It appears as one more payment option; nothing about your catalogue, shipping rules or age gate changes. Test with a small order before you switch it on for everyone.
4. Set up the off-store instruments. A subscription plan for subscribe-and-save, an invoice template for wholesale with your PO field as the reference, a payment-link template for samples and trade shows, and — if you have a counter — the POS on a phone with a PIN for each member of staff.
5. Wire up payouts and webhooks. Build the affiliate CSV once and reuse it monthly; point a signed webhook at your fulfilment system so paid orders pick and ship without a human checking a dashboard.

There is no acquirer application, no underwriting queue and no hardware order. Most brands take their first stablecoin order the same day they sign up.

Use cases across CBD and hemp businesses

Four situations we see repeatedly, with the instrument that fits each.

• The DTC tincture brand that was terminated mid-quarter. Ninety days of reserve held, checkout dark for eleven days, a replacement processor at a worse rate. The crypto checkout goes live in an afternoon as a second option on the same product pages; within a quarter it carries a visible share of orders, and that share settles to the company wallet in seconds with no reserve behind it. The brand is no longer a single email away from having no way to take money.
• The hemp shop with a counter and a weekend market stall. Card-present acceptance for the category is awkward and expensive, so the shop was two-thirds cash: a float, a count, a bank run and a $40 gap on Saturdays nobody could explain. Now the phone at the till shows a fresh QR per sale, each assistant has a PIN, and Monday morning is a per-cashier report instead of an argument.
• The wholesaler supplying sixty stockists. Pallets on net-45, chased by email, paid by transfer, reconciled by hand. Invoices now carry the PO as a reference and an expiry that matches the terms; the ones paid in stablecoins land the same day, flag their own overpayments, and settle final — so an early-payment discount actually means something to both sides.
• The creator-led brand paying 200 affiliates a month. Commissions between $40 and $600, half of them international, previously batched quarterly because the transfer fees made monthly payment absurd. One CSV on Polygon or Base pays all of them the day the month closes, in dollars, for cents in network fees — and the affiliates who get paid fastest are the ones who promote hardest. See paying affiliates in crypto.

Payzum vs a high-risk merchant account for a CBD business

Common objections from CBD operators, answered

"Is this a way around the rules?"

No, and it should not be sold as one. Paying in stablecoins does not change what you may cultivate, import, formulate, label or claim, and it does not change who you may sell to or at what age. Payzum runs KYC on merchants, and a jurisdiction that prohibits a product prohibits it on every rail. What this changes is narrower and more useful: who holds your money between the customer paying and you having it, and whether that payment can be reversed. Those are commercial risks you currently carry for reasons unrelated to your own compliance.

"My customers don't hold crypto."

Some do not. But stablecoin balances are no longer a crypto-native thing — they are held by people paid in dollars from abroad, by customers in countries with capital controls, and by a young, online, privacy-minded demographic that overlaps heavily with CBD's. You are not replacing your card checkout; you are adding an option that costs nothing per order you do not sell. Turn it on, and let the share of orders it takes tell you how big the audience is.

"I don't want to hold something volatile."

You do not have to. Auto-convert settles every order as USDC or USDT, dollar stablecoins, whatever the customer paid with. What lands in your wallet is dollars. Moving it onward — to an exchange, a treasury, a card — is a separate step with your own providers, and no processor makes that decision for you or holds the funds while you decide.

"I already have a high-risk merchant account that works."

Then keep it, and treat this as insurance you get paid to hold. The operators who add a non-custodial rail while things are calm are the ones who never have a dark checkout: if the review goes badly, orders keep flowing through a channel with no acquirer in it. In the meantime every stablecoin order skips the premium rate, the reserve and the dispute risk. The worst outcome is a payment method some customers use.

"Is managing a wallet a lot of work?"

Set it up once — a wallet address, 2FA, staff PINs if you have a counter — and the day-to-day is a checkout button and a dashboard. There is one new responsibility: your wallet's keys, which is the same duty of care you already apply to a bank login, with better tooling. Payzum's own stack covers the account side with 2FA, encrypted secrets, signed webhooks and a full audit log; the money itself is never in Payzum's hands to lose.