Compliance update · October 2026

The Federal Hemp Change Is a Card Processing Problem Too

Stores that sell hemp-derived THC or CBD alongside other goods face two deadlines: the law's on December 11, and their processor's, which may be sooner. Here is what changed and how to protect the account.

By Gary Rutledge · · 9 min read

If your store sells hemp-derived THC or CBD products next to everything else on the shelf, December matters twice. Federal law changes what counts as legal hemp on December 11, 2026. And the companies that process your card payments are already setting their own deadlines, some of them weeks earlier.

The second deadline is the one that can catch a business off guard. A store can stop selling a product and carry on. Losing card processing is harder to recover from, and a termination for selling prohibited products can follow a business to its next processor.

This guide explains what changed, which products are affected, why your card processing is on the line, and what merchants and the agents who serve them should do before December 1.

This article explains a change in the law and how card processors are responding. It isn't legal advice. For decisions about specific products, talk to a lawyer who works with hemp businesses.

Key takeaways

  • The federal definition of hemp changes on December 11, 2026. It now counts total THC, including THCA, and caps finished products at 0.4 milligrams of total THC per container.
  • Products made with cannabinoids the plant can't produce naturally lose hemp status earlier, on November 12, 2026.
  • Delta-8, THCA flower, most THC edibles and drinks, and many full-spectrum CBD products fall outside the new definition.
  • Processors and their banks carry the card networks' penalties for illegal sales, so many are requiring removal by December 1 or sooner.
  • Stores that sell these products alongside other goods, such as smoke shops, convenience stores, gas stations and liquor stores, are the ones most likely to be caught out.
  • Never run these sales through a different account or category. That turns a product problem into a fraud problem that can end your card acceptance everywhere.

What changed, and when

The 2018 Farm Bill defined hemp as cannabis with no more than 0.3% delta-9 THC. That narrow test is what made room for delta-8, THCA flower and hemp-derived THC drinks and gummies.

The federal agriculture appropriations law enacted on November 12, 2025, rewrote that definition. According to a Congressional Research Service summary, hemp now means a total THC concentration, including THCA, of no more than 0.3% on a dry weight basis. Several things are excluded from hemp altogether:

Anything excluded is treated as marijuana under federal law.

The dates. The new definition was due to take effect November 12, 2026. A funding bill signed September 2, 2026, moved most of it to December 11. The exclusion of cannabinoids the plant can't produce, such as THC-O, still starts November 12.

What's still unsettled. The law asked the FDA to publish lists of naturally occurring cannabinoids and to define what a "container" is. As of mid-October those were still unpublished, which matters for products sold in multi-serving packs. Bills to delay the change by two years or repeal it have been introduced, but none had moved out of committee. States also set their own rules, and some go further than federal law.

The practical reading is the one your processor will take: plan on December 11, and on their deadline if it's earlier.

Which products are affected

Exact answers depend on each product's lab results and, for some, on the FDA's container definition. Broadly:

Why your card processing is on the line

Card network rules require that every transaction be legal. When a merchant sells something it shouldn't, the networks' monitoring programs fine the acquiring bank, not the merchant. The bank can pass the fine on, and usually it would rather close the account than carry the risk, as one payments firm's analysis explains.

That's why processors are moving first. Notices going out to agents and merchants this fall ask that noncompliant products be off shelves and websites by December 1. At least one large payments provider set October 15. Your processor's deadline is the one that counts for your account, whatever the federal date.

Some banks and processors may go further and leave the category altogether, compliant merchants included, rather than review each product. The merchants best placed to keep their accounts are the ones who can show, product by product, what they sell and the lab reports behind it.

What's at stake:

If you sell these alongside other goods

Dedicated CBD shops have heard about this from their high-risk processors already. The stores more likely to be surprised are the ones where hemp products are a few lines among hundreds: smoke and vape shops, convenience stores, gas stations, liquor stores, and some wellness and grocery stores. Those accounts were often set up for their main business, and the processor may not know what's on the counter.

That cuts both ways. Your account may not be flagged today, but if a product shows up in a test purchase or a complaint after the deadline, you're the one explaining it. A few rules:

Selling vapes or kratom too? They face their own rules and processor warnings. See vapes, kratom and your card processing.

What to do before December 1

  1. Find your processor's deadline. Check your statement's message section and any email notices; if you can't find one, ask.
  2. List every hemp-derived product you sell, with its latest lab report.
  3. Sort each one: keep, reformulate or discontinue. When in doubt, ask your supplier and a lawyer, not your processor.
  4. Remove discontinued products everywhere you sell them, and record the date.
  5. Send your processor the list of what you're keeping, with lab reports.
  6. Check your own state's rules, which may be stricter.
  7. If CBD is a large part of your sales, line up a second processor that works with compliant CBD sellers, in case yours leaves the category.

For agents: which merchants to call

If you place processing, some of your merchants will get a termination letter they didn't see coming. A call now protects the merchant and the account. You don't need to sort every product yourself. You need to know who to call and what to tell them.

Who to call first:

Clues on the statement. A statement never lists products, so it can't tell you whether a merchant sells hemp. It can tell you who to ask:

What to tell them. Share the dates and the processor's deadline, point them to the steps above, and recommend they speak to a lawyer about specific products. Don't tell a merchant a product is compliant. That's not your call to make, and it's not a promise you want your name on.

What your statement can and can't tell you

Your processing statement is a good place to start, but only a start. It shows how your processor sees your business: the category you're boarded under, whether it's holding back funds, what fees it charges for risk, and any notices it has sent. It can't show which products you sell, and nothing on it can tell you a product is legal.

Read the message section of your last few statements. Processors often announce changes there first, in small print, months before anyone calls.

Get an independent read

Statement Forensics reads processing statements line by line and explains them in plain English. That includes the category your account is boarded under, every fee and hold, and the notices in the small print, so you know where you stand with your processor before December.

We don't sell processing, have no processor or ISO affiliation, and take no residuals or referral fees. Agents can send a merchant's statement too, with the merchant's permission. We don't advise on whether a product is compliant; that's a question for a lawyer.

Email a recent statement to audit@statementforensics.com.

Frequently asked questions

When does the federal hemp change take effect?

Most of it takes effect December 11, 2026. Products made with cannabinoids the cannabis plant can't produce naturally lose hemp status earlier, on November 12, 2026. Your processor may set an earlier deadline for your account.

Can I still sell CBD?

Some CBD products remain legal hemp, such as isolate and broad-spectrum products with no more than 0.4 milligrams of total THC per container. Many full-spectrum products exceed that. Check each product's lab report, and ask a lawyer about anything unclear.

Why would my processor close my account if I sell other things too?

Card network rules make the processor's bank responsible for illegal transactions, and the networks fine the bank. Selling prohibited products on an account set up for something else is a reason to terminate the whole account, not just stop the product.

What happens if my account is terminated?

Funds may be held in a reserve for months, and you may be added to the industry's shared list of merchants closed for cause. That can make it very hard to get card processing elsewhere.

Can I process these sales under another business or account?

No. Running sales through a different account, business or category is transaction laundering. It's grounds for termination and listing, and it can end card acceptance for the whole business.

Could the deadline be delayed again?

Bills to delay or repeal the change have been introduced, but none had passed committee by mid-October 2026. Plan on December 11 and on your processor's deadline, and watch for news.

About the authorGary Rutledge built Statement Forensics after 35 years in banking risk, processing, acquiring and payment facilitator operations. Beech Edwards LLC has no processor, ISO or platform affiliation, takes no residuals or referral fees, and has nothing to sell you after the report.

Find out what you’re really paying to accept cards.

Independent, plain-English statement audits. No processing sold, nothing to switch you to. Statements are deleted on delivery.

audit@statementforensics.com