CBD and PayPal: Why Your Payments Get Blocked (and How to Take Payments for Good)

You sell perfectly legal CBD: under 0.3% THC, traceable European suppliers, up-to-date lab certificates, and PayPal has just limited your account, or refuses to open one. This is neither a misunderstanding nor a configuration error: PayPal bans CBD as a matter of policy, everywhere in the world, and no amount of French or European compliance will change its decision. Here is why, what actually happens if you push ahead anyway, and above all how to accept card payments for your sales in a sustainable way.

Why PayPal blocks CBD payments

PayPal's refusal is not arbitrary in the sense of being left to an account manager's judgement: it is written in black and white in its Acceptable Use Policy, the contractual document every merchant accepts when opening an account. That policy prohibits transactions involving narcotics and cannabis-derived products, and treats cannabidiol as an activity requiring prior approval: approval which, in practice, is not granted to European CBD merchants.

This position is rooted in American regulatory history. PayPal is a US company, operating under a federal framework where cannabis remains a controlled substance. Rather than managing the legal complexity country by country, the company applies the same rule everywhere: no cannabis, no derivatives, no exceptions. It does not matter that cannabidiol under 0.3% THC has been legal in France and the European Union since the Court of Justice of the EU's Kanavape ruling of 19 November 2020, confirmed on the French side by the Conseil d'État.

Three factors make the case worse from a risk manager's perspective:

• the Visa and Mastercard networks classify cannabis and its derivatives as sensitive activities, with potential penalties for acquirers processing non-compliant merchants;
• the CBD sector's dispute rate is slightly above the e-commerce average (around 1.2% versus 0.8%);
• regulation changes regularly (Novel Food, the status of flowers), requiring legal monitoring PayPal has no interest in funding for a marginal share of its volume.

The result: a CBD store can be registered, fully taxed, audited by consumer protection authorities and entirely legal: it will still be banned from PayPal.

What actually happens when PayPal detects CBD

Many stores open a PayPal account without stating the exact nature of their products, or under a more generic declared activity ("wellness", "cosmetics"). It works for a few weeks or months, until the first review. And the review almost always comes: a keyword in an order description, a customer dispute, growing volume or a simple random audit is enough to trigger it.

The account limitation

PayPal starts with a "limitation": you can no longer receive money, and you can no longer withdraw it. The merchant then receives a request for supporting documents: this is retroactive KYC: supplier invoices, a detailed description of the products sold, the director's ID, sometimes lab certificates. The trap is complete: providing documents that mention CBD amounts to confirming the Acceptable Use Policy violation; failing to provide them leads to closure for lack of cooperation. The outcome is the same either way.

The 180-day fund freeze

Then comes the most painful sanction: PayPal's terms of use allow it to hold the account balance for up to 180 days after closure, officially to cover potential disputes and chargebacks. Six months of working capital immobilised, without interest, at the precise moment you need to finance stock and set up a replacement payment solution. For a store processing €20,000 a month through PayPal, the freeze can represent tens of thousands of euros.

The permanent ban

Finally, the account is generally banned for good: same director, same company number, same IBAN, same address: any new attempt is detected by cross-referencing and shut down even faster. Services built on PayPal (payment buttons, express checkout, certain marketplaces) become inaccessible too. A workaround through an account in a relative's name only delays the inevitable and can be treated as fraudulent circumvention.

The alternatives that actually work for CBD

The good news: the problem is not card payment itself, but the choice of provider. PSPs (payment service providers) specialising in high-risk sectors work with European acquiring banks that accept compliant CBD, on the basis of a documented application. That is their core business: assessing a merchant's actual risk instead of applying a blanket ban.

The criteria that set a genuinely CBD-ready PSP apart:

• Explicit CBD acceptance: the sector appears in writing on the list of accepted activities, not an unofficial tolerance that can be reversed at the first audit.
• European acquirers: the bank processing the funds recognises the legality of cannabidiol under 0.3% THC under EU law.
• Clear compliance requirements: lab certificates per batch, supplier traceability, age verification, no therapeutic claims.
• A capped reserve: a rolling reserve is normal in high-risk processing, but it must be contractual, capped (typically 10%) and decreasing with trading history.
• Contractual stability: no closure without notice as long as compliance is maintained.
• E-commerce integrations: WooCommerce, Shopify, PrestaShop plugins or an API, with 3D Secure included.

In exchange, fees are higher than with a mainstream PSP: expect 4 to 5% per transaction versus 1.5 to 3% with Stripe or PayPal. That is the real cost of card network access for a sector classified as high-risk, and it compares very favourably with six months of frozen revenue.

PayPal vs Stripe vs specialised PSP: the comparison

The decisive line is not the headline price but long-term viability: a low rate is worthless if the account closes at the first review with your cash flow locked up. The calculation that matters is total cost of ownership, freezes and lost sales included.

How to migrate without losing sales

If you are still taking CBD payments through PayPal or a generic Stripe account, the migration needs to be organised before the closure, not after. The scenario to avoid: discovering the limitation on a Monday morning and losing two weeks of sales while you open an account elsewhere.

• 1. Build your compliance file now: THC lab certificates per batch, supplier invoices, company registration, director's ID, terms of sale with age verification. It is the longest step, so start it before you are under pressure.
• 2. Open the specialised PSP account in parallel: activation takes 5 to 7 business days with a provider that knows the sector. Your current payment method keeps running during underwriting.
• 3. Switch the checkout cleanly: install the new payment plugin (WooCommerce, Shopify, PrestaShop or API), run a real test transaction, then disable the old payment method. The technical switch takes less than an hour.
• 4. Withdraw your PayPal balance gradually: make regular withdrawals to your bank account before winding the account down. A balance emptied abruptly right after a volume spike attracts the attention of risk algorithms.
• 5. Never route CBD back through PayPal: even to "bridge" a few orders, every additional transaction increases both the freeze risk and the base for the 180-day hold.

Finally, think about recurring payments: if you sell subscriptions (CBD boxes, automatic refills), export your customer base, tell customers about the payment method change and have them re-register their cards on the new checkout. Announced clearly, this change causes very little churn: far less than a forced payment outage.

Key takeaways

PayPal will not accept your CBD store: the ban is structural, global and contractual. Continuing to take CBD payments through PayPal means accepting a permanent risk of a 180-day cash freeze, retroactive KYC and a definitive ban. The solution is not to dodge the reviews, but to move to payment infrastructure built for the sector.

Bridge Pay has supported CBD e-commerce since 2019: acceptance of compliant products (under 0.3% THC), lab certificate validation by a dedicated compliance team, a 78% acceptance rate on complete applications and activation within 5 to 7 business days. Your business is legal; your payments can be too: for good.