CBD & Wellness: compliant payment solutions 2026
CBD is legal across much of Europe yet refused by most processors. Here is how to accept payments compliantly in 2026.
9 min read
Table of contents
Selling CBD in Europe means living with a permanent paradox: your business is perfectly legal, your products respect the regulatory limits, your shop is running smoothly... yet your payment account can be suspended overnight. Stripe, PayPal, SumUp and Square regularly close hemp-related accounts, sometimes freezing several thousand euros for weeks. For a CBD merchant, the real risk is not customer demand but the ability to collect payments in a stable, compliant way. This article takes an honest look at why these refusals happen and which solutions actually work in 2026.
The CBD paradox in Europe
The European CBD market is growing steadily. Industry estimates point to double-digit annual growth and a market that could be worth several billion euros by the end of the decade. These figures are analyst projections: they vary widely from one study to another and should be read as orders of magnitude, not certainties. What is certain is the momentum: specialised shops opening, expanding product ranges (oils, flowers, cosmetics, infusions, e-liquids) and the arrival of mass-market retailers.
The paradox can be summed up in one sentence: the product is authorised for sale, but collecting payment is still treated as a high-risk activity. In France, following the European Court of Justice ruling (the Kanavape case, 2020) and the Council of State decision in 2022, selling CBD products derived from the whole hemp plant is permitted, under conditions. Yet mainstream payment providers continue to classify the sector as sensitive. Understanding this gap is the first step toward building durable payment infrastructure.
Why do Stripe, PayPal and banks refuse CBD?
A refusal is almost never a decision against you personally. It is a category policy, applied broadly to limit risk exposure. Four main factors stack up.
1. The CBD = cannabis confusion
For an automated compliance system, the word "cannabis" triggers an alert regardless of the actual THC content. CBD (cannabidiol) is not psychoactive and has nothing to do with recreational use, but the risk filters of large processors do not always draw a fine line between industrial hemp, wellness CBD and narcotics. The result is a blanket association that penalises fully compliant merchants.
2. The European regulatory patchwork
There is no single CBD regulation in Europe, but a mosaic of national rules. The authorised THC threshold, the status of flowers, permitted claims and taxation all differ from one country to the next. For a payment provider operating across several states, this heterogeneity is a compliance nightmare: what is legal in Paris may be restricted elsewhere. Many therefore prefer to exclude the entire sector rather than manage 27 different regimes.
3. Pressure from the US banking system
Stripe and PayPal are US players, backed by acquiring banks subject to US federal law. At the US federal level, the framework for cannabis and its derivatives remains complex and restrictive. That constraint flows down to European merchants: to avoid friction with their transatlantic banking partners, these platforms apply cautious global rules, even where local law is more permissive.
4. The Novel Foods regulation
Since 2019, the European Commission has treated CBD extracts intended for food as "novel foods", subject to prior authorisation before being placed on the market. As long as the dossiers are not validated, the status of ingestible oils and supplements remains uncertain in several countries. This grey area feeds the caution of banks, which fear a regulatory reversal that could expose them retroactively.
Key takeaway: refusing CBD is a category risk-management decision, not a statement that your business is illegal. The right response is not to "hide" your activity, but to make it impeccable and transparent with a provider that accepts the sector.
How to get compliant CBD payments in 2026
The stability of your payments depends directly on the strength of your compliance file. A specialised provider does not expect perfection from you, but traceability and transparency. Here are the pillars of a file that gets approved.
Respect and document THC thresholds
The non-negotiable point: prove that your products respect the applicable legal THC threshold (in France, the authorised content for finished products is very low and tightly framed by current regulation). For each batch, keep documentary proof of compliance. A merchant who precisely controls product composition immediately inspires confidence in a compliance team.
Provide lab reports (COA)
The Certificate of Analysis (COA) is the sector's flagship document. Issued by an independent laboratory, it details the cannabinoid content (CBD, THC), the absence of contaminants (heavy metals, pesticides, solvents) and the batch origin. Make your COAs available (on the product page or on request): this is what turns a marketing promise into verifiable proof, both for the customer and for the bank.
Implement age verification
CBD sales must be restricted to adults. An age-verification mechanism at the entrance of the site and/or at checkout is expected by most serious providers. Beyond the obligation, it is a signal of maturity: you demonstrate that you run your shop like a responsible, regulated business.
Get your descriptors and website right
The "descriptor" is the label that appears on the customer's bank statement. It must be clear, consistent with your brand and unambiguous: an opaque label generates disputes ("I don't recognise this purchase") and therefore chargebacks, which damage your reputation with the acquirer. Likewise, your site must display complete legal notices, clear terms and conditions, a return policy and honest product information, with no prohibited therapeutic claims.
Anticipate the rolling reserve
For high-risk activities, providers often apply a rolling reserve: a percentage of your transactions (typically 5 to 10%) is held over a rolling period (for example 90 days) to cover potential disputes. This is not a penalty, but a standard safety net for the sector. Factor it into your cash-flow forecast to avoid unpleasant surprises.
Overview of CBD payment solutions in 2026
Several players accept CBD, with different positioning. Here is an honest comparison to guide you.
| Solution | Profile | Strengths | Watch out for |
|---|---|---|---|
| Bridge Pay | High-risk gateway (Europe / France) | CBD-friendly underwriting, European compliance, first response within 24–48h, Stripe-compatible API, FR/EN support | Rolling reserve of 5–10% over 90 days for high risk |
| PaymentCloud | Merchant-account broker (US) | Solid high-risk experience, human guidance | US-market oriented; check currencies and contracts for the EU |
| Easy Pay Direct | Multi-account aggregator (US) | Multi-MID strategy to spread risk, e-commerce focus | Fees and structure designed for US merchants |
The right choice depends on your main market, your volume and your need for support. For a merchant operating in France or Europe, the priority is a provider that masters the European framework and works in euros, rather than a solution built first and foremost for the United States.
The Bridge Pay approach to CBD
Bridge Pay is a payment gateway specialised in high-risk sectors, which include CBD and wellness. In practice, this means hemp-compatible underwriting: your file is reviewed by teams who know the sector, expect your COAs and age verification, and will not close the account at the first sensitive keyword. You will find the details of our approach on the dedicated page for CBD payment processing, as well as the one devoted to natural health and wellness, two often-related universes (supplements, cosmetics, nutraceuticals).
The key terms: high-risk rates from 4.8% + €0.55 per transaction (and from 2.7% for standard profiles), with no setup fees and no monthly subscription, payouts within 3 business days, an application acceptance rate of around 85%, PCI DSS Level 1 compliance and 3D Secure 2.0 authentication. Since the API is Stripe-compatible, migrating from an existing solution stays quick. The full details are on our pricing page.
Best practices so your account is never frozen again
- Be transparent from sign-up: describe your products, supply chain and volumes precisely. A "hidden" activity discovered after the fact is the leading cause of account closure.
- Keep your COAs up to date and archive them by batch. In the event of a check or dispute, you answer in minutes, not days.
- Monitor your chargeback rate: clear descriptor, responsive customer service, readable return policy. A controlled rate protects your account.
- Diversify if your volume justifies it: beyond a certain turnover, having more than one provider avoids dependence on a single player.
- Stay informed about the Novel Foods framework and national developments: quickly adapting your product pages avoids regulatory blocks.
FAQ: CBD payments in 2026
Is CBD legal to sell in France?
Yes, under conditions. Selling CBD products that respect the regulatory THC threshold has been permitted since the European case law (2020) and the Council of State decision (2022). Each product category (flowers, oils, cosmetics, food) remains subject to specific rules, however, and the status of ingestible products depends on the Novel Foods framework. Check the regulation applicable to your range.
Why do Stripe or PayPal close CBD accounts even when they are legal?
Because it is a risk-based category policy, not a judgement on the legality of your shop. These US platforms apply cautious global rules, influenced by US banking law and by European regulatory fragmentation. Hence the value of a specialised provider that explicitly accepts the sector.
Which documents should I prepare to open a CBD payment account?
At a minimum: company and identity documents, a detailed description of the activity, COAs (lab reports) per batch, proof of the age-verification mechanism, the site's terms and legal notices, and ideally a transaction history if you are migrating. The better documented your file, the faster the approval.
How long does it take to go live with Bridge Pay?
An analyst generally replies within 24 to 48 hours of receiving a complete file, with an acceptance rate of around 85%. Since the API is Stripe-compatible, technical integration is fast, and payouts are made within 3 business days.
CBD is not an "impossible" sector to collect payments for: it is a sector that demands rigour and the right partner. If you want to accept payments with peace of mind, with European compliance and underwriting that understands your business, open your Bridge Pay account today, or first review our pricing to estimate your costs.
