Organic Supplements vs CBD vs Natural Cosmetics: Payment Rules

A single wellness brand can sell certified-organic spirulina capsules, a CBD oil and a calendula balm. Three “natural” products in the eyes of the customer, and three entirely different files in the eyes of an acquiring bank. The first falls under food-supplement law, the second under a framework still being shaped by the Novel Food process, the third under the EU cosmetics regulation.

The distinction is anything but academic. It determines the merchant category code (MCC) your transactions travel under, the risk classification of your merchant account, the rate you will be quoted, the reserve that may be withheld from your settlements, and the documents requested at onboarding. Many merchants discover all this at the worst possible moment: a declined application, or a termination for “undeclared activity”.

Here is how the three regimes work, what your payment provider deduces from each of them, and how to structure your processing to avoid bad surprises.

Why your bank does not see “natural products” but three distinct risks

An acquirer does not judge the quality of your products: it estimates the probability that your business will cost it money: customer disputes, card-scheme fines, damage to its own compliance standing. Visa and Mastercard run dedicated oversight programmes for sensitive activities (the Visa Integrity Risk Program and Mastercard’s BRAM), which require acquirers to identify, register and monitor certain merchant categories.

Three variables dominate the analysis:

• Legal stability. A product whose legality varies between member states, or depends on authorisation files still under review, is mechanically classified as riskier.
• Dispute potential. Overstated claims, misunderstood subscriptions, delivery delays: anything that generates chargebacks weighs on the classification.
• Reputational exposure. Some banks decline entire sectors not because they are illegal, but because of the image they carry.

Organic supplements, CBD and natural cosmetics sit in very different places on those three axes. Hence three different banking treatments.

One more nuance: the analysis is carried out at merchant level, not product level. A catalogue of ninety compliant herbal teas and ten CBD oils is, for the acquirer, a CBD file. The riskiest line in your range sets the tone for the whole account, unless you separate it, as we will see below.

Organic food supplements: an old, well-mapped, closely watched framework

Food supplements are governed by Directive 2002/46/EC, transposed into national law: in France by Decree No 2006-352 of 20 March 2006, with a mandatory declaration to the DGCCRF through the Compl’Alim portal before any product reaches the market. Authorised vitamins and minerals appear on EU positive lists; botanical ingredients are regulated country by country.

The friction point is not composition but communication. Health claims fall under Regulation (EC) No 1924/2006: only claims assessed by EFSA and entered in the Union register may be used, under strict wording conditions. “Contributes to the normal function of the immune system” is defensible for vitamin C; “strengthens your defences against infection” is not. Any therapeutic claim reclassifies the product as a medicinal product by function, and off the market it goes.

The “organic” label itself is governed by Regulation (EU) 2018/848: certification by an approved body, the Euro-leaf logo, annual audits.

On the payment side, the sector is mature. Acquirers know it and accept it, but classify it as medium-to-high risk because of the nutra industry’s historical excesses: “free trials” silently converted into subscriptions, aggressive claims. Subscription selling, common for supplements, reinforces that caution: expect questions about your refund policy, your renewal notifications and how easily customers can cancel. Those answers weigh as much as your ingredient list in the final decision.

CBD: the Novel Food grey zone and the Kanavape legacy

The CBD framework was built through court rulings. On 19 November 2020, the Court of Justice of the EU held in the Kanavape case (C-663/18) that cannabidiol lawfully produced in one member state is not a narcotic and benefits from the free movement of goods.

France drew the consequences in its decree of 30 December 2021: hemp varieties permitted up to 0.3% THC, extracts and finished products admitted under the same threshold. The Conseil d’État then annulled, at the end of December 2022, the ban on selling raw flowers that the same decree had introduced.

For ingestible products, the most structuring issue remains open: CBD extracts have been classified as a “novel food” since their entry in the EU catalogue in January 2019, meaning they require pre-market authorisation under Regulation (EU) 2015/2283, and the dossiers submitted are still under assessment at EFSA, which has asked applicants for additional toxicology data.

CBD oils, gummies and infusions therefore live under a de facto tolerance that varies significantly from one member state to another. A CBD supplement combines both regimes (supplement declaration and Novel Food status) and that combination is precisely what your payment provider needs to understand. The picture is similar across the Channel: the United Kingdom runs its own novel-food authorisation track for CBD, with a public list of products allowed to remain on sale pending assessment.

The uncertainty has a price at checkout: most generalist PSPs exclude CBD in their terms of service or restrict it heavily. The providers that do accept it require certificates of analysis (THC below 0.3%) for every batch and variety traceability, and frequently apply a rolling reserve to settlements.

Natural cosmetics: the lightest regime of the three

Regulation (EC) No 1223/2009 sets up a regime with no pre-market authorisation. The company placing the product on the market designates a “responsible person”, compiles a product information file including a safety assessment signed by a qualified assessor, then notifies the product on the EU CPNP portal before sale. Market surveillance is handled nationally: in France by the ANSM for cosmetovigilance and the DGCCRF for market control.

A nuance many brands miss: “natural” and “organic” have no harmonised regulatory definition in cosmetics. Those claims rest on private standards (COSMOS, Natrue) or on the voluntary ISO 16128 standard. A “99% natural” balm is a brand commitment, not a legal status.

The banking consequence: natural cosmetics are processed like standard e-commerce, at low-to-medium risk. Two situations flip the file back into high-risk territory: adding cannabidiol (permitted in cosmetics, CBD is listed in the European CosIng ingredient database, but it reactivates CBD classification with most acquirers) and quasi-therapeutic claims, where “treats eczema” turns a cosmetic into a claimed medicine.

For payment purposes, keep the evidence close at hand. Acquirers rarely ask for the full product information file, but they do verify that CPNP notification numbers exist, that the responsible person is identified, and that your marketing stays within cosmetic territory.

The comparison: three regimes, three banking treatments

The table below summarises the position in 2026 for an EU-based merchant, with France as the reference example. Rates are indicative: they vary with volume, dispute history and sales model: one-off purchases versus subscriptions.

How to read it: the more stable the framework and the lighter the documentation burden, the simpler and cheaper the processing. CBD combines a moving framework with heavy documentary requirements: hence tougher conditions, even for an exemplary merchant. Where your own file lands within those ranges depends on execution: a CBD merchant with two years of clean processing history and complete documentation can obtain conditions close to the supplements column, while a supplements brand built on aggressive trial offers will drift towards CBD-level terms.

Five mistakes that cost merchants their account

Merchant account terminations are rarely about the product itself. They almost always come from a gap between what you declared and what you actually process. The most frequent cases:

• Mixing CBD and supplements on one account without declaring it. Processing CBD oils through an account opened for “food supplements” looks, from the acquirer’s seat, like transaction laundering. The sanction is immediate termination, and a possible listing on Mastercard’s MATCH file, which follows you for five years and makes opening a new account anywhere far harder.
• Non-compliant health claims. The number-one reason for termination in this sector: a product that “cures”, “heals” or “treats” becomes a claimed medicinal product, and no acquirer wants to process payments for an unauthorised medicine.
• An unreadable billing descriptor. If the card statement shows the name of an unknown holding company, customers dispute the charge. “Transaction not recognised” chargebacks are the most avoidable of all.
• Opaque subscriptions. A €1 trial converting into a poorly disclosed monthly charge is exactly the pattern the card schemes’ oversight programmes hunt for in the nutra segment.
• Extending the range without telling your PSP. Adding high-dose melatonin, functional mushrooms or a CBD line to an account declared as “cosmetics” changes your risk profile. A simple notification beforehand avoids requalification.

Structure your processing by risk profile

The golden rule: one merchant account (MID) per regulatory family. Your natural cosmetics have no reason to pay CBD-level rates, and your CBD line has no reason to put your supplements processing at risk. Separated, declared and documented: that is the structure acquirers prefer, and the one that survives their periodic reviews.

It is also how Bridge Pay approaches the segment: separate accounts per product family, each underwritten for its own regime. On food supplements, our familiarity with DGCCRF files and EFSA-approved claims supports an 85% acceptance rate: details on our nutraceuticals sector page. On CBD, onboarding includes batch THC certificates from day one, for a 78% acceptance rate: see our CBD sector page.

An analyst replies within 48 hours, for supplements and cosmetics as for CBD (certificates are reviewed with you) with payouts within 3 business days across the board. Enough to sell your full range without one product line putting the others in danger.