MATCH list escape playbook for CBD operators

CBD operators on MATCH face a somewhat better landscape than peptide operators. The acquirer pool is larger (Fiserv, Elavon, Worldpay, TSYS all have hemp programs), and some will underwrite post-MATCH with premium terms. The narrative "regulated vertical that mainstream acquirers are learning to price" is genuinely improving for CBD in 2026.

The three paths from the peptide playbook all apply, but the specific acquirer options differ.

Path 1 — 5-year wait

Bridging revenue during the wait

• ACH checkout — CBD buyers increasingly comfortable with ACH; 25-40% conversion of card equivalent
• Crypto (USDC) — 8-12% conversion
• Wholesale B2B on wire for high-ticket orders
• Subscription-only model (limits one-shot traffic, concentrates remaining revenue)

Path 2 — partner restructure

Specific to CBD operators

Many CBD businesses have spouse/family involvement, founding-partner structures, or active co-owners. Restructuring often just requires:

• Operating agreement showing new partner as 25%+ owner
• Bank signing authority added
• K-1 distribution updated
• Website / email with new partner as principal

Acquirer underwriting verifies against tax returns, bank records, and corporate documents.

Family-ownership caveats

Spouses and siblings as new principals are accepted if ownership is real. KYC on the new principal independent of the MATCH-listed principal. Common-law state spousal property rules can complicate the underwriting narrative; disclose upfront rather than hide.

Path 3 — post-MATCH CBD acquirers

Hemp-program acquirers that underwrite post-MATCH

• Worldpay hemp program — case-by-case. Often requires personal guarantee + upfront reserve + elevated rate. 4.0-5.0% effective, 15-20% reserve.
• Elavon hemp program — similar. More selective on reason code — excessive chargebacks more accepted than compliance/laundering codes.
• Fiserv via specialty hemp ISOs — PaymentCloud, High Risk Pay, Soar sometimes place post-MATCH CBD.
• TSYS hemp program — rarely underwrites post-MATCH but possible case-by-case.

High-risk ISOs post-MATCH

• EasyPayDirect — declines most MATCH cases but occasional approvals
• Durango — occasionally places post-MATCH CBD
• Corepay — more flexible on post-MATCH; higher reserve
• Offshore options (Emerchantpay, Paynetics) — similar to peptide path

Realistic terms post-MATCH

• Effective rate: 4.0-5.5%
• Rolling reserve: 15-20%
• Upfront reserve: $10-25k typical
• Hold period: 180 days
• Volume cap: $100-300k/month initial
• Personal guarantee often required

Reason code matters more for CBD than peptide

CBD-capable acquirers read MATCH reason codes carefully. Codes that are more recoverable:

• 04 Excessive Chargebacks — most recoverable; process improvements demonstrable
• 09 Bankruptcy — recoverable with documented financial rehabilitation
• 12 Violation of Merchant Agreement — depends on specific violation

Less recoverable:

• 03 Laundering — near-impossible
• 06 Fraudulent Collusion — very difficult
• 14 Merchant Identity Theft — requires documentation that you were victim, not perpetrator

Compliance and documentation matter more post-MATCH

Post-MATCH CBD underwriting requires:

• COA for every SKU (more thorough than normal underwriting)
• Documented age verification program
• State restriction enforcement documentation
• Marketing copy review (no therapeutic claims)
• Principal KYC on all owners
• Bank statements 12-24 months
• Prior processing history (all of it, including the closure that triggered MATCH)

Subscription CBD post-MATCH

Subscription CBD operators have slightly better post-MATCH options because recurring revenue is lower-risk than one-shot. Acquirers sometimes approve post-MATCH subscription CBD at 10-15% reserve when one-shot CBD at 20-25%.

Multi-brand CBD post-MATCH

If one brand's principal is MATCH-listed but other brands operate under different ownership:

• Unaffected brands continue normally
• MATCH-affected brand needs independent resolution
• Be careful about shared infrastructure that could trigger secondary review (shared bank accounts, shared website IP, shared CRM)

What to do in the first 30 days

1. Confirm MATCH hit via ISO
2. Identify reason code
3. Stop applying to mainstream acquirers (each decline hurts)
4. Evaluate three paths
5. If Path 2 viable: engage legal + tax counsel on restructure
6. If Path 3 needed: compile documentation package (COAs, compliance docs, statements)
7. If Path 1 chosen: build ACH + crypto bridging revenue

Multi-year recovery trajectory

Post-MATCH CBD operators who play it clean:

• Months 1-6: elevated rates, tight caps, heavy scrutiny
• Months 6-12: reserve potentially trimmed, volume cap lifted
• Months 12-24: access to lower-tier acquirer options opens
• Months 24-36: competitive rate re-negotiation possible
• Year 5 (MATCH expiration): full mainstream access returns

What not to do

• Don't form a new LLC with same principal and apply to Stripe. Declined on principal KYC.
• Don't pay a removal scam.
• Don't apply to 10+ acquirers in parallel — each decline leaves a record.
• Don't overstate projected volume to acquirers post-MATCH — it flags as misrepresentation.
• Don't run marketing copy that worsens compliance risk — post-MATCH accounts get audited more aggressively.

What to do next

Audit your situation against the three paths. If Path 2 available, fastest. If not, Path 3 through specialty CBD-capable ISOs with premium pricing. See our general MATCH playbook and CBD operator playbook.