Payment processing for the CBD dispensary chain across 7 states
- CBD is legal federally under 2018 Farm Bill but state rules still shift. Your stack has to survive policy changes in 3-4 of your states every year.
- Card-present CBD is easier than card-not-present. Your retail stack and your DTC site need different plumbing.
- PayPal, Stripe, Shopify Payments all terminate CBD on 30-day notice. You need specialist underwriting as the primary, not the backup.
On this page
You operate a CBD retail chain: 12-40 storefronts across 7 states, plus a DTC e-commerce site that ships nationwide. Combined monthly revenue $400k-$3M. You carry flower (Farm Bill compliant, under 0.3% delta-9), tinctures, gummies, topicals, pre-rolls, and possibly some delta-8 or THCA products that live in legal gray zones state-by-state. Your compliance team tracks SB after SB.
Your stack today
In retail: some mix of Clover + a specialist CBD processor, Dutchie POS for dispensary-grade compliance tracking, or a cash-only backup for the states where card processing got yanked. Several of your locations have been through 2-3 processor transitions in the last 24 months.
In DTC: likely a specialist CBD ISO (Square One, Easy Pay Direct, PayKings, Organic Payments, Pinwheel) paired with WooCommerce or Shopify-with-third-party-gateway (because Shopify Payments declines CBD). You tried Stripe, got terminated in 45-90 days, moved to specialist.
Your loyalty program is on a separate vendor (Alpine IQ, Springbig, Fyllo). Gift cards are inconsistent across locations because the specialist processor does not support gift-card programs in all states.
Cash handling is real. In some states, some months, 15-25% of revenue comes in as cash. You have armored-car contracts and a CIT (cash-in-transit) insurance policy.
Your pain points
- Processor turnover. You have migrated at least one location in the last 12 months because a processor exited CBD or narrowed its underwriting. Migrations burn 60-90 days of ops bandwidth each.
- Delta-8, delta-10, THCA, HHC. These are legal federally under current interpretation but illegal in some states. Your processor rules must match the shipping rules and your POS must enforce at the cart level. Misalignment is an audit trigger.
- Multi-state tax reporting. Each state has its own CBD tax/excise situation. Your processor reporting must supply the data your accountant needs to file in each state.
- Card-present vs card-not-present conflict. Your in-store rate is 3.0-3.5%. Your online rate is 5.5-7%. Customers comparing prices across channels notice. Margin management is harder than in other verticals.
- Banking relationship risk. Some of your bank accounts at regional banks are in an annual review because "CBD" appears in your deposits. One bank has already asked you to leave.
- Chargebacks on DTC at 0.8-1.5%. Most are "I did not receive" because shipping to restricted states triggers manual review holds.
- Compliance ops. COA management, lab testing reporting, seed-to-sale for certain products, age-verification at checkout and in store.
Why CBD portfolios get flagged
Three active risks:
Regulatory classification drift. Delta-8 in Texas: legal, then illegal, then legal again pending court. Your processor has to track this. When it stops matching reality, either you are selling what you cannot sell or you are rejecting payments for products that are legal.
Banking-side FCEN concern. FinCEN and OCC periodically remind banks that CBD deposits require enhanced due diligence. Your bank may decide it is not worth the compliance overhead and close your account. This has happened across the industry cyclically.
Card network policy. Visa and Mastercard both require CBD merchants to register under specific MCC codes (5122 or 5192 for pharmacies, 5912 for drug stores, 8099 for health services, or the dedicated 7399). Miscoding leads to fines.
What multiflow does for you
We operate a parent merchant relationship specifically structured for multi-state CBD retail + DTC. Card-present and card-not-present run on compatible but distinct acquirer relationships under the same portfolio umbrella.
Specifically:
- Retail card-present at 3.2-3.8% blended across all your locations, with proper MCC coding, Ethoca/Verifi on DTC to drop fraud disputes, and consistent descriptor structure.
- DTC card-not-present at 5.5-7.0% with multi-acquirer routing so you are not single-point-of-failure on one ISO.
- State-rule engine integrated at checkout: ship-to ZIP determines eligibility per SKU. Your compliance team updates rules, our system enforces at the payment layer.
- Bank partner that has CBD in its risk appetite as a stated policy. Not a regional bank that might decide to exit next quarter.
- Multi-state tax reporting feed. Your CPA gets state-broken-down gross sales by product category monthly.
- COA hosting and age-verification integrated with payment flow. Customers cannot complete a purchase without passing age gate and without a SKU having a current COA on file.
- Chargeback defense with "did not receive" compelling-evidence specific to CBD (carrier restriction, state rejection, return-to-sender). Win rate 40-50% on delivery disputes.
The rate you would lock in
CBD chain at 12-40 locations + DTC with combined $400k-$3M monthly is our established-high-risk tier. Rate: retail 3.2-3.8% + DTC 5.5-7.0% blended plus interchange passthrough. Volume tiers kick in at $1M, $2M, $3M monthly combined. One-time setup fee. Reserves 5-10% on DTC card-not-present; 0-3% on card-present (carved out under CP-only reserve policy).
Your incumbent stack is probably similar on rate. The win is stability, compliance-integrated checkout, and the bank relationship that does not quit on you.