Written by the InclusivePay Merchant Advisory Team | Last updated: April 2026
InclusivePay has been placing CBD merchants since 2018. This guide reflects what we’ve actually seen — including what Square tells you, what it doesn’t, and what happens when things go wrong.
Square isn’t anti-CBD. Since 2019, they’ve run a formal CBD program and plenty of merchants have used it successfully — especially for in-store and small-catalog retail. If you’re looking at Square as a starting point, that’s a reasonable instinct.
But here’s what most guides won’t tell you: Square’s CBD program is built on the same aggregator infrastructure that makes Stripe and PayPal unreliable for this category. It has a compliance monitoring system that flags accounts automatically, no real appeal process when it does, and a documented history of shutting down fully compliant merchants without explanation. The fact that Square has a CBD program doesn’t mean Square is a stable long-term partner for CBD. This guide covers undefined
This guide covers what Square’s program actually requires, what the fees actually are, why it doesn’t work natively with Shopify, and how to know when you’ve outgrown it.
What Is Square’s CBD Program — and Who Qualifies?
Square’s CBD program is a separate payment processing tier specifically for hemp-derived CBD merchants. It’s not available through standard Square onboarding — you have to apply, provide documentation, and get approved before processing a single CBD transaction. Square is clear on this: do not process CBD before approval, even if your account appears to work. That’s a fast way to get flagged.
Once approved, you can use Square hardware for in-person POS, the Square Online Store for ecommerce, and Square’s standard dashboard for reporting and payouts. You’re in Square’s ecosystem — the difference is you’re now flagged as a CBD merchant, which comes with higher fees, ongoing compliance monitoring, and periodic documentation reviews.
What you need to apply:
- Business registration and EIN
- Certificate of Analysis (COA) for every product — third-party lab, showing Delta-9 THC at or below 0.3%
- Product labels for all active SKUs
- Your website URL — Square reviews it as part of approval
- Agreement to Square’s CBD-specific terms of service
Approval takes 2–5 business days if your documentation is in order. Square conducts ongoing monitoring after approval — not just at sign-up. If you add new products, update your website, or your volume changes significantly, Square may trigger a new review.
What You Can and Can’t Sell on Square
Square’s CBD program covers hemp-derived products with 0.3% THC or less. That includes most topicals, tinctures, and edibles — but with conditions. Your COAs need to be current (within 18 months), from a third-party lab, and showing the full cannabinoid profile.
Allowed:
- Hemp-derived CBD topicals (balms, salves, creams)
- Tinctures and oils — hemp-derived, 0.3% THC or less
- Edibles — state laws permitting, COA required
- Hemp flower — with COA confirming THC levels
Not allowed:
- Any product with more than 0.3% Delta-9 THC
- Marijuana-derived CBD (federally illegal)
- Products with health or treatment claims — “reduces anxiety,” “treats pain,” “cures” anything
- Paraphernalia — pipes, bongs, rolling papers
- Products shipped to countries where CBD is illegal
| Real consequence: Getting flagged for a prohibited claim doesn’t come with a warning or a chance to fix it first. Square’s automated system can freeze your account and hold your funds before you ever receive an explanation. Multiple merchants in Square’s own community forum have reported submitting corrected COAs and updated websites — and still having their accounts shut down with no human review. |
What Does Square CBD Actually Cost?
Square does not publish its CBD processing fees publicly. Standard Square rates are 2.6% + $0.10 in-person and 2.9% + $0.30 online — but CBD merchants are placed in a separate high-risk tier with different pricing. Square’s own website says “custom pricing packages may be available” depending on volume and average transaction size, and that “different fees will apply” for CBD accounts.
In practice, CBD merchants report paying significantly more than standard Square rates. The exact number varies by merchant and isn’t disclosed until you apply. What’s consistent: CBD fees are higher than standard, they’re not transparent upfront, and they can change. Multiple merchants have reported fee increases applied without advance notice.
There are no published application fees, compliance fees, or statement fees. But payout timing can also vary for CBD accounts — slower payouts are documented, particularly when volume spikes or chargeback patterns shift.
Compare that to a dedicated merchant account: InclusivePay’s rates for CBD merchants are disclosed before you sign anything, typically run 2.5%–3.5% for established merchants with clean history, and come with volume-based pricing as you grow. No mystery fees, no mid-account rate changes without notice.
Why Square Doesn’t Work Natively with Shopify
This is the one that trips up the most online sellers. Shopify does not list Square as an official payment gateway in its checkout settings. You cannot simply connect Square to a Shopify store the way you’d connect Stripe or PayPal.
There’s a separate reason Shopify sellers need to pay attention to: Shopify Payments runs on Stripe infrastructure. Stripe explicitly prohibits CBD. If you’re using Shopify Payments right now — even while also using Square for in-person — you’re processing online CBD payments through a platform that bans them. That account will get flagged.
The Shopify + Square workaround: InclusivePay has access to a gateway integration that allows Square to connect to Shopify checkout. This involves a third-party gateway layer, manual setup, and compliance verification. We’ve implemented it for brands that specifically want to keep their Square POS system while running Shopify online. It works — but it’s not a plug-and-play setup, and it doesn’t eliminate Square’s underlying account stability risks.
For most serious Shopify CBD sellers: dedicated high-risk merchant account connected via an approved third-party gateway – Authorize.Net or NMI. You keep your Shopify storefront and product catalog entirely. InclusivePay supports this setup and can have most CBD merchants live in 5–7 business days.
The Real Risk: Compliant Accounts Still Get Shut Down
This is the part Square doesn’t advertise. Its CBD program is built on automated compliance monitoring — not human review. When the system flags something, your account can be frozen before anyone looks at your actual documentation.
From Square’s own community forum, February 2026: From Square’s own community forum, February 2026: a merchant’s account was being shut down over a COA compliance issue. Their COAs confirmed less than 0.3% Delta-9 THC and were within the required 18-month window. They called support, were promised a callback, never received one. The automated system continued processing the shutdown regardless.
Another documented case: a merchant had been running a fully compliant hemp business on Square since 2021 — COAs on file, third-party audits, no health claims, legal review done. In late 2024 they received a notice to submit updated COAs directly. They complied immediately. A week later, another notice about website language. They removed it. Months passed with no response. Other CBD vendors in the same forum reported sudden lockouts with no warning. The merchant posted: did something change at Square? Nobody seems to know.
The answer is that nothing specific changed — this is how the aggregator model works. Square’s risk algorithms adapt continuously. A new pattern in your transaction data, a website phrase that didn’t used to trigger a flag, a volume change that looks anomalous — any of it can trigger an automated review that freezes your account before a human sees it. There is no proactive warning. There is often no appeal.
| Real consequence: Square holds funds until the compliance review is resolved. Merchants report waits of 90+ days. One merchant reported exiting Square’s CBD program entirely, receiving written confirmation of the exit, and still having funds held for weeks with no explanation and no return calls. |
Square CBD Program vs. Dedicated Merchant Account: What’s Actually Different
| Feature | Square CBD Program | InclusivePay |
| Shopify native gateway | No | Yes |
| Underwriting | Aggregator — automated approval | Full, before first transaction |
| Account stability | Automated compliance flags, no appeal | Stable, human-managed |
| Fees | Higher than standard, not disclosed upfront | Disclosed before signing, volume-based |
| Product flexibility | Limited — topicals, some ingestibles | Wider — topicals, ingestibles, subscriptions |
| Subscription billing | Limited support | Fully supported |
| Chargeback support | None — you handle disputes alone | Monitoring and prevention tools |
| Setup time | 2–5 days | 5–7 days |
| When to use it | Small catalogs, retail POS, starter setups | Online sellers, volume growth, Shopify |
| REAL RESULTOne topical CBD brand has processed over $6M with InclusivePay across 5+ years. No volume drops. Chargebacks held under 0.8%. Never frozen. |
When Square Works — and When It Doesn’t
Square works when: Square’s CBD program is a reasonable starting point if you’re running a small brick-and-mortar retail operation, your product catalog is simple and limited, you process under $20K/month, and you’re not on Shopify. The fast setup and familiar POS hardware make it accessible for new or hybrid businesses.
Square becomes a liability when: It becomes a liability when you’re scaling online, running a Shopify store, selling subscriptions or bundles, expanding your product catalog, or processing serious volume. At that point the automated compliance risk, the lack of chargeback support, the non-native Shopify status, and the fee opacity all compound. One algorithm trigger can interrupt your business overnight. That’s not a risk a growing brand should be running.
FAQs
Does Square allow CBD sales?
Yes — but only through its separate CBD program, which requires a specific application, product COAs, and approval before you process anything. Standard Square onboarding does not cover CBD. Processing CBD on a standard Square account before getting approved is a fast way to get flagged and frozen.
What are Square’s CBD processing fees?
Square does not publish its CBD fees publicly. Standard rates are 2.6% + $0.10 in-person and 2.9% + $0.30 online, but CBD merchants are placed in a separate high-risk tier with different — higher — pricing. Square quotes CBD rates individually. Expect significantly more than the advertised standard rates, and be aware that fees can change mid-account without advance notice.
What does Square’s CBD program require?
To apply you’ll need: business registration and EIN, a Certificate of Analysis for every product (third-party lab, Delta-9 THC at or below 0.3%, within 18 months), product labels for all SKUs, a compliant website with no health claims, and agreement to Square’s CBD-specific terms of service. Square reviews your website as part of the application. Health claims — even subtle ones like “reduces inflammation” — will get your application denied or your approved account flagged later.
Can I use Square with Shopify for CBD?
Not natively. Square is not an official Shopify payment gateway. InclusivePay has access to a workaround integration that connects Square to Shopify checkout via a third-party gateway layer — we’ve implemented it for brands that specifically want to keep their Square POS system. But for most Shopify CBD sellers, connecting a dedicated high-risk merchant account via Authorize.Net or NMI is more reliable and simpler to set up. See our WooCommerce and Shopify CBD gateway guide for platform-specific setup details.
Is Shopify Payments an option for CBD?
No. Shopify Payments runs on Stripe infrastructure, and Stripe explicitly prohibits CBD in its acceptable use policy. Disable Shopify Payments if you sell CBD. You need a third-party CBD-friendly gateway regardless of which processor you use.
Can Square shut down my account even if I’m compliant?
Yes. This is documented extensively in Square’s own community forums. Square’s compliance system is automated — when it flags something, your account can be frozen before any human reviews your documentation. Multiple fully compliant merchants have had accounts shut down after submitting current COAs and making website updates, with no explanation and no meaningful appeal process. This is the core risk of using an aggregator for a high-risk category.
What happens to my funds if Square shuts down my CBD account?
Square holds your funds during the compliance review period. Waits of 90+ days are documented. One merchant in Square’s community forum reported exiting the CBD program voluntarily, receiving written confirmation of the exit, and still having funds held for weeks with no communication. If you’re processing significant volume on Square, this is a material business risk.
How do I switch from Square to a dedicated CBD merchant account?
Apply for a dedicated high-risk merchant account first — InclusivePay can pre-approve most CBD merchants in 24–48 hours. Set up your new gateway on your ecommerce platform. Run both accounts briefly in parallel during the transition so you don’t have a processing gap. Don’t cancel Square until the new account is live and processing cleanly. See our full guide to CBD payment processing for what to expect from the application process.
Does InclusivePay work with Shopify for CBD?
Yes. InclusivePay integrates with Shopify via approved third-party gateways — Authorize.Net and NMI — so you keep your Shopify storefront, product catalog, and checkout flow while processing through a stable dedicated merchant account. Shopify Payments (Stripe) needs to be disabled, but everything else stays intact. Most CBD merchants are live in 5–7 business days. See our best CBD payment processors guide for a full comparison of options.
Do peptide or supplement sellers face the same issues with Square?
Yes. Peptides, nootropics, and supplements with health-adjacent claims face the same aggregator risk as CBD. Square’s automated compliance monitoring flags health claims and high-risk categories broadly — not just CBD-specific language. If you’re in any of these categories, the same account stability concerns apply. See our peptide merchant account page and nutraceutical merchant account page for specifics.
The Bottom Line
Square’s CBD program is one of the most accessible options for getting started — fast setup, familiar hardware, a name most customers recognize. For small retail operations with simple catalogs, it’s a reasonable starting point.
But it’s not stability. It’s access with conditions. The conditions can change. The compliance system is automated, not human. The fees aren’t transparent. The appeal process is effectively nonexistent. And it doesn’t work natively with Shopify, which is where most serious online CBD brands live.
The merchants who run into trouble on Square are almost never doing anything wrong. They’re compliant, documented, and careful — and their accounts still get frozen because an algorithm updated and their product description pattern looks different now than it did six months ago.
If you’re ready to move to something more stable, InclusivePay can pre-approve most CBD merchants in 24–48 hours. Reach out here — no application fee, no pressure, just a straight answer on whether we can help.
– InclusivePay Merchant Advisory Team | inclusivepay.com | Updated April 2026
