CBD compliance: what the bank requires before approving your payment account

One of the most common mistakes CBD merchants make when trying to activate their payment system is underestimating compliance requirements. The acquiring bank does not approve every store — it performs a detailed audit before granting access to card payment processing.

At WeedsPayments we audit every merchant internally before presenting them to the bank. Here is exactly what we review — and what the bank will look for.

1. Website requirements

The website is the first thing the bank reviews. And it does so in great detail. These are the essential elements:

2. Company documentation

In addition to the website, the bank requests formal company documentation. The most common documents for European merchants are:

• ID document of the owner / legal representative (both sides, valid).
• Recent bank statement (last 3 months) — to verify financial activity.
• Commercial registry or certificate of incorporation.
• Proof of company address (no more than 3 months old).
• Business description: what you sell, to which markets, estimated volume.
• THC lab reports for the products (certificates of analysis / COA).
• Previous processing history, if any (6 months of statements).

For merchants with a complex corporate structure (partners, holding, subsidiaries): the bank may request additional documentation for each UBO (Ultimate Beneficial Owner) with a stake above 25%. Having it ready saves weeks.

3. What automatically blocks approval

Regardless of how good everything else is, some elements cause the bank to automatically reject the application:

• Products with THC above the legal limit of the destination country.
• Therapeutic or medical claims in product descriptions (“cures”, “treats”, “relieves” specific conditions).
• Sale of products that are illegal in the buyer’s jurisdiction.
• A previous chargeback ratio above 2%.
• Merchant on a blacklist from a previous processor.
• Domain owner name different from the company name.
• Website without legal pages or with incomplete legal pages.

“The bank doesn’t reject cannabis — it rejects unmanaged risk. A merchant with compliance properly in place has much better chances of fast approval.”

4. The audit process at WeedsPayments

Before presenting any merchant to the bank, WeedsPayments runs a complete internal audit. The process is as follows:

1. Send the compliance document to the merchant for a self-review of their website.
2. The merchant makes the necessary adjustments and confirms everything is in order.
3. The merchant uploads their documentation to the onboarding portal.
4. WeedsPayments performs the internal audit (complete checklist).
5. If there are findings, the merchant is notified and the process is repeated.
6. Once approved internally, the application is presented to the acquiring bank.

A merchant who arrives at the audit with everything in order can be in front of the bank in less than 48 hours. The total time depends almost exclusively on prior preparation.

5. Maintaining compliance after approval

Bank approval is not forever. The bank can audit the account at any time. These are the most important ongoing obligations:

• Do not add new product categories without notifying WeedsPayments (minimum 7 days in advance).
• Keep THC certificates up to date for all products.
• Do not exceed a 1% chargeback ratio — if it gets close, notify us.
• Keep legal pages up to date with any regulatory change.
• Do not change the domain or main URL without notifying the processor.