Card-Network Rules Cannabis Operators Are Judged Against

The short answer

Even where cards are available, as they often are for CBD and hemp sellers, the account is judged against network rules on accurate merchant coding, truthful descriptors, prohibited or restricted product categories, dispute thresholds and marketing conduct. Those rules sit above your provider, so a friendly provider cannot waive them.

Understanding the rulebook you are measured by is the difference between an account that survives review and one that is closed for something the merchant thought was harmless.

Many closures trace back to a change nobody flagged as a compliance question: a new product photo, a customer testimonial mentioning a health condition, or a blog post written by marketing staff who never saw the network's advertising standards. None of those feel like payments decisions at the time, yet each one is exactly the kind of evidence a monitoring review is built to find.

The provisions that matter most in practice

You do not need to read the full rulebooks. Five areas generate most of the enforcement operators encounter.

• Accurate merchant category coding for the business actually being conducted.
• Descriptors that identify the merchant the customer recognises.
• Prohibited and restricted product categories, including federally illegal goods.
• Dispute and fraud monitoring thresholds, measured by count and by volume.
• Marketing and claim standards, especially health or therapeutic claims.

How enforcement usually arrives

It rarely starts with a network letter to you. It starts with your acquirer, who is the party the network holds responsible. That is why a provider suddenly asks for a site change, a descriptor update, a product removal or a dispute remediation plan, and why those requests are not optional.

Monitoring programmes for excessive disputes or fraud carry escalating obligations and costs for the acquirer, which is why sustained dispute performance above threshold frequently ends an account.

Once a merchant enters a formal monitoring programme, the obligations typically include mandatory reporting, remediation plans with deadlines, and in some cases fees charged to the acquirer that get passed through to the merchant. Exiting the programme usually requires several consecutive months of ratios back under threshold, so early correction is far cheaper than waiting for the trend to reverse on its own.

Staying inside the lines

Treat compliance as a maintained system rather than a launch task. Review the live site quarterly, monitor dispute ratios monthly, and document every remediation so you can show a pattern of control.

• Audit product copy, blog content and displayed reviews for claims.
• Keep the descriptor aligned to the brand and visible in receipts.
• Track dispute ratios both ways and act before, not after, a threshold.
• Disclose new products and destinations to your provider in advance.

Wholesale versus retail exposure under network rules

Retail storefronts face the most direct network scrutiny because consumer transactions generate consumer disputes, but wholesale and business-to-business flows are not exempt from rule enforcement, they are simply judged on different points. A wholesale ACH relationship is measured more on accurate invoicing and counterparty legitimacy than on descriptor wording or marketing claims.

Operators who run both retail and wholesale sides sometimes assume compliance effort on one side covers the other. It does not. Keep separate compliance checklists for each channel, since the failure points, and the parties who enforce against them, are genuinely different.

• Retail: descriptor accuracy, marketing claims, dispute ratio thresholds.
• Wholesale: counterparty licensing, invoice accuracy, payment terms.
• Review both checklists separately at least once a quarter.
• Assign one person accountable for each channel's compliance.

Building an internal compliance calendar

Most network-rule problems are not discovered by a dramatic audit, they accumulate slowly as a website ages, a product line grows, or a marketing team changes without institutional memory of what was previously flagged. A calendar with fixed review dates catches drift before an outside party does.

The calendar does not need to be complicated. A recurring quarterly reminder to review the live site, a monthly reminder to pull dispute ratios, and an annual reminder to reread the current network rules relevant to your merchant category covers most of the risk with a small, predictable time cost.

• Quarterly: full site and marketing content review against claim standards.
• Monthly: pull and review dispute and chargeback ratios.
• Annually: reread current network rules for your merchant category.
• Ad hoc: review before any new product launch or campaign.