Vape & E-Cigarette Merchant Account: Payment Processing Guide
The FDA has authorized just 45 vapor products out of 26 million applications. Here is why vape businesses need a dedicated high-risk merchant account.
By Gray Merchants Team
- The FDA has authorized only 45 vapor products total out of more than 26 million applications since 2020, illustrating how tightly the category is regulated.
- The PACT Act requires ATF and state tax registration, a USPS shipping ban, two independent age checks at sale, and adult signature at delivery for any interstate vapor product shipment.
- Youth e-cigarette use has dropped substantially since 2023, while adult use has stayed comparatively steady at 7.0%, shaping how regulators approach the category.
- Vape/smoke-shop chargeback rates run well above the 0.26% general e-commerce average, driven by undelivered-package and underage-buyer disputes.
- A dedicated high-risk merchant account underwrites vape businesses on actual PMTA and PACT Act compliance documentation rather than declining the category outright.
Vape and e-cigarette businesses get declined by standard payment processors for reasons that have nothing to do with how the business is run. The regulatory burden alone is often enough. Age-verification law, product-authorization requirements, and shifting state flavor bans make most acquiring banks pass before they even look at a chargeback history.
Why Vape and E-Cigarette Businesses Get Classified High-Risk
Card networks classify vape and e-cigarette sales under MCC 5993, the same category as tobacco and smoke shops, under rules Visa and Mastercard publish for regulated merchant categories. Acquiring banks price that category for elevated risk on three separate fronts: regulatory exposure, age-verification liability, and chargeback rates that run meaningfully above the general e-commerce average.
None of that is about whether an individual business is well run. It's about the category as a whole, which is exactly why a standard processor's automated underwriting declines vape businesses by default rather than evaluating them individually.
The FDA's Premarket Tobacco Product Application Bottleneck
Every vapor product sold in the US is legally required to go through the FDA's Premarket Tobacco Product Application (PMTA) process. The scale of that bottleneck is the clearest evidence of how tightly regulated this category actually is. Since 2020, the FDA has made determinations on more than 99% of the over 26 million tobacco product applications it received. As of 2026, it has issued marketing authorizations for only 45 vapor products across every manufacturer combined (FDA, 2021; CSP Daily News, 2026).
The FDA also enforces at scale. In a single action in May 2023, it issued marketing denial orders covering approximately 6,500 flavored e-liquid and e-cigarette products across 10 companies at once (FDA, 2023). An acquiring bank underwriting a vape merchant has to account for the real possibility that a supplier's product authorization gets pulled after the merchant is already selling it.
Usage Trends Underwriters Actually Watch
Regulatory pressure on this category is shaped directly by usage data. Youth e-cigarette use has fallen substantially. In 2024, 1.63 million US middle and high school students (5.9%) were current e-cigarette users, down from 2.13 million (7.7%) in 2023. The decline was driven almost entirely by high schoolers (CDC, 2024). Adult use tells a different story. 7.0% of US adults currently use e-cigarettes, a rate concentrated disproportionately among young adults (CDC, 2024).
That split, falling youth use alongside steady adult use, is part of why regulators keep tightening age-verification requirements rather than easing off the category generally.
What the PACT Act Actually Requires
The Prevent All Cigarette Trafficking Act was amended in 2021 to explicitly cover vapor products and other electronic nicotine delivery systems. It sets real operational requirements for any business shipping these products across state lines:
- Registration with the ATF and with every state tobacco tax administrator the business ships into
- A ban on shipping vaping products through USPS
- Two independent age and ID verification checks at the point of sale
- Adult signature with photo ID required at delivery when using a private carrier
A processor that doesn't understand these requirements can't accurately assess whether a vape merchant is actually compliant, which is a large part of why so many decline the category outright rather than evaluate individual files.
The State Flavor-Ban Patchwork
On top of federal PMTA and PACT Act requirements, several states have enacted their own statewide restrictions or outright bans on flavored vapor products, and hundreds of additional local jurisdictions have layered on further restrictions. That patchwork means a vape business selling into multiple states is managing a genuinely different compliance picture state by state, not one uniform national rule set. An acquiring bank underwriting a multi-state vape merchant has to account for that variance directly.
Why Chargeback Rates Run Higher in This Category
Age-restricted, card-not-present product categories consistently see chargeback rates well above general e-commerce. Sift's Digital Trust Index put the general cross-industry average chargeback rate at 0.26% in Q3 2025 (Sift, 2025). Payments-industry sources describing vape and smoke-shop specific chargeback activity report rates running well above that general baseline. Undelivered packages, underage-buyer claims, and unrecognized billing descriptors drive most of the disputes. Rates approaching or exceeding the 1% mark start putting an account within range of card-network monitoring program thresholds.
What a Dedicated High-Risk Merchant Account Actually Solves
A dedicated high-risk merchant account built specifically for regulated, age-restricted categories gets underwritten by a bank that already understands PMTA status, PACT Act compliance, and state-by-state flavor restrictions, instead of declining the file the moment MCC 5993 shows up. That means:
- Underwriting based on actual compliance documentation, not a blanket category decline
- A gateway and billing-descriptor setup built to reduce "I didn't recognize this charge" disputes
- A chargeback defense process suited to a category where disputes run structurally higher than average
- Reserve terms sized to the real risk of the individual business, not a worst-case assumption
Frequently Asked Questions
Can a vape business get a standard Square or Stripe account?
Rarely, and rarely for long. Aggregator platforms typically prohibit tobacco and vapor products outright in their terms of service, and accounts that slip through initial signup are commonly frozen or terminated once the category is flagged.
Does selling only nicotine-free vape products avoid high-risk classification?
Usually not entirely. Even nicotine-free e-liquids and hardware typically fall under the same MCC 5993 category and face similar age-verification and shipping scrutiny, since the products are functionally identical delivery devices.
What documentation speeds up underwriting for a vape merchant account?
Current PMTA status for products sold, documented PACT Act registration and age-verification procedures, and a clear breakdown of which states the business ships into and their specific flavor-restriction status.
Do vape merchant accounts always carry a rolling reserve?
Most do initially, sized to the category's elevated dispute rate. Reserve terms typically ease as the account builds documented, clean processing history.
Is CBD vape treated the same as nicotine vape for underwriting?
No, they're evaluated separately. CBD products carry their own distinct regulatory profile; see our dedicated CBD payment processor guide for that category specifically.
Running a vape or e-cigarette business that's been declined elsewhere? Apply free for a 24 to 48 hour decision, or talk to a specialist about what documentation your underwriting file needs.
Gray Merchants Team
Gray Merchants is a payment ISO that places merchant accounts across every risk level — from low-risk retail and e-commerce to 67+ high-risk verticals. The editorial team writes on high-risk merchant accounts, chargeback defense, MATCH/TMF remediation, and ACH processing — whether you are new, scaling, switching processors, or rebuilding after a decline.