Standard processors including Stripe, Square, and PayPal terminate accounts selling CBD, supplements, high-THC products, firearms accessories, and other restricted categories, often without much warning. WooCommerce supports integration with dozens of alternative processors, including several that specialize in high-risk categories. This guide covers which processors work for which product types, how the approval process works, and how to set up payment correctly from day one.
Why standard processors will not work
Stripe, Square, and PayPal are the default recommendations for eCommerce payment processing. They’re easy to integrate, widely trusted by customers, and work for the majority of product categories. But they explicitly exclude and actively terminate accounts selling a specific list of product types.
That list includes CBD and hemp-derived products even when federally legal, most nutraceuticals and supplements with health claims, firearms and certain accessories, tobacco and vaping products, alcohol in many configurations, and certain pharmaceutical-adjacent products.
WooCommerce’s payment gateway ecosystem is significantly larger than Shopify’s. WooCommerce supports hundreds of gateway integrations, including processors who have built their business specifically around serving industries that standard processors avoid.
How high-risk payment processing works
- Underwriting. Standard processors approve accounts instantly or within hours. High-risk processors underwrite your account by reviewing your business model, your product catalog, your website, your processing history if you have it, and sometimes your business financials. This takes one to four weeks.
- Rolling reserves. Most high-risk processors hold a percentage of your revenue, typically five to ten percent, in a reserve account for a period of time, often six months. This protects against chargebacks. The reserve is released after the holding period, assuming your account is in good standing.
- Higher per-transaction rates. High-risk processing for CBD and similarly restricted categories typically runs 3 to 5.5 percent per transaction plus a per-transaction fee, versus 2.2 to 2.9 percent for standard processing. Factor this into your pricing and margins before you launch.
- Chargeback thresholds matter. Most high-risk processors set hard limits around a two percent chargeback rate. Exceeding this can result in account termination. This makes fraud prevention and clear return policies genuinely important operational requirements, not just best practices.
Processors that work with WooCommerce for regulated products
Processor availability, pricing, and underwriting appetite change often in this space, so verify current terms directly and confirm WooCommerce compatibility before committing to anyone below.
- CBD and hemp products: PaymentCloud, Durango Merchant Services, and PayKings all maintain active CBD and hemp merchant programs. Availability depends on your state and product specifics. Some processors differentiate between isolate, broad-spectrum, and full-spectrum products, and price or underwrite them differently.
- Dietary supplements and nutraceuticals: PaymentCloud and Host Merchant Services both work with supplement and nutraceutical merchants. The specific health claims in your marketing copy get reviewed during underwriting, so have your product copy finalized before you apply.
- Firearms accessories: Soar Payments and Durango Merchant Services both work with firearms-adjacent categories. Actual firearms transactions require specialist processors and additional compliance layers. This remains one of the most restricted categories in payments.
- Alcohol: Alcohol delivery is complicated less by processors and more by state-by-state shipping and sales regulations. Your processor needs to be comfortable with your specific business model and the states you ship to, which is worth confirming before you build anything around a particular gateway.
Setting up payment correctly in WooCommerce
- Hosted fields versus redirected checkout. Some processors route customers to an external payment page. This is less ideal for conversion than inline payment fields. Ask specifically about the checkout integration method before committing.
- 3D Secure support. Required for European transactions and increasingly important for fraud prevention globally. Verify your processor supports this if you have international customers.
- Tokenization for repeat purchases. If you offer subscriptions or want customers to save payment methods, your processor needs to support tokenized card storage. Not all high-risk processors do.
The mistake that gets accounts terminated
The single most common reason high-risk accounts get terminated mid-operation: the processor approved you for one product category, and your actual catalog expanded beyond what they signed off on.
If you’re approved to sell hemp-derived CBD isolate and you add full-spectrum products, you’ve potentially violated your processor agreement. Be comprehensive in your initial application. Tell your processor what you actually sell and what you plan to sell. Processors who specialize in your category would rather set expectations correctly at the start than terminate your account six months in.
| WORKING WITH BRIOFORGE Still shopping for a processor, or already sitting on a rolling reserve that’s eating your cash flow? Payment setup for regulated products isn’t a place to guess and fix later. We help clients pick a processor that matches their actual catalog, not just their launch-day catalog, and get the underwriting paperwork right the first time so accounts don’t end up terminated six months in over a category mismatch nobody flagged. If you’re building this from scratch or untangling a processor problem you already have, that’s worth a conversation. Get in touch at brioforge.com/contact. |
Frequently asked questions
Can I use Stripe for CBD on WooCommerce?
No. Stripe explicitly prohibits CBD, hemp-derived products, and most nutraceutical categories in its terms of service. Accounts selling these products are terminated when detected. There’s no approved workaround.
How long does high-risk payment processing approval take?
Typically two to four weeks for most categories. More complex applications, higher volume, a newer business, or previous processing history issues can take longer. Start the application process as early as possible in your build timeline.
What is a rolling reserve and can I avoid it?
A rolling reserve is a percentage of your revenue held by the processor for a period, typically 180 days, as protection against chargebacks. Most high-risk processors require it for new accounts. As your account history develops with low chargebacks and stable volume, the reserve percentage and holding period can often be renegotiated.
Can I have a backup payment processor in WooCommerce?
Yes, and for high-risk merchants it’s worth considering. WooCommerce supports multiple payment gateways simultaneously. Configuring a primary and backup processor provides continuity if one has a processing issue. The technical setup requires careful testing to make sure the correct gateway fires in each scenario.
