The federal hemp definition changes on 12 November and 11 December 2026. Your processor moves first.

Updated 4 October 2026: the start date has moved. A stopgap funding law signed on 2 September split it in two, so this article now covers both dates. We also corrected what it said about Shopify Payments.

If you sell hemp-derived cannabinoids in the United States, there are now two fixed dates on the calendar: 12 November 2026 and 11 December 2026.

Those are the days the federal definition of hemp narrows. Most of the coverage has treated it as a legal story. For merchants it's a payments story first, because your processor will act on it long before any enforcement agency does.

What changed

The full-year FY2026 agriculture appropriations act rewrote the definition of hemp that the 2018 Farm Bill established. The Congressional Research Service summarises the change and its enforcement implications here.

Three things matter to a store owner.

The threshold moved from delta-9 THC to total THC. The old standard measured delta-9 only, and the whole hemp-derived cannabinoid market was built in that gap. The new standard counts total tetrahydrocannabinol, and total includes THCA and delta-8.

There's now a per-container ceiling. Finished hemp-derived cannabinoid products face a limit of 0.4 milligrams of total THC per container. That's a much harder line than a percentage because it doesn't scale with product size. A large-format product that comfortably passes a dry-weight percentage test can fail a per-container milligram cap.

Synthesised cannabinoids are excluded outright. The new definition carves out cannabinoids the plant can't naturally produce, plus those it can produce but which were synthesised or manufactured outside the plant.

Put together, those changes remove the legal basis for most of what's currently sold as compliant intoxicating hemp.

Why there are two dates now

The new definition was due to start on 12 November 2026, a year after the act passed. Then section 2019 of Public Law 119-103, the stopgap funding law signed on 2 September, said that until 11 December the change only applies to the two paragraphs covering products with "cannabinoids that are not capable of being naturally produced by a Cannabis sativa L. plant".

So here's the split.

12 November: products containing cannabinoids the plant can't produce at all fall outside the definition of hemp.

11 December: everything else. That's the total-THC threshold, the 0.4mg container ceiling, and cannabinoids the plant can produce but that were made outside it. Delta-8 made by converting CBD falls in this group, not the November one.

There's a catch in the second date. 11 December is also the day that stopgap law runs out, so Congress could push the date again, or pass a framework that changes the rules. It could also do nothing. Don't build your plan around another extension. Your processor won't.

Why payments moves before enforcement

Merchants keep asking whether anything will really happen on the day. That's the wrong clock to watch.

An acquiring bank doesn't wait for a prosecution to reprice risk. It reads the statute, works out what share of a merchant's catalogue stops being lawful on a known date, and decides whether it wants that exposure on its book going into the date. Underwriting looks forward by design. That's why processors have historically tightened before a deadline.

So for a hemp merchant, the sequence won't be "December arrives, then problems start." It's closer to this: reviews get stricter through the autumn, new applications in the category get harder, reserves go up on existing accounts, and some acquirers leave the category entirely because policing it product by product isn't worth it to them.

If you're planning around December, you're already planning around the wrong month.

Where the processors currently stand

Stripe is the one mainstream processor with a written yes. Its restricted businesses list permits "CBD products containing only negligible amounts of THC, per local limits".

Look at how that's built. The permission covers products with negligible THC, per local limits, and says nothing about hemp as a category. Those three words matter most, because they point at whatever the governing legal limit is instead of a number Stripe wrote down. When the limit changes, the permission changes with it, and Stripe doesn't have to publish anything for that to happen.

PayPal doesn't name hemp or CBD at all. In practice the clause that gets applied is its one about "narcotics, steroids, certain controlled substances or other products that present a risk to consumer safety".

Shopify Payments is simpler, and stricter. Shopify's own help page on hemp payments says "Shopify Payments doesn't support the sale of hemp, cannabidiol (CBD), and tetrahydrocannabinol (THC) products." Stripe's written yes never reaches a Shopify merchant, because Shopify says no first. Shopify will still host the store. You take payment through a third-party provider that integrates with Shopify, and the same page names DigiPay and Bankful as examples. If Shopify Payments was already removed from your store for hemp, that page says you may still be able to stay on Shopify with another provider. We went through the Shopify side in more detail in can you sell CBD on Shopify.

You can see all three side by side, quoted with sources, on our CBD and hemp page. We track the date itself, and anything else that moves before then, on the policy tracker.

What to do between now and then

Split your catalogue into three piles today. Products that pass a total-THC standard including THCA and delta-8. Products that fail it. And products you're not sure about because your certificates of analysis only ever tested delta-9. That last pile is usually the biggest, and it takes the longest to sort out.

Re-test on total THC. A COA that reports delta-9 alone doesn't prove anything useful anymore. If you buy finished goods, your supplier's existing COAs have the same problem. Asking now is a lot cheaper than asking in late November, when every other buyer is asking too.

Check for synthesised cannabinoids first. Anything containing a cannabinoid the plant can't produce has the earlier date, 12 November. Pull it or reformulate it before then.

Check the per-container maths separately. The 0.4mg ceiling is a different test from the percentage, and a product can pass one and fail the other. Large-format tinctures and multi-serving packages are where this bites hardest.

Talk to your acquirer before they talk to you. A merchant who shows up with a sorted catalogue, updated COAs and a plan looks completely different from one who gets discovered mid-review. Of everything on this list, this does the most, and all it costs you is getting the timing right.

Get a non-card rail working before you need it. ACH and crypto won't carry a business on their own, but they keep revenue moving through a gap. Building that path while your card processing still works is straightforward. Building it after a termination, with a held balance and no working checkout, isn't.

Don't solve this by relabelling. Renaming a product that stays the same is the worst move available to you. It doesn't change the total-THC number. And if it's read as concealment, a category problem becomes a misrepresentation problem, which is what gets merchants long MATCH listings instead of ordinary account closures.

Where that leaves you

If you sell low-THC CBD, this is manageable, and Stripe's written permission will probably survive it.

If your products sell because they're intoxicating, the federal ground under them is scheduled to disappear on a known date, and your payment processing will move first. That's no reason to panic in October. It's a reason to spend October on the catalogue work. The merchants who get through this will mostly be the ones who did that work early. The ones who don't will mostly be the ones who waited to see whether it was real.

---

The Congressional Research Service summarises the statutory change at the link above, and section 2019 of Public Law 119-103 moves the date. We last read the processor policies and Shopify's hemp page on 4 October 2026, and they're linked in place. Policies change, so treat this as a starting point for your own reading. It isn't legal advice. Whether a given product is lawful where you ship it is a question for a qualified attorney, and we aren't one.

We work with hemp merchants on exactly this: sorting the catalogue, the acquirer conversation, and a payment setup that doesn't depend on one decision going your way. If you want to know where you stand before December, tell us what you sell.