The federal hemp definition changes on 12 November 2026. Your processor moves first.

There is now a fixed date on the calendar for everyone selling hemp-derived cannabinoids in the United States, and it is 12 November 2026.

That is the day the federal definition of hemp narrows. Most of the coverage has treated it as a legal story. For merchants it is a payments story first, because your processor will act on it long before any enforcement agency does.

What actually changed

The full-year FY2026 agriculture appropriations act rewrote the definition of hemp that the 2018 Farm Bill established. The Congressional Research Service summarises the change and its enforcement implications here.

Three things matter to a store owner.

The threshold moved from delta-9 THC to total THC. The old standard measured delta-9 only, which is the gap the entire hemp-derived cannabinoid market was built in. The new standard counts total tetrahydrocannabinol, and total includes THCA and delta-8.

There is now a per-container ceiling. Finished hemp-derived cannabinoid products face a limit of 0.4 milligrams of total THC per container. This is a much harder line than a percentage, because it does not scale with product size. A large-format product that comfortably passes a dry-weight percentage test can fail a per-container milligram cap.

Synthesised cannabinoids are excluded outright. The new definition carves out cannabinoids that the plant cannot naturally produce, and those that it can produce but which were synthesised or manufactured outside the plant.

Read together, those three changes remove the legal basis for most of what is currently sold as compliant intoxicating hemp.

Why payments moves before enforcement

Merchants keep asking whether anything will really happen on the day. That is the wrong clock to watch.

An acquiring bank does not wait for a prosecution to reprice risk. It reads the statute, works out what share of a merchant's catalogue stops being lawful on a known date, and decides whether it wants that exposure on its book going into the date. Underwriting is forward-looking by construction, which is why processors historically tighten before a deadline and not after it.

So the practical sequence for a hemp merchant is not "November arrives, then problems start." It is closer to: reviews get stricter through the autumn, new applications in the category get harder, reserves go up on existing accounts, and some acquirers exit the category entirely rather than police it product by product.

If you are planning around November, you are already planning around the wrong month.

Where the processors currently stand

Stripe is the one mainstream processor with a written yes. Its restricted businesses list permits "CBD products containing only negligible amounts of THC, per local limits".

Note the construction. The permission is not for hemp as a category, it is for products with negligible THC, per local limits. That phrase does the work here, because it points at whatever the governing legal limit is rather than at a number Stripe wrote down. When the limit changes, the permission changes with it, and Stripe does not have to publish anything for that to happen.

PayPal does not name hemp or CBD at all. In practice its clause about "narcotics, steroids, certain controlled substances or other products that present a risk to consumer safety" is the one that gets applied.

Shopify Payments has no list of its own. Its terms delegate to the per-country processor, and for the United States that means Stripe and PayPal. We went through that delegation in detail in who actually bans what, and it is why a Shopify merchant's hemp question is really a Stripe question.

You can see all three side by side, quoted with sources, on our CBD and hemp page. The date itself, and anything else that moves between now and then, is tracked on the policy tracker.

What to do between now and then

Split your catalogue into three piles today. Products that pass a total-THC standard including THCA and delta-8. Products that fail it. Products you are not sure about because your certificates of analysis only ever tested delta-9. That third pile is usually the biggest, and it is the one that takes longest to resolve.

Re-test on total THC, not delta-9. A COA that reports delta-9 alone is no longer evidence of anything useful. If you are buying finished goods, your supplier's existing COAs have the same problem, and asking now is considerably cheaper than asking in October when every other buyer is asking too.

Check the per-container maths separately. The 0.4mg ceiling is a different test from the percentage, and a product can pass one and fail the other. Large-format tinctures and multi-serving packages are where this bites hardest.

Talk to your acquirer before they talk to you. A merchant who arrives with a catalogue triage, updated COAs and a plan reads completely differently from one who is discovered mid-review. This is the single highest-leverage thing on the list, and it costs nothing but timing.

Have a non-card rail working before you need it. ACH and crypto are not a business model, but they keep revenue moving through a gap. Building that path while your card processing still works is straightforward. Building it after a termination, with a held balance and no working checkout, is not.

Do not solve this by relabelling. Changing the product name while the product stays the same is the approach with the worst expected outcome available. It does not change the total-THC number, and if it is read as concealment it converts a category problem into a misrepresentation problem, which is what produces long MATCH listings rather than ordinary account closures.

The honest summary

If you sell genuinely low-THC CBD, this is manageable and Stripe's written permission is likely to survive it.

If your products sell because they are intoxicating, the federal ground they stand on is scheduled to disappear on a known date, and your payment processing will move first. That is not a reason to panic in August. It is a reason to spend August doing the catalogue work, because the merchants who get through this will be the ones who did it early and the ones who do not will mostly be the ones who waited to see whether it was real.

---

The statutory change described here is summarised by the Congressional Research Service at the link above, and the processor policies were read on 3 August 2026 and are linked in place. Policies change and this is a starting point for your own reading, not legal advice. Whether a given product is lawful where you ship it is a question for a qualified attorney, and we are not one.

We work with hemp merchants on exactly this: catalogue triage, the acquirer conversation, and a payment setup that does not depend on one decision going your way. If you want to know where you stand before the autumn, tell us what you sell.