Business · Ongoing coverage · 4,529 words

Cannabis Payment Processing: Solutions, Challenges & Banking Options

Cannabis payment processing remains one of the industry's most complex operational challenges due to federal prohibition and banking restrictions. This comprehensive guide examines cash-based operations, compliant payment solutions, merchant account options, and emerging financial technologies serving state-legal cannabis businesses. Learn how dispensaries, cultivators, and ancillary companies navigate payment processing restrictions, understand the role of cashless ATMs and compliant payment processors, and discover strategies for managing financial operations in a federally restricted industry.

Last updated August 26, 2026 · 0 updates since publication
A modern point of sale system setup in an İzmir café, ready for transactions.
Cannabis payment processing faces unique restrictions because marijuana remains federally illegal, preventing most banks and traditional payment processors from serving the industry. State-legal cannabis businesses typically operate cash-heavy or use specialized compliant payment solutions including cashless ATM systems, PIN debit networks, and cannabis-focused merchant services. The 2014 FinCEN guidance provides limited banking pathways, while Section 280E tax restrictions and ongoing regulatory uncertainty continue challenging financial operations across the sector.

Executive Summary

Cannabis payment processing remains one of the most complex operational challenges in the regulated marijuana industry, forcing retailers and ancillary businesses to navigate a fragmented landscape of cash-heavy operations, compliant payment solutions, and sudden provider exits. The August 2026 announcement that Square would terminate hemp and CBD merchant accounts by November 5, 2026 underscores the persistent instability in cannabis financial services, even as federal rescheduling discussions advance. Cannabis businesses face higher processing fees, limited banking access, and compliance requirements that mainstream payment processors frequently abandon without warning. Understanding the regulatory framework, available solutions, and risk mitigation strategies is essential for operators seeking sustainable payment infrastructure. The cannabis payment processing ecosystem operates under contradictory federal and state laws. While 37 states have legalized medical or adult-use cannabis, marijuana remains a Schedule I controlled substance under the Controlled Substances Act (21 U.S.C. § 812), creating legal jeopardy for financial institutions serving the industry. This federal-state conflict forces cannabis businesses into cash-dependent operations, increases security risks, complicates tax compliance under Internal Revenue Code Section 280E, and limits access to traditional banking services that most businesses take for granted.

Why Cannabis Payment Processing Matters

The cannabis industry generated $33.6 billion in legal sales in 2025, yet an estimated 60-70% of transactions still occur in cash due to payment processing limitations. This cash dependency creates cascading problems for multiple stakeholder groups. Cannabis retailers face elevated robbery risks, with dispensaries experiencing theft rates 3-4 times higher than comparable retail businesses according to industry security assessments. Employees handling large cash volumes encounter workplace safety concerns, while operators spend significant resources on armored transport, vault infrastructure, and cash management systems that add 2-4% to operational costs. State tax agencies struggle with cash-based revenue collection and audit trails. California reported $635 million in uncollected cannabis tax revenue in 2025, partially attributed to cash transaction opacity. Patients and consumers face inconvenience, limited purchasing power tied to ATM withdrawal limits, and privacy concerns when forced to use on-site ATMs that create transaction records. The financial exclusion extends beyond point-of-sale transactions to affect payroll processing, vendor payments, real estate transactions, and business insurance—creating a comprehensive banking access crisis. The economic scale magnifies these challenges. Multi-state operators manage treasury operations across jurisdictions with different banking access levels. Ancillary businesses serving cannabis companies—including software providers, marketing agencies, and equipment manufacturers—face secondary financial exclusion when payment processors classify them as "cannabis-adjacent." The ripple effects touch landlords who cannot deposit rent checks, attorneys who struggle to accept retainers, and investors who encounter wire transfer rejections. An estimated $18-22 billion in cannabis industry capital remains outside traditional banking systems, creating inefficiencies that suppress business growth and tax revenue.

Background and History: Two Decades of Financial Exclusion

The cannabis payment processing crisis originated with the federal prohibition established under the Controlled Substances Act of 1970, which classified marijuana as Schedule I alongside heroin and LSD. This classification created immediate legal risks for banks under the Bank Secrecy Act (31 U.S.C. § 5311) and anti-money laundering statutes, as processing payments for Schedule I substance sales could constitute money laundering or aiding and abetting federal crimes.

1996-2009: Medical Cannabis Emerges Without Banking

When California voters approved Proposition 215 in 1996, establishing the nation's first medical cannabis program, no corresponding federal guidance addressed banking access. Early dispensaries operated entirely in cash, with operators literally filling duffel bags to pay state taxes. Banks that discovered cannabis-related deposits typically closed accounts immediately, and credit card processors uniformly rejected marijuana merchants. The 2009 Ogden Memo from the Department of Justice, which deprioritized federal enforcement against state-compliant medical cannabis operations, did not extend to financial institutions, leaving banks without legal clarity.

2013-2014: Cole Memo and FinCEN Guidance Create Limited Framework

The August 2013 Cole Memo established eight federal enforcement priorities, suggesting that state-compliant cannabis businesses operating outside these priorities would face reduced federal scrutiny. This created theoretical space for banking relationships, but financial institutions remained hesitant without explicit safe harbor. On February 14, 2014, the Financial Crimes Enforcement Network issued guidance titled "BSA Expectations Regarding Marijuana-Related Businesses" (FIN-2014-G001), establishing three tiers of Suspicious Activity Reports: "Marijuana Limited," "Marijuana Priority," and "Marijuana Termination." The 2014 FinCEN guidance required banks to file SARs on all cannabis accounts but suggested that state-compliant operations posed lower risk. While this guidance technically permitted banking, the compliance burden proved substantial. Banks had to conduct enhanced due diligence, verify state licensing, monitor for diversion to prohibited states, and file continuous SARs. By December 2014, only 105 banks and credit unions reported serving cannabis businesses according to FinCEN data, serving fewer than 3% of licensed operators.

2018: Sessions Rescinds Cole Memo, Banking Contracts

Attorney General Jeff Sessions rescinded the Cole Memo on January 4, 2018, eliminating the federal enforcement priority framework. Although actual prosecution of state-compliant cannabis businesses remained rare, the policy shift triggered immediate banking contraction. Between January and June 2018, an estimated 400-600 cannabis business accounts were terminated as risk-averse financial institutions reassessed exposure. Payment processors including Square, PayPal, and Stripe reinforced prohibitions on cannabis transactions, with automated account monitoring systems flagging and closing suspected marijuana merchant accounts.

2019-Present: SAFE Banking Act Stalls, Alternative Solutions Emerge

The Secure and Fair Enforcement (SAFE) Banking Act, first introduced in 2019, would prohibit federal banking regulators from penalizing financial institutions solely for serving state-legal cannabis businesses. The House of Representatives passed SAFE Banking seven times between 2019 and 2024, but Senate consideration repeatedly stalled over disagreements about pairing banking access with criminal justice reform. As of August 2026, SAFE Banking remains unresolved despite bipartisan House support. The legislative vacuum spurred alternative payment solutions. Cashless ATM systems emerged around 2016, allowing customers to initiate debit transactions coded as ATM withdrawals with "cashback" amounts matching purchase prices. Point-of-sale financing providers including Aeropay, PayQwick, and CanPay developed ACH-based payment systems operating through compliant financial institutions. Cryptocurrency payment processors briefly gained traction in 2021-2022 before volatility and regulatory uncertainty limited adoption. Hypur and other specialized providers built compliant banking networks, though typically charging 3-5% transaction fees compared to 1.5-2.5% for traditional retail.

2024-2026: Rescheduling Discussions and Continued Instability

The Department of Justice initiated rescheduling proceedings in 2024 following a Department of Health and Human Services recommendation to move cannabis to Schedule III. The proposed rescheduling to Schedule III under 21 CFR Part 1308 would not automatically resolve banking access, as financial institutions would still face compliance obligations under the Bank Secrecy Act and state-federal legal conflicts in states without legalization. However, Schedule III status could reduce perceived legal risk and expand the number of financial institutions willing to serve cannabis clients. Despite rescheduling momentum, payment processor exits continued. Square's August 2026 announcement that it would terminate hemp and CBD merchant accounts by November 5, 2026 demonstrated that even federally legal hemp businesses face payment processing instability. The exit affected retailers who had relied on Square's point-of-sale systems and payment processing since the 2018 Farm Bill legalized hemp-derived CBD products. Square did not provide detailed reasoning but cited "evolving risk assessments" in merchant communications.

Key Players in Cannabis Payment Processing

Financial Institutions and Banking Partners

Approximately 800 banks and credit unions reported serving cannabis businesses as of Q2 2026 according to FinCEN SAR data, representing roughly 7% of U.S. depository institutions. Partner Colorado Credit Union, Salal Credit Union in Washington, and Maps Credit Union in Oregon emerged as early adopters, building specialized cannabis banking divisions. These institutions conduct enhanced due diligence, maintain dedicated compliance staff, and charge premium fees reflecting regulatory burden. Typical business checking accounts for cannabis operators cost $500-1,500 monthly compared to $15-50 for traditional businesses. Safe Harbor Financial operates a national network providing banking access through partner institutions, processing over $5 billion in cannabis transactions in 2025. The company conducts seed-to-sale tracking integration, verifies state compliance, and manages SAR filings on behalf of banking partners. Competitors including Abaca and Dama Financial offer similar intermediary services, creating a specialized banking tier between cannabis businesses and traditional financial institutions.

Payment Technology Providers

Aeropay developed ACH-based payment processing allowing customers to link bank accounts and complete purchases through electronic funds transfer. The system operates through compliant banking partners and processes transactions as account-to-account transfers rather than card payments. Aeropay reported processing $890 million in cannabis transactions across 12 states in 2025, with average transaction fees of 3.5% to merchants. CanPay pioneered mobile payment applications specifically for cannabis purchases, building a network of over 1,200 dispensaries across 32 states. The platform connects consumer bank accounts to merchant accounts through ACH transfers, with transactions settling in 2-3 business days. PayQwick offers similar functionality with added features including loyalty programs and purchase limits designed to demonstrate compliance with state possession limits. Hypur provides comprehensive payment and banking solutions including point-of-sale integration, cashless payment options, and business banking services. The company partners with compliant financial institutions to offer checking accounts, payment processing, and treasury management. Hypur processed over $3.2 billion in cannabis payments in 2025 while serving approximately 2,400 dispensaries.

Point-of-Sale System Providers

Cova Software, Dutchie, Flowhub, and Treez dominate the cannabis-specific POS market, offering integrated inventory tracking, compliance reporting, and payment processing. Following Square's exit from hemp and CBD, Cova Software issued statements on August 25, 2026 reaffirming commitment to regulated cannabis retailers and emphasizing partnerships with compliant payment processors. Cannabis-specific POS systems typically integrate with state track-and-trace systems including METRC, BioTrack, and Leaf Data Systems, providing the compliance documentation that banking partners require. These platforms charge $200-800 monthly for POS software plus 2-4% payment processing fees when integrated with compliant processors. The premium pricing reflects specialized compliance features, state regulatory integration, and the limited competitive landscape compared to mainstream retail POS options.

Regulatory Agencies

The Financial Crimes Enforcement Network, a bureau of the U.S. Department of the Treasury, administers the Bank Secrecy Act and issues guidance on cannabis banking. FinCEN maintains SAR data on financial institutions serving marijuana businesses and has not rescinded its 2014 guidance despite Cole Memo rescission. The agency reported receiving over 185,000 marijuana-related SARs between February 2014 and June 2026. The Federal Deposit Insurance Corporation, Federal Reserve, and Office of the Comptroller of the Currency supervise banks serving cannabis businesses, conducting examinations focused on BSA/AML compliance, risk management, and SAR filing accuracy. These agencies have not issued formal prohibitions on cannabis banking but maintain heightened scrutiny of institutions serving the industry. State banking regulators in cannabis-legal states including California, Colorado, and Washington have issued guidance encouraging state-chartered institutions to serve licensed operators with appropriate compliance controls.

Legal and Regulatory Framework

The legal foundation for cannabis payment processing restrictions rests on the Controlled Substances Act (21 U.S.C. § 812), which classifies marijuana as Schedule I, and the Bank Secrecy Act (31 U.S.C. § 5311), which requires financial institutions to report suspicious activity and implement anti-money laundering programs. Processing payments for Schedule I controlled substance sales creates potential liability under 18 U.S.C. § 1956 (money laundering) and 18 U.S.C. § 2 (aiding and abetting), as financial institutions could be deemed to facilitate illegal drug trafficking under federal law. The Bank Secrecy Act requires financial institutions to file Currency Transaction Reports for cash transactions exceeding $10,000 and Suspicious Activity Reports for transactions suggesting illegal activity. The February 2014 FinCEN guidance (FIN-2014-G001) established that marijuana-related businesses trigger SAR filing requirements but created a tiered system distinguishing state-compliant operations from those implicating federal enforcement priorities. "Marijuana Limited" SARs indicate the financial institution has determined the customer operates in compliance with state law and does not implicate Cole Memo priorities. "Marijuana Priority" SARs indicate potential violations of state law or federal priorities. "Marijuana Termination" SARs document account closure decisions. Financial institutions serving cannabis businesses must file quarterly SARs on every cannabis account, creating compliance costs of $5,000-15,000 annually per account. This burden explains why many institutions decline cannabis customers despite theoretical legal permission under FinCEN guidance. The guidance itself carries no force of law and could be rescinded by future administrations, creating policy uncertainty that risk-averse compliance departments find unacceptable. Internal Revenue Code Section 280E prohibits businesses trafficking in Schedule I or II controlled substances from deducting ordinary business expenses, creating effective tax rates of 60-80% for cannabis operators. This tax burden interacts with payment processing challenges by reducing cash flow available for premium banking fees and limiting capital for payment infrastructure investment. The proposed rescheduling to Schedule III would eliminate 280E application, potentially freeing capital for payment processing solutions. The Rohrabacher-Farr Amendment (now Rohrabacher-Blumenauer), renewed annually in federal appropriations bills since 2014, prohibits the Department of Justice from using funds to prevent states from implementing medical cannabis laws. This provision offers limited protection to medical cannabis operators but does not extend to financial institutions and does not cover adult-use programs. The amendment's annual renewal requirement creates ongoing uncertainty. State money transmission laws add additional complexity. Cannabis payment processors moving funds between customers and merchants may require money transmitter licenses under state law, triggering bonding requirements, examination fees, and compliance obligations. Some states including New York and Illinois have issued guidance clarifying that cannabis payment facilitators require money transmitter licensing, while others have not addressed the issue, creating regulatory ambiguity.

State-by-State Payment Processing Landscape

California

California cannabis businesses face particularly acute payment processing challenges due to market size, regulatory complexity, and limited banking access. Despite generating over $5.2 billion in legal cannabis sales in 2025, California operators report banking access rates below 40% according to California Department of Cannabis Control surveys. The state's 2019 Assembly Bill 1525 attempted to create a state-chartered cannabis banking option but implementation stalled over federal preemption concerns and FDIC insurance limitations. Major California cities including Los Angeles, San Francisco, and San Diego host concentrations of cannabis retailers operating predominantly in cash. The Los Angeles Cannabis Task Force reported that cash-dependent operations contributed to 127 cannabis business burglaries in 2025, with losses exceeding $8.3 million. California credit unions including Monterey County Bank and Salal Credit Union serve limited numbers of cannabis clients with enhanced due diligence and premium pricing.

Colorado

Colorado established the most mature cannabis banking infrastructure among legal states, with approximately 80 financial institutions serving marijuana businesses as of 2026. Partner Colorado Credit Union pioneered cannabis banking in 2014, developing compliance protocols that became industry models. The credit union serves over 600 cannabis businesses and processed $1.8 billion in transactions in 2025. Colorado's Marijuana Enforcement Division requires licensed operators to maintain detailed financial records, creating documentation that facilitates banking relationships. Colorado cannabis businesses report banking access rates above 75%, the highest among legal states. However, payment card processing remains limited, with most transactions occurring through ACH-based systems, cashless ATMs, or traditional cash. The state's Banking Board has encouraged state-chartered institutions to serve compliant cannabis operators, and Colorado Attorney General opinions have affirmed that state-legal cannabis banking does not violate state law.

Michigan

Michigan's adult-use market, which launched in December 2019, generated $2.8 billion in sales in 2025 but faces limited payment processing infrastructure. Fewer than 30 Michigan financial institutions reported serving cannabis businesses as of mid-2026, forcing most operators into cash dependency. The Michigan Cannabis Regulatory Agency requires electronic payment tracking for delivery services, creating compliance challenges when payment processors are unavailable. Michigan credit unions including Lake Trust Credit Union and Genisys Credit Union have established cannabis banking programs, but capacity remains insufficient for the state's 1,200+ licensed retailers. Payment processors including Aeropay and CanPay operate in Michigan, though adoption rates remain below 25% of licensed dispensaries.

Illinois

Illinois legalized adult-use cannabis in January 2020 and established regulatory frameworks encouraging banking access. The Illinois Department of Financial and Professional Regulation issued guidance in 2020 clarifying that state-chartered financial institutions may serve cannabis businesses in compliance with FinCEN guidance. Approximately 45 Illinois financial institutions reported cannabis banking relationships as of 2026, serving roughly 50% of the state's licensed operators. Illinois requires money transmitter licenses for payment processors facilitating cannabis transactions, creating a compliance framework that provides legal clarity but adds licensing costs. The state's social equity program, which prioritizes licenses for communities disproportionately impacted by cannabis prohibition, faces particular payment processing challenges as social equity licensees often lack banking relationships and capital for premium payment solutions.

Massachusetts

Massachusetts cannabis businesses encounter banking access rates around 55%, with approximately 35 state financial institutions serving the industry. The Massachusetts Cannabis Control Commission requires detailed financial record-keeping and seed-to-sale tracking through the state's METRC system, creating documentation that supports banking relationships. However, major national banks operating in Massachusetts uniformly decline cannabis accounts, forcing operators to regional institutions and credit unions. Payment processing in Massachusetts relies heavily on cashless ATM systems and ACH-based platforms. The state's 2019 guidance on delivery services required electronic payment options, accelerating adoption of compliant payment processors. Massachusetts dispensaries report average payment processing costs of 4-5% of transaction value, approximately double the rates for comparable retail businesses.

Nevada

Nevada's tourism-driven cannabis market generated $1.4 billion in sales in 2025, with Las Vegas dispensaries serving significant out-of-state customer populations. Banking access remains limited, with fewer than 20 Nevada financial institutions serving cannabis operators. The state's Nevada Department of Taxation requires detailed sales tracking and electronic reporting, but payment processing limitations force most transactions into cash. Nevada's 2019 Assembly Bill 466 required the state treasurer to study cannabis banking options, but no state-chartered solution emerged. Las Vegas dispensaries report particular challenges with tourist customers who lack access to cashless payment apps and rely on on-site ATMs, creating transaction friction and limiting purchase amounts to ATM withdrawal limits.

Oregon

Oregon established early cannabis banking infrastructure through credit unions including Maps Credit Union and Oregon Community Credit Union. Approximately 60 Oregon financial institutions serve cannabis businesses, providing banking access to an estimated 65% of licensed operators. The state's mature medical cannabis program, dating to 1998, created institutional knowledge and compliance frameworks that facilitated banking relationships when adult-use sales began in 2015. Oregon's Cannabis Tracking System integrates with point-of-sale systems, providing transaction documentation that banking partners require. However, payment card processing remains unavailable, and most Oregon dispensaries rely on ACH platforms, cashless ATMs, or cash. The Oregon Liquor and Cannabis Commission has advocated for federal banking reform, citing cash-related security incidents and tax collection challenges.

Washington

Washington state cannabis operators access banking through approximately 50 financial institutions, primarily credit unions and community banks. Salal Credit Union pioneered Washington cannabis banking in 2014, developing compliance protocols and risk assessment frameworks. The Washington State Liquor and Cannabis Board requires integration with the state's Leaf Data Systems tracking platform, creating transaction transparency that supports banking relationships. Washington dispensaries report banking access rates around 60% but payment card processing availability below 10%. Most transactions occur in cash or through ACH-based payment systems. The state's 2019 House Bill 1045 directed the Department of Financial Institutions to study cannabis banking barriers, resulting in recommendations for federal reform but no state-level solutions to federal law conflicts.

Market and Business Implications

Payment processing limitations impose direct costs of 5-8% of revenue on cannabis operators through cash handling, security, compliance, and premium banking fees. A typical dispensary generating $3 million in annual revenue spends $150,000-240,000 on payment-related expenses including armored transport ($30,000-50,000 annually), vault and safe infrastructure ($15,000-25,000), cash counting and management labor ($40,000-60,000), banking fees ($25,000-45,000), and security systems ($40,000-60,000). These costs create competitive disadvantages versus traditional retail and reduce capital available for expansion, product development, and employee compensation. Multi-state operators face compounded complexity managing treasury operations across states with different banking access levels. Curaleaf, Trulieve, Green Thumb Industries, and other MSOs maintain separate banking relationships in each operating state, preventing efficient capital allocation and increasing administrative overhead. MSOs report spending $2-4 million annually on treasury management and payment processing across multi-state operations, with dedicated finance teams managing cash logistics, bank relationships, and compliance documentation. The payment processing gap creates market opportunities for specialized service providers. Hypur, Safe Harbor Financial, Aeropay, and competitors raised over $380 million in venture capital between 2019 and 2025, building infrastructure to serve the underbanked cannabis industry. However, these providers charge premium fees reflecting compliance costs and limited competition, extracting value that would otherwise flow to operators or consumers. Cash dependency affects customer experience and purchase behavior. Dispensaries report that ATM withdrawal limits cap individual transactions at $200-400, reducing average ticket sizes and limiting premium product sales. Customers lacking cash access or uncomfortable carrying large amounts avoid cannabis purchases, suppressing demand. Industry surveys suggest that seamless payment processing could increase average transaction values by 15-25% and expand the customer base by 10-15% through improved convenience. Ancillary businesses face secondary financial exclusion when payment processors classify them as cannabis-adjacent. Marketing agencies, software providers, packaging manufacturers, and real estate firms serving cannabis clients encounter account closures and payment processing denials. Square's August 2026 exit from hemp and CBD affected not only direct retailers but also service providers whose customer bases included hemp businesses, demonstrating how financial exclusion ripples through supply chains. The capital markets implications extend beyond payment processing to affect equity raises, debt financing, and exit opportunities. Institutional investors face compliance concerns when portfolio companies cannot access traditional banking, limiting venture capital and private equity flows. Cannabis companies pursuing public listings on Canadian exchanges or U.S. over-the-counter markets encounter additional scrutiny from auditors and regulators regarding cash controls and financial reporting when banking access is limited.

What Experts Say

Financial services attorneys emphasize that FinCEN guidance provides a compliance pathway but not legal safe harbor. According to analysis from Harris Bricken, a law firm specializing in cannabis regulatory issues, financial institutions serving marijuana businesses remain technically vulnerable to federal prosecution despite FinCEN guidance, as the guidance constitutes agency interpretation rather than statutory protection. The firm notes that only congressional action through legislation such as SAFE Banking can provide durable legal certainty. Banking industry representatives point to compliance burden as the primary barrier to cannabis banking expansion. A 2025 American Bankers Association survey found that 68% of banks declining cannabis customers cited BSA/AML compliance costs as the determining factor, while 54% cited federal-state legal conflicts and 47% cited reputational risk. The survey indicated that SAFE Banking passage would increase cannabis banking participation by an estimated 40-50% of currently non-participating institutions. Cannabis industry advocates frame payment processing access as essential infrastructure for regulated markets. Aaron Smith, co-founder of the National Cannabis Industry Association, stated in 2025 congressional testimony that payment processing limitations undermine regulatory compliance by reducing transaction transparency, complicate tax collection, and create public safety risks through cash concentration. The association has prioritized SAFE Banking advocacy, arguing that banking access is prerequisite to effective regulation. State regulators report that cash-based operations complicate oversight and tax administration. The California Department of Tax and Fee Administration noted in 2025 reporting that cash transactions create audit challenges, reduce voluntary compliance, and enable diversion to unlicensed markets. The department estimated that payment processing transparency could increase cannabis tax collections by 12-18% through improved reporting accuracy and reduced evasion opportunities. Payment processing providers describe the current market as transitional, with ACH-based solutions serving as interim infrastructure pending federal reform. Aeropay's leadership stated in 2026 investor presentations that the company views current payment solutions as bridging technology until cannabis businesses can access mainstream payment rails. The company projects that federal rescheduling or SAFE Banking passage would transform the competitive landscape, potentially enabling entry by major processors including Square, Stripe, and PayPal. Security consultants emphasize that cash dependency creates quantifiable risk. The National Cannabis Industry Association's security committee reported that cannabis businesses experience robbery rates 3-4 times higher than comparable cash-intensive retail, with average losses per incident of $35,000-50,000. The committee advocates for payment processing solutions as security infrastructure, arguing that electronic transactions reduce both crime targeting and employee safety risks.

What's Next: Calendar and Decision Points

The November 5, 2026 deadline for Square's hemp and CBD merchant account terminations creates immediate urgency for affected retailers to identify alternative payment processing and point-of-sale solutions. Retailers using Square for payment processing must migrate to cannabis-compliant providers including Cova Software, Dutchie, or Flowhub for POS systems, and Aeropay, CanPay, or Hypur for payment processing. The migration timeline requires 4-8 weeks for system implementation, staff training, and customer communication, making September-October 2026 critical for transition planning. The Department of Justice rescheduling proceeding continues through administrative law judge hearings scheduled for late 2026 and early 2027. The DEA's Notice of Proposed Rulemaking to reschedule cannabis to Schedule III under 21 CFR Part 1308 triggered a formal comment period that closed in July 2026, with over 43,000 public comments submitted. Administrative law judge proceedings will evaluate scientific evidence, medical utility, and abuse potential before issuing recommendations to the DEA Administrator. A final rescheduling decision is projected for mid-to-late 2027, though legal challenges could extend the timeline. Rescheduling to Schedule III would not automatically resolve banking access, as marijuana would remain federally controlled and state-legal sales would still conflict with federal law. However, the policy shift could reduce perceived legal risk and expand financial institution participation. Banking industry observers project that Schedule III status could increase cannabis banking access by 20-30% within 12-18 months of implementation. The SAFE Banking Act faces uncertain prospects in the 119th Congress convening in January 2027. The legislation passed the House seven times between 2019 and 2024 but stalled in Senate negotiations over criminal justice reform provisions. Senate leadership has indicated that cannabis banking reform may advance as part of broader financial services legislation rather than standalone bills. Industry advocates project that SAFE Banking passage would occur in 2027-2028 if tied to must-pass legislation, but standalone passage remains unlikely without significant political shifts. State-level initiatives continue to evolve payment processing infrastructure. California Assembly Bill 1525, which would create a state-chartered cannabis banking option, remains under consideration with amendments addressing federal preemption concerns. Colorado is exploring state-backed payment processing systems that could operate independently of federal banking infrastructure. These state solutions face significant legal and technical barriers but represent potential interim approaches pending federal reform. Payment technology providers are developing next-generation solutions anticipating regulatory changes. Blockchain-based payment systems, stablecoin integration, and central bank digital currency applications are under development, though regulatory uncertainty limits current deployment. Major payment processors including PayPal and Stripe maintain cannabis prohibition policies as of August 2026 but industry observers expect rapid market entry if federal legal barriers are removed. The 2026-2027 period represents a potential inflection point for cannabis payment processing, with rescheduling proceedings, SAFE Banking consideration, and provider consolidation creating conditions for significant market evolution. Operators should monitor federal rulemaking calendars, maintain relationships with multiple payment providers to mitigate single-provider risk, and participate in industry advocacy efforts supporting banking access legislation.

Further Reading and Primary Sources

  • FinCEN Guidance FIN-2014-G001: BSA Expectations Regarding Marijuana-Related Businesses (February 14, 2014) - https://www.fincen.gov/resources/statutes-regulations/guidance/bsa-expectations-regarding-marijuana-related-businesses
  • Controlled Substances Act, 21 U.S.C. § 812 - https://www.govinfo.gov/content/pkg/USCODE-2021-title21/pdf/USCODE-2021-title21-chap13-subchapI-partB-sec812.pdf
  • Bank Secrecy Act, 31 U.S.C. § 5311 - https://www.govinfo.gov/content/pkg/USCODE-2021-title31/pdf/USCODE-2021-title31-subtitleIV-chap53-subchapII-sec5311.pdf
  • DEA Notice of Proposed Rulemaking: Rescheduling of Marijuana (2024) - https://www.federalregister.gov/cannabis-rescheduling
  • SAFE Banking Act legislative text and status - https://www.congress.gov
  • FinCEN Marijuana Banking Updates and SAR Statistics - https://www.fincen.gov/marijuana-banking-updates
  • California Department of Cannabis Control Banking Resources - https://cannabis.ca.gov
  • National Cannabis Industry Association Banking Access Resources - https://thecannabisindustry.org/banking
  • American Bankers Association Cannabis Banking Survey (2025) - https://www.aba.com
  • Cova Software merchant services and payment processing information - https://www.covasoftware.com
  • Aeropay cannabis payment processing documentation - https://www.aeropay.com
  • Hypur banking and payment solutions - https://www.hypur.com

Frequently asked questions

Why can't cannabis businesses use traditional credit card processing?

Cannabis businesses cannot access Visa, Mastercard, or traditional merchant services because marijuana remains federally illegal as a Schedule I controlled substance. Major payment networks and their member banks risk federal prosecution, money laundering charges, and regulatory sanctions for processing cannabis transactions. The Bank Secrecy Act and federal anti-money laundering laws create liability for financial institutions serving cannabis companies, even in states with legal programs. This forces most dispensaries to operate cash-only or use alternative compliant payment systems.

What are cashless ATM systems and how do they work for cannabis dispensaries?

Cashless ATM systems allow cannabis customers to make PIN debit purchases without physical cash changing hands. The transaction processes as an ATM withdrawal from the customer's checking account, with the purchase amount rounded to the nearest dollar and any difference returned as change. These systems comply with federal regulations by using existing ATM networks rather than credit card rails. However, some banks have restricted these transactions, and regulatory guidance remains evolving. Cashless ATMs became widespread after 2016 as dispensaries sought alternatives to pure cash operations.

Which payment processors currently serve the cannabis industry?

Specialized payment processors serving cannabis include Cova Software, Dutchie Pay, Aeropay, Hypur, PayQwick, and CanPay, among others. These companies provide compliant solutions using ACH transfers, PIN debit networks, or proprietary payment rails designed for state-legal cannabis transactions. Traditional processors like Square and PayPal explicitly prohibit cannabis transactions in their terms of service. Following Square's 2026 exit from hemp and CBD processing, the industry faces consolidation among remaining compliant providers. Cannabis businesses must verify processor licensing, compliance programs, and long-term viability when selecting partners.

What is the FinCEN guidance and how does it affect cannabis banking?

The February 2014 FinCEN guidance provides limited pathways for banks to serve cannabis businesses without federal prosecution. Financial institutions must file Suspicious Activity Reports for all cannabis-related accounts, conduct enhanced due diligence, and verify state compliance. Banks must file marijuana-limited SARs for compliant businesses, marijuana-priority SARs for regulatory concerns, or marijuana-termination SARs when closing accounts. Despite this guidance, most banks avoid cannabis clients due to compliance costs, federal uncertainty, and reputational risk. As of 2024, fewer than 800 banks and credit unions actively served cannabis businesses nationwide.

How does the SAFE Banking Act address cannabis payment processing challenges?

The Secure and Fair Enforcement (SAFE) Banking Act would prohibit federal regulators from penalizing financial institutions that serve state-legal cannabis businesses. The legislation would provide safe harbor protections for banks, credit unions, and payment processors, enabling traditional banking services including merchant accounts, business loans, and credit card processing. Despite passing the House multiple times since 2019, the SAFE Banking Act has not become federal law. Industry advocates continue pushing for banking reform as essential infrastructure for the regulated cannabis market, particularly as state programs expand.

What are the costs of cash-only operations for cannabis businesses?

Cash-only operations impose significant costs including armored transport fees, insurance premiums, security systems, theft risk, and employee safety concerns. Dispensaries typically spend 8-15% of revenue on cash management compared to 2-3% for card processing in other industries. Cash handling requires vault storage, counting equipment, and dedicated staff time. Businesses face increased robbery risk, with cannabis retailers experiencing theft rates significantly higher than traditional retail. Tax payments require physical cash delivery to government offices. These operational burdens drive demand for compliant payment solutions despite higher processing fees than traditional merchant services.

Can cannabis businesses open regular business bank accounts?

Cannabis businesses can open bank accounts, but options remain extremely limited. Credit unions and community banks comprise most cannabis-friendly institutions, with major national banks generally refusing these accounts. Account holders face enhanced monitoring, detailed compliance requirements, and higher fees than standard business accounts. Banks require extensive documentation including state licenses, operating procedures, and ownership information. Accounts may be terminated without notice if banks reassess risk tolerance. Hemp and CBD businesses face similar but less severe restrictions, with some mainstream banks serving these sectors following the 2018 Farm Bill, though Square's 2026 exit demonstrates ongoing uncertainty.

What payment solutions work for cannabis e-commerce and delivery services?

Cannabis e-commerce and delivery services use specialized payment platforms including Aeropay, Hypur, and integrated solutions from point-of-sale providers like Dutchie and Jane Technologies. These systems process ACH transfers or PIN debit transactions compliant with state regulations requiring payment at delivery or pickup. Some platforms enable pre-ordering with payment on delivery, while others process advance payments through compliant rails. Traditional e-commerce processors like Stripe and PayPal prohibit cannabis transactions. Delivery services must verify customer identity and payment method compliance with state tracking requirements and federal banking restrictions.

How do cannabis payment processors ensure regulatory compliance?

Compliant cannabis payment processors implement know-your-customer verification, state license validation, transaction monitoring, and detailed record-keeping systems. Processors verify businesses hold valid state licenses and operate within regulatory limits. They monitor transaction patterns for suspicious activity, maintain audit trails, and file required reports with FinCEN. Many processors integrate with state tracking systems like METRC to verify product compliance. Processors must balance federal banking restrictions with state-specific regulations varying by jurisdiction. Enhanced due diligence includes beneficial ownership verification, source-of-funds documentation, and ongoing compliance monitoring to maintain banking relationships and regulatory standing.

What happens when payment processors exit the cannabis or hemp market?

When processors like Square exit cannabis or hemp markets, affected businesses face account terminations with limited transition time, forcing rapid migration to alternative providers. The 2026 Square exit gave hemp retailers approximately 75 days to find new solutions. Businesses must transfer customer data, reconfigure point-of-sale systems, train staff on new platforms, and communicate changes to customers. Payment disruptions can halt sales and damage customer relationships. These exits reflect ongoing regulatory uncertainty and risk assessment changes by mainstream financial companies. Cannabis businesses increasingly prioritize processors with demonstrated long-term commitment to the industry over mainstream platforms offering temporary access.

Are cryptocurrency payments viable for cannabis businesses?

Cryptocurrency payments offer theoretical solutions to cannabis banking restrictions but face practical limitations including price volatility, limited consumer adoption, regulatory uncertainty, and tax complications. Some dispensaries accept Bitcoin or stablecoins, but transaction volumes remain minimal compared to cash and debit. The IRS requires reporting cryptocurrency transactions at fair market value, creating accounting complexity. State regulators have mixed positions on cryptocurrency acceptance, with some prohibiting or restricting digital currency transactions. Banking relationships remain necessary for converting cryptocurrency to fiat currency, reintroducing federal compliance concerns. While blockchain technology may eventually enable cannabis payments, current adoption remains limited.

What should cannabis businesses look for when choosing a payment processor?

Cannabis businesses should evaluate payment processors based on regulatory compliance track record, banking relationships, state licensing coverage, integration capabilities, fee structures, and long-term industry commitment. Verify the processor serves your specific license type and state jurisdiction. Assess integration with existing point-of-sale and compliance systems. Compare transaction fees, monthly costs, and hardware requirements. Investigate the processor's banking partners and financial stability to avoid sudden service terminations. Request client references from similar businesses. Prioritize processors demonstrating sustained commitment to cannabis rather than mainstream companies testing the market. Consider backup payment options to maintain operations if primary processors exit.

bankingpaymentscompliancefintechbusiness-operationsregulation
The CannIntel Daily

The cannabis newsletter you forward to your team.

Federal policy, market data, grower alerts, and the one story that matters today. Sent every weekday at 7am. Free.

No spam. Unsubscribe with one click. 21+ only.