How to Accept Credit Cards on an Online Vape Store After Shopify

For years, the standard advice was "you can sell vapes on Shopify if you bring your own payment gateway." That advice is out of date. Some pages still repeat it.

• June 23, 2026: California's Attorney General announced that Shopify had decided to "ban the sale of all vaping products, including e-cigarettes." It followed a November 2025 letter from a bipartisan group of 25 attorneys general asking Shopify for stronger safeguards.
• Late June to early July 2026: merchants received notices and, according to news reports and merchant accounts, had until about July 7–8, 2026 to remove vape listings.
• Scope, as reported: devices, e-liquids, pods, coils and accessories, with or without nicotine. Reports indicate there's no exception for FDA-authorized products. Store owners selling only nicotine-free batteries and accessories have said they were caught by it too.

As of September 25, 2026, Shopify's public Acceptable Use Policy doesn't mention vapes. The rule has reached merchants through notices rather than a published policy page. What matters for you: this is a platform ban, not a payments ban. Switching payment gateways doesn't fix it. You need to move the store.

Displaced vape stores are moving mainly to WooCommerce, BigCommerce and Magento. Each has its own rules and costs, so don't assume what's true of one is true of the others.

Policies and fees as published on each company's site, checked September 25, 2026. Platforms change terms often, so read the current version before you migrate.

WooCommerce vape payments

WooCommerce is free, open-source software that runs on your own WordPress hosting. WooCommerce doesn't host your store, so it doesn't set product rules for it. Your web host does, so read its acceptable use policy before you move. The trade-off for that control: you handle hosting, security updates and plugin maintenance, or pay a developer to.

BigCommerce vape payments

BigCommerce (now part of Commerce) lists Authorize.Net as a built-in option. Two things to check first. Its acceptable use policy doesn't mention tobacco or vapes, but that isn't the same as a written yes, so ask BigCommerce in writing before you move a vape catalog there. And Authorize.Net isn't on BigCommerce's "Embedded Payment Provider" list, so self-serve plans pay an Open Payment Provider fee on those orders: 2.0% on Core, 1.0% on Growth and 0.6% on Scale. Performance plans on contracted terms don't pay it. Build that into your math.

Magento and Adobe Commerce

Magento Open Source is self-hosted, like WooCommerce, and suits larger catalogs with a developer on hand. Adobe hasn't published a vape-specific policy for its hosted Adobe Commerce service. Authorize.Net connects through extensions on the Adobe Commerce Marketplace, including options that support stored cards through Authorize.Net's Customer Information Manager.

Other platforms, such as Shift4Shop, Wix and Squarespace, have their own rules and payment partners. We haven't reviewed them for vape here. If you're considering one, check both its product policy and which gateways it supports.

Every platform offers a one-click payment option. For vape, those options usually say no, each for its own reason:

• WooPayments lists "Tobacco products, including e-cigarettes and vapes" as prohibited (policy page updated August 21, 2026). It applies to every product, authorized or not.
• Stripe lists e-cigarettes and e-liquid as restricted, not prohibited. But as of its September 22, 2026 update, "in the United States, merchants selling electronic tobacco may only sell products authorized by the Food and Drug Administration." FDA's list held 48 authorized e-cigarette products as of August 28, 2026, so most vape catalogs won't qualify.
• Square, PayPal and Braintree each have their own rules for online tobacco sales. We cover them in what to do if your vape merchant account is shut down.

These are payment facilitators: they put thousands of businesses under one master account and write their own product lists. A merchant account works differently. A bank's underwriter reviews your business, products and website before approving you. The card networks also treat online tobacco sales as their own category (MCC 5993) with registration requirements. A merchant account doesn't remove product rules, though. Each bank sets its own, and START works with FDA-authorized products only. What changes is the setup: you're underwritten and coded for vape up front, and you choose your own platform and gateway. Our vape payment compliance guide explains the details.

Online card payments have three pieces. All-in-one services bundle them. For a vape store, you assemble them yourself, and it's simpler than it sounds.

Authorize.Net vape questions come up a lot, so here's the key point. Authorize.Net is a gateway, not the bank. It lets you connect to the merchant account provider of your choice, and it doesn't publish a vape-specific policy. What you're allowed to sell is set by the merchant account behind it. Get that approved for vape first. START has set up more than 60,000 Authorize.Net accounts over 20+ years, and the gateway is pre-integrated with more than 1,000 shopping carts.

1. 1

   Apply for a merchant account, disclosing that you sell vapes online

   Include your product list, website and shipping setup. See vape merchant account requirements for the documents.

2. 2

   Get your Authorize.Net gateway

   Once you're approved, your provider sets up Authorize.Net linked to your merchant account.

3. 3

   Copy your API credentials

   In the Authorize.Net Merchant Interface, find your API Login ID and generate a Transaction Key. Treat them like passwords.

4. 4

   Connect your platform

   WooCommerce: install the Authorize.Net extension and enter your credentials. BigCommerce: go to Settings › Payments, open the "Open" tab and set up Authorize.Net. Magento: install your chosen extension and configure it in the admin.

5. 5

   Test, then go live

   Place a small real order and refund it. Confirm it shows in your store and in Authorize.Net, and that fraud filters, AVS and CVV checks are on.

A payment gateway takes the card. Federal and state law decide what else your checkout must do. Underwriters check these before they approve you, so build them in before you apply:

• ✓Database age verification at checkout. The PACT Act requires checking the buyer's age against a commercially available database, not just a "Yes, I'm 21" box. Age-verification apps integrate with WooCommerce, BigCommerce and Magento.
• ✓State shipping blocks. Several states ban or limit direct-to-consumer vape shipping, and directory and flavor laws vary by state. Block restricted states and products at checkout.
• ✓An adult-signature carrier. USPS, UPS and FedEx don't carry vapes to consumers. You need a private carrier that checks photo ID and collects an adult signature on delivery.
• ✓Tax collected before delivery. Many states tax vapes, and PACT requires delivery sellers to pay state and local taxes before the order arrives.

The details are in our PACT Act and age verification guide, including ATF registration and the monthly reports due by the 10th. For the general website basics (policies, contact details, secure checkout), see what your website needs to accept credit cards.

Auto-ship is convenient for repeat adult customers. On Shopify, many vape stores struggled to offer it because the subscription app or the gateway didn't allow nicotine. With Authorize.Net, the billing tools are part of the gateway:

• Customer Information Manager (CIM) stores the card as a secure token, so your site never holds card numbers.
• Automated Recurring Billing (ARB) runs charges on a schedule.
• WooCommerce: the Authorize.Net extension supports WooCommerce Subscriptions. CIM must be switched on in your Authorize.Net account, which may add a monthly cost.
• BigCommerce: stored cards through Authorize.Net also require CIM.

The compliance point most sellers miss: every subscription box is a separate delivery sale under the PACT Act. Each shipment needs an adult signature and photo ID check at delivery, state taxes paid, the required package label and a line in your monthly reports. Recheck your state blocks too, in case a subscriber moves somewhere you can't ship. Price your plans with the per-delivery signature cost included.

Recurring charges are also a common source of disputes ("I cancelled," "I didn't recognize this"). Send a reminder before each charge and make cancelling easy. Our guide to e-liquid subscription disputes covers the rest.

Before you launch auto-ship, confirm that your processor allows recurring billing for vape.

Moving platforms is a project. Here's the order that avoids the most trouble:

1. Export your data. Download products, customers and order history from Shopify as CSV files while you still have admin access.
2. Plan for saved cards. Stored cards don't come across in a CSV export. Plan for subscribers to re-enter a card on the new site, or ask your old payment provider whether a secure, PCI-compliant transfer is possible.
3. Review your product list. Check each SKU's FDA status and each destination state's directory before you relist it. It's cheaper to drop a product now than to lose an account later.
4. Apply for your merchant account early. Underwriters review your new site, so have a staging link ready with policies and age verification in place.
5. Build the checkout stack: age verification, state blocks, carrier integration and tax, as above.
6. Update your PACT registration. ATF and state registrations include your website addresses. If your domain or store URL changes, update them.
7. Redirect old URLs. Shopify uses paths like /products/ and /collections/. Set 301 redirects to the new URLs so you keep search rankings and bookmarks.
8. Set a clear billing descriptor so customers recognize the charge on their statement.
9. Run a test order and refund, then go live and tell existing customers where to find you.
10. Watch your final Shopify payouts. Keep records of any balance still being paid out on the old account.

For what online card processing costs, including gateway fees and reserves, see vape shop credit card rates, fees and reserves.

This article is general payments guidance, not legal advice. Platform terms, card-network rules and vape laws change often. The policies above were checked on September 25, 2026. Confirm your obligations with an attorney or your state's regulators.