A CBD company can incorporate, build a store, stock inventory, and still wait weeks for a processor to say yes. A conventional ecommerce shop clears underwriting in about an hour. The CBD applicant gets one document request, then another, then a manual review that takes days or weeks before an account goes live. The delay is built into how banks underwrite the category, and knowing the parts explains where the time goes.
Inside the Underwriting Review
Underwriting is the risk assessment a processor runs before it agrees to move money for a merchant. For a low-risk store the work is automated. A model reads the business type, the expected volume, and the chargeback history, scores the account, and approves it within about an hour. The account can process within 48 hours.
A CBD account does not take that path. The category has a high-risk label, so the file moves to a human underwriter who reads each document and weighs the business against the acquiring bank’s rules and the card networks’ restrictions. Manual review is slower than a model by design, because the reviewer is looking for reasons the account could produce losses or legal exposure the bank would have to answer for.
The Document Stack a CBD Applicant Must Produce
The first source of delay is the paperwork. A high-risk application asks for far more than a standard one. A typical CBD file includes the employer identification number, articles of incorporation, a voided check for the settlement account, the last three months of business bank statements, three months of prior processing statements, a government photo identification for the signer, a live storefront URL, and a state hemp permit where one applies.
Each item is a checkpoint. A missing bank statement or an expired permit sends the file back to the applicant, and the review clock pauses until the document arrives. Underwriters report applicants waiting days between requests while operations teams work through a queue of follow-up emails asking for what the first submission left out.
Specialized Underwriting for the Category
A general processor treats a CBD application as an exception and routes it through the same slow exception path every time. Providers that specialize in CBD payment processing run underwriting shaped around hemp risk, with acquiring relationships that already accept these businesses and document checklists tuned to what the card networks require. The review still happens, but the reviewer knows the category and asks for the right records up front.
That difference compresses the timeline. When the checklist matches the business from the first request, the back-and-forth that lengthens a review shrinks, and the account reaches approval without the repeated document loops that stall a generalist review.
Aggregators and Dedicated Accounts
Part of the timeline depends on the account type. A payment aggregator can approve a merchant almost instantly, because it boards the business under a shared master account and reviews the finer details later. That speed is why some CBD sellers start there. The problem shows up after the fact, when the aggregator’s later review flags the product and freezes or closes the account. A dedicated high-risk account inverts the order. It front-loads the scrutiny, so approval takes days longer, and the account that emerges is built to survive the reviews that follow. The slower door is the one that stays open.
Know Your Business and the Weight of Due Diligence
Beyond the document count, high-risk underwriting runs deeper identity work. Know Your Business rules require the processor to confirm the legal entity, map the ownership structure, and identify the people who ultimately control the company, its beneficial ownership. A single-owner shop clears this quickly. A CBD business with layered ownership, holding companies, or investors across states gives the reviewer more to verify.
Anti-money-laundering law applies to all of it. High-risk merchants receive enhanced due diligence, which means deeper scrutiny at onboarding and more frequent review after the account is open. The reviewer confirms that the business is real and that the money flowing through it can be accounted for, and that check takes time when the category itself draws regulatory attention.
Product-Level Review and the Certificate of Analysis
CBD underwriting also examines the product, which few other categories require. The reviewer wants proof that what the store sells is legal to sell. That proof is the certificate of analysis, a third-party laboratory report confirming that a product contains 0.3% or less delta-9 THC on a dry-weight basis.
Processors increasingly ask for a certificate of analysis covering every product a store lists. A store with 40 items supplies 40 reports. Independent research has documented poor product labeling accuracy across the category, with most samples missing their stated potency, which is the reason underwriters want lab proof for each item. The reviewer also reads the website copy for health claims, because a page that says a product treats or cures a condition raises both legal and card-network problems. Product-level review is thorough, and thorough is slow.
The Card Scheme Layer of Approval
The acquiring bank is not the only party with a say. Visa and Mastercard classify hemp and CBD as restricted, and each network sets rules an acquirer must satisfy before it boards a merchant in the category. The underwriter is working against the acquiring bank’s risk appetite and the card schemes’ rules at the same time, and a file that satisfies one can still stall against another. That second layer of approval does not exist for a low-risk merchant.
Regulatory Uncertainty and a Higher Bar
Approval reviews grew more cautious in 2025. A November 2025 law reset the federal hemp standard to total THC with a 0.4-milligram container cap, a restriction that takes effect on November 12, 2026. A pending restriction of that size makes underwriters slower to commit, because an account they board today could sell hemp products that become unlawful within the year. When the rules are moving, the review gets longer.
How to Shorten the Review
The high-risk label is fixed, so the applicant’s real influence on the timeline is a complete file. A current certificate of analysis for every product, valid licenses, three clean months of bank and processing statements, and website copy free of health claims give the underwriter everything the checklist demands in one pass. Fast responses to document requests keep the clock moving. The businesses that get approved quickly are the ones that hand the reviewer a file with no gaps to chase.
Turning Weeks Into Days
A long approval review is the cost of a category with more to verify than a standard business. The processor is confirming the entity, the ownership, the money trail, the product, and the legal footing, and each of those checks answers a question a bank would rather resolve before it takes on the account than after. Merchants who prepare the full file turn a review measured in weeks into one measured in days, which is the part of the timeline they can actually control.