Related Questions
.png)
CBD claims liability reaches acquirers.
The FTC and the FDA both actively enforce claims compliance for cannabidiol (CBD) merchants. The FTC issued warning letters to CBD marketers in 2020 and 2022 for unsubstantiated health claims. The FDA has issued over 60 warning letters to CBD companies since 2019. When a merchant in your portfolio makes prohibited disease treatment claims, the acquirer faces reputational risk with card networks, elevated chargeback exposure from customers who dispute charges when product claims are not met, and possible processing holds pending investigation.
Product compliance does not equal claims compliance.
A merchant can pass every product-level check: THC under 0.3%, valid certificate of analysis (COA), compliant ingredients, geo-blocked prohibited states. None of that prevents the same merchant from publishing a blog post titled "How CBD Cured My Anxiety" 60 days after approval. The product remains compliant. The claims do not.
Claim drift is a significant post-approval risk.
In our experience, marketing teams experiment with messaging after onboarding. Affiliates and influencers make unsupported health claims on third-party properties. Seasonal campaigns introduce disease treatment language. A merchant whose website is compliant at underwriting can present materially different claims risk within months.
The comprehensive guide structures CBD claims review as a five-layer audit, progressing from the most visible merchant touchpoints to the least visible.
Product titles, descriptions, dosing language, FAQ sections, and featured customer reviews all carry claim risk. A product titled "CBD Pain Relief Tincture" constitutes a disease treatment claim. Serving instructions framed as medical dosing ("Take 50mg daily to treat insomnia") convert a supplement into an unapproved drug under FDA regulations. Featured testimonials ("This cured my chronic back pain!") without an FDA disclaimer expose the merchant and processor to regulatory scrutiny.
Key insight: The required FDA disclaimer ("These statements have not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease.") must be present on every product page. Its absence is a primary indicator of non-compliance, not a minor oversight.
In our review of CBD merchant risk profiles, blog content is a frequent and often overlooked source of claim violations. Merchants maintain compliant product pages while publishing blog content designed to drive organic search traffic. Common violation types include "How CBD Treats [Condition]" articles, "CBD vs. [Prescription Medication]" comparison posts, and "CBD Dosage for [Disease]" guides. These posts make disease treatment claims, encourage readers to discontinue prescription medications, and cite animal studies as evidence of human efficacy.
Key insight: Internal links from blog posts to product pages establish commercial intent. A blog post claiming "CBD treats chronic pain" that links directly to a product listing is functionally an advertisement, held to FTC advertising standards rather than to editorial discretion alone.
CBD is prohibited or heavily restricted on Google Ads, Meta (Facebook and Instagram), TikTok, and Amazon as of January 2026. Merchants running active campaigns on prohibited platforms indicate either non-compliance with platform policies or evasion through euphemisms ("hemp extract", "plant-based wellness", "cannabinoid supplement"). Both patterns warrant additional scrutiny.
Key insight: Landing page compliance matters as much as ad creative compliance. An ad may pass platform moderation while linking to a landing page that makes prohibited disease treatment claims. The FTC evaluates the full consumer experience, not the ad creative in isolation.
FTC guidance establishes that merchants are responsible for monitoring and correcting affiliate and influencer claims when a compensated financial relationship exists. An influencer posting "This CBD oil CURED my anxiety" with a merchant discount code may generate liability for the merchant, regardless of whether the merchant wrote the copy.
Key insight: Merchants without written affiliate agreements prohibiting medical claims, without affiliate monitoring programs, and without documented takedown procedures for non-compliant content have a structural compliance gap. The relevant question for underwriting is not whether a single influencer made a prohibited claim: it is whether the merchant has the operational infrastructure to detect and remediate it.
Customer service scripts, email marketing, chatbots, and post-purchase inserts can each introduce claim liability at the transaction level. A customer service response recommending "50mg of CBD one hour before bed for insomnia" constitutes medical dosing advice for an unapproved drug. An email campaign with the subject line "Say Goodbye to Anxiety with CBD" is a disease treatment claim delivered directly to customers.
Key insight: Dosing charts in product packaging ("Mild Anxiety: 10-20mg, 2x daily") can convert a supplement into an unapproved drug product under FDA analysis. These materials frequently fall outside standard underwriting review because they are not visible on the merchant website at onboarding.
The guide provides a benchmark compliant profile:
This profile represents an acceptable risk baseline for payment processing within the CBD category.
The guide identifies the most frequently observed errors in CBD merchant assessment:
COA-only verification. Confirming THC content and lab testing is necessary but insufficient. A clean COA does not address what the merchant claims the product does. In our experience, content channels produce more claim violations than product formulation issues, in part because product-level review is more standardized at onboarding.
One-time onboarding review with no ongoing monitoring. CBD claim violations are frequently post-approval events. Merchants with compliant websites at underwriting add non-compliant blog posts, influencer campaigns, and email sequences after processing begins. Without a monitoring program, these violations are not visible until a chargeback increase or regulatory action surfaces them.
Failure to audit affiliate and influencer networks. In our experience, merchants are not always able to provide a complete list of active affiliates. Independent review sites making aggressive health claims to drive commission revenue represent a category of exposure that is difficult to identify through standard onboarding review. Treating affiliate content as outside the acquirer's scope does not align with FTC attribution guidance.
Additional indicators that warrant escalation: No FDA disclaimer on product pages, customer service scripts that provide condition-specific dosing advice, active advertising on Meta or TikTok for CBD products, blog content explicitly encouraging discontinuation of prescription medications.
The full guide supports the following:
The guide includes natural language processing (NLP) keyword tiers for automated claim detection (Tier 1 immediate violations, Tier 2 context-dependent flags, Tier 3 watch terms), investigation protocols for each of the five content layers, affiliate and influencer audit checklists, and a multi-jurisdiction shipping restriction matrix covering state-level CBD regulations as of January 2026.
The complete guide provides operational checklists, claim detection methodologies, regulatory source documentation, investigation scripts, and a multi-jurisdiction compliance matrix.
For payments platforms managing CBD merchant portfolios, the framework provides a structured approach to distinguishing merchants with genuine claims compliance from those whose product-level compliance does not reflect the risk present in their marketing channels.
Read the full CBD claims compliance guide →
Ballerine's merchant monitoring platform enables risk teams to configure continuous claims compliance tracking across CBD merchant portfolios. Acquirers and payment facilitators (PayFacs) can set automated alerts for prohibited claim keywords across product pages, blog content, and advertising channels, and trigger review workflows when new violations are detected post-approval. For platforms managing regulated merchant categories, this provides the ongoing visibility that a static onboarding review cannot.
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.png)
