Shopify Banned Vape E-Commerce. Here’s How High-Risk Payment Processing Actually Works From Here.

Late last month, Shopify moved to prohibit vape and e-cigarette sales across its platform in the United States, a decision that is shutting down storefronts within days.

If you run a vape brand, distributor, or accessory business, this piece covers what changed, what it costs, and how payment processing actually works for merchants in categories like this one going forward.

What happened

In late June 2026, Shopify began enforcing a platform-wide ban on U.S. vape and e-cigarette sales, following more than a year of pressure from a bipartisan coalition of 25 state attorneys general and the City of New York.

The coalition’s original letter to Shopify, sent in November 2025, argued that the company was providing the underlying infrastructure for a largely unauthorized online vape market, one industry estimate puts at roughly $9 billion in illegal U.S. sales.

The detail merchants keep missing: the ban reaches licensed and unlicensed products alike.

Reporting indicates it applies to all vape sales through Shopify-powered stores, regardless of whether the product carries FDA marketing authorization. Compliant, FDA-cleared brands got caught in the same sweep as unlicensed disposables. Shopify itself has stayed fairly quiet publicly, saying only that it enforces policy against illegal activity. The specifics have come almost entirely from the attorneys general confirming the win, and from merchants finding their stores returning 404s.

This is bigger than a Shopify policy update Treating this as “Shopify has a problem with vape” misses where the pressure is actually coming from. State enforcers have been explicit that they’re targeting infrastructure: platforms, payment networks, logistics, the whole chain, rather than storefronts one at a time.

Mastercard has separately issued guidance to acquiring banks and payment partners, instructing them to tighten merchant oversight and monitor transactions for unauthorized vape sales, and warning of zero tolerance for violations of network standards.

That matters because it means the card networks are moving in the same direction as the platforms. A vape merchant who migrates to a different e-commerce platform but keeps the same payment setup is only solving one half of the problem.

What this actually costs merchants

For merchants caught in the ban, the damage goes well past “find a new website builder.” It includes:

• Immediate revenue loss.: No transition window has been reported. Stores went dark, some within 48 hours of the policy taking effect.
• Orders in flight: Fulfillment, refunds, and customer service for pending orders have to be handled off-platform, often manually.
• Interrupted subscriptions: CRM history, email lists, and order records stay behind unless they were exported before shutdown.
• A marketing and SEO reset: Domain authority, ad accounts tied to the platform, and search rankings stay with the old storefront.
This is the actual cost of a platform-level ban with effectively no grace period.

Why vape and e-cigarette sales are high-risk payment processing

Vape and e-cigarette sales have long been classified high-risk (Merchant Category Code 5993). That classification predates this ban and exists independently of it: age-restricted products, PACT Act registration requirements, and elevated chargeback ratios are the underlying reasons many mainstream payment processors and aggregators decline the category outright, regardless of platform.
Understanding how high-risk payment processing is structured matters more than picking a new storefront.
Here’s what you need to remember:
There are two layers to payment processing and they’re not the same thing.
1: A payment software and orchestration layer handles the technical plumbing: gateway, tokenization, fraud screening, account updater services.
2: Separately, a processor of record (sometimes with a sponsor bank behind it) makes the actual underwriting decisions: whether a merchant is approved, what happens during a hold or a dispute, and whether processing continues.
Depending on the arrangement, a given provider may be the direct processor of record itself, or it may orchestrate routing to a third-party processor. Both structures exist in the market, and they carry different rules.
That distinction is what actually determines a merchant’s outcome, not which software layer they’re using. A processor’s own terms of service govern whether a merchant is eligible to process. Holds, freezes, and terminations are decided by that processor under its own terms, not by the software or orchestration layer sitting on top of it. Two merchants using the same platform and even the same gateway can be on entirely different processing arrangements underneath, with entirely different risk exposure.

Next steps

If you’re a displaced vape or e-cigarette merchant trying to figure out what arrangement fits your business, that’s a conversation about your specific situation, not a generic answer.
If you’d like to talk through the options and find out whether an alternative arrangement could work for you, you’re welcome to reach out to our team to discuss it.

Find The Route

Talk to our team
–– Bankful provides payment software and orchestration services under the Bankful Software Agreement. Depending on the arrangement, Bankful may be the direct processor or may orchestrate routing to a third-party processor. Eligibility to process, including approval, continued processing, holds, freezes, and account termination, is determined by the processor of record under its own terms, which vary by provider and may change. Merchants are responsible for understanding and complying with their processor’s terms of service and acceptable use policy.