Credit Card Processing for Cannabis Dispensaries: 6 Critical Files for the Schedule III Era

Part of The Schedule III Cannabis Hub

If you run a dispensary, you have probably tried at least three “compliant” credit-card processing solutions and watched all three either get shut down or quietly switched to cashless ATM workarounds that cost your customers $4 a transaction. The reason is the same in every case: federal illegality. Visa and Mastercard’s published rules treat marijuana sales as prohibited because federal law treats marijuana as a Schedule I controlled substance. Mastercard reiterated as much in 2023 when it specifically instructed financial institutions to stop allowing marijuana purchases on its debit cards.

On April 22, 2026, that federal-illegality predicate moved. State-medical-licensed marijuana is now Schedule III. Credit card processing for cannabis dispensaries just got materially better arguments. It did not get a green light. This post explains what changed, what would actually move Visa and Mastercard, and the six merchant-onboarding files that give your dispensary the best shot at legitimate card processing in the post-Schedule III era.

Why credit card processing for cannabis dispensaries was blocked in the first place

The credit card processing cannabis dispensary problem has had the same root cause for a decade.

Card networks are private rule-systems, not government regulators. Their cannabis prohibition was grounded in three things:

1. Federal illegality. Visa and Mastercard each have rules prohibiting illegal activity. Marijuana being Schedule I made every transaction a “transaction in an illegal substance” under their network rules.
2. Bank chargeback / settlement risk. Card-network transactions settle through banks. Banks that processed cannabis sales risked OFAC, AML, and BSA exposure. The networks did not want to expose their entire bank-member base to that risk.
3. Reputational and political risk. Federal prosecutors had broad discretion to bring money-laundering and unlicensed-money-transmission charges against cannabis-touching financial actors. Networks did not want to be on that list.

All three reasons were grounded — directly or indirectly — in federal illegality. Schedule III recognition for state-medical-licensed marijuana directly reduces the first and indirectly reduces the second and third. That does not mean the networks have changed their rules. It means the case for changing the rules just got stronger.

What would actually move Visa and Mastercard

Three things, in approximate order of likelihood:

1. Updated FinCEN guidance specifically addressing card-network risk. FinCEN’s 2014 marijuana guidance addressed banks but did not specifically address card-network or merchant-services risk. An update — perhaps as part of Treasury’s broader post-Final Order guidance — would give the networks regulatory cover to update their rules.
2. Federal banking regulator clarity. OCC, FDIC, and Federal Reserve guidance to member institutions stating that processing state-medical-license cannabis transactions is acceptable activity would force the networks to update.
3. Litigation / regulatory action. A state attorney general challenge to network prohibitions on state-licensed activity, or an antitrust theory against coordinated network refusal to process state-legal commerce, could force the networks. Less likely but plausible.

In the meantime, third-party payment facilitators, ACH-based solutions, and cryptocurrency-adjacent products will continue to dominate. The dispensary that wants to be ready when networks do open up will have built the right merchant-onboarding file.

The 6 merchant-onboarding files for credit card processing cannabis dispensary applications

This is the post-Schedule III merchant file. Build it now so when a network or processor signals openness, you do not spend three months scrambling.

File 1 — Medical-endorsed MCC (Merchant Category Code) request

Cannabis is currently coded with restricted MCCs that trigger network filters. Work with your processor to identify the appropriate MCC for state-medical-licensed retail. As networks update rules, MCC reassignments will follow. Be ready to redocument under a medical-pharmacy-adjacent MCC framework.

File 2 — State medical marijuana license + endorsement file

Same eight-file federal readiness package we cover in Cannabis Banking After Schedule III. The merchant-services underwriter wants the same documentation the bank’s BSA officer wants.

File 3 — Per-transaction medical-purpose certification

This is the differentiator vs. recreational dispensary processing. Every retail transaction generates a record showing:

• Customer self-certification (under the OTC Therapeutic Endorsement framework)
• Medical-purpose category
• Product SKU / batch / cannabinoid profile
• Quantity and dosage
• Employee / consultant ID
• Timestamp

This makes the transaction underwritable as a medical-purpose retail sale rather than a recreational sale. Without it, every Schedule III argument lives or dies in the recreational-vs-medical interpretation. With it, the transaction is concrete.

File 4 — Anti-diversion controls documentation

Card networks care about chargeback risk. Show your controls:

• ID verification (every transaction)
• Purchase-limit enforcement (per state law plus your internal limits)
• Refund / dispute resolution policy
• Recall / adverse-event procedures
• Loyalty / repeat-customer monitoring

File 5 — Settlement and chargeback reserve plan

Cannabis chargebacks have historical risk profiles that processors price into reserve requirements. Document your chargeback rate (target <0.5%), your dispute resolution procedure, and your reserve coverage. The cleaner your historical data, the better your underwriting.

File 6 — Cross-state and interstate-transport prohibition

Demonstrate that your transactions are intra-state, point-of-sale, and not delivered across state lines. Card networks specifically worry about transactions that could implicate federal interstate commerce concerns. Show physical retail location, in-state delivery only (where applicable), and no out-of-state shipping.

What dispensary operators should do this quarter for credit card processing cannabis dispensary readiness

While you wait for Visa and Mastercard to update their rules, do six things now to prepare your credit card processing cannabis dispensary file:

1. Build the file above. Every operator should have it ready.
2. Audit your current processor. If you are on a third-party payment facilitator that has been quietly running cannabis sales through aggregator MIDs, get clear on whether your current arrangement survives a Visa/Mastercard rule update or whether it gets scrutinized harder once they actually focus on the category.
3. Talk to your bank about merchant services. Banks that serve your DDA may not offer merchant services for cannabis. As Schedule III recognition reshapes risk-rating, that may change. Ask.
4. Watch for processor signals. Specific processors will start signaling cannabis acceptance under Schedule III. Be on the list.
5. Coordinate with your state cannabis regulator. State regulators that issue compliance certificates and license-verification APIs make your merchant file dramatically easier. If your state does not yet, lobby for it. We recommend the OTC Therapeutic Cannabis Endorsement Model Act which builds verification into the program design.
6. Maintain cash-handling controls. Even when card processing opens up, cash will remain a meaningful portion of cannabis retail for years. Don’t let your cash controls erode in anticipation.

For payment processors and ISOs reading this

If you work merchant services and you’ve been turning down cannabis MID requests because of network rules, the Schedule III moment is the right time to reopen the analysis for state-medical-licensed dispensaries. Most major networks have not changed rules. Some smaller processors and ISOs have indicated interest in expanding under a Schedule III framework. The product opportunity is real. Build the underwriting model now.

We have prepared an ISO / Processor Underwriting Memo as part of the Banking & Payments Compliance Packet. Reach out.

Credit card processing cannabis dispensary FAQ

Did the DOJ Final Order force Visa and Mastercard to accept cannabis?

No. Card networks are private rule-systems. The Final Order changed federal scheduling but did not change network rules. Visa and Mastercard have not (as of this writing) updated their cannabis prohibitions for state-medical-licensed activity.

Can my credit card processing cannabis dispensary setup accept Visa or Mastercard now?

Not through standard merchant accounts at major processors. Some workarounds (cashless ATM, third-party payment facilitators, debit-PIN-based products) continue to exist with varying network compliance. The compliant answer is no — for now.

When might card networks update?

Most likely after FinCEN issues updated guidance specifically addressing card-network risk for state-medical-licensed cannabis, OR after federal banking regulators (OCC, FDIC, Fed) issue guidance to member institutions. Timeline: 6-18 months is plausible but speculative.

What payment options do I have today?

Cash, ACH, debit-PIN-based products that may or may not be technically compliant with network rules, and (in some states) state-licensed payment intermediaries. Stay current with your processor on what’s allowable.

How does the OTC Therapeutic Endorsement help with card processing?

It generates the per-transaction medical-purpose record (File 3 above). Without that record, every Schedule III argument is an interpretation argument. With it, every transaction is documented as state-medical-license activity, which is materially easier to underwrite.

Get the credit card processing cannabis dispensary compliance file

We build the Banking & Payments Compliance Packet for cannabis MRBs preparing for the next round of merchant-services underwriting. It includes the six-file merchant onboarding package, MCC strategy, processor introduction support, and ongoing compliance monitoring.

Get the Banking & Payments Compliance Packet.

For the full hub: Schedule III Cannabis: The Operator, Lawyer & Investor Hub.

• Cannabis Banking After Schedule III (Cluster 3)
• 280E Retrospective Relief (Cluster 2)
• Schedule III Cannabis Investor Disclosure (Cluster 9)
• Cannabis Consulting at collateralbase.com — operator readiness for merchant-services underwriting
• FinCEN BSA Expectations Regarding Marijuana-Related Businesses
• DOJ Final Order
• Article + FAQPage

External ≥2

Cross-site ≥1

Schedule III Cannabis · Cannabis Banking · Cannabis Payments

credit card processing cannabis · cannabis dispensary · Visa cannabis · Mastercard cannabis · cannabis merchant account · cannabis payment processing · Schedule III cannabis · FinCEN

Save Draft