Is there any way to run paid ads for a hemp THC or CBD brand right now?

For anything intoxicating, no. Google's recreational drugs policy prohibits marijuana and enforces the same standard against hemp-derived intoxicants, and Meta prohibits ads promoting THC products with no certification path. The real carve-outs are narrow: Google allows topical, hemp-derived CBD at 0.3% THC or less, with LegitScript certification, targeting only California, Colorado, and Puerto Rico; Meta grants written authorization to LegitScript-certified CBD advertisers, US-only and 18+, and allows non-CBD hemp products like seed and fiber without authorization. Ingestibles and inhalables sit outside every carve-out. The practical planning assumption is paid acquisition at zero, with any carve-out treated as fragile upside rather than a channel.

What does the November 2026 federal hemp redefinition actually change for my product line?

H.R. 5371, signed November 12, 2025, rewrites the 2018 Farm Bill definition three ways: total THC including THCA counts toward the 0.3% dry-weight limit; finished consumable products are capped at 0.4 mg combined total THC per container; and cannabinoids synthesized outside the plant are excluded from the definition entirely. It takes effect November 12, 2026. Under that definition, most full-spectrum and hemp-derived THC SKUs on the market today will not qualify as hemp without reformulation. Litigation and amendment efforts are likely, but the safe operational move is to model milligrams of total THC per container as a structured catalog field now, so you can segment and reformulate on your own schedule. Not legal advice — verify the impact on your specific catalog with counsel.

Stripe or PayPal shut my account down. What are the realistic options?

That outcome is written into their published policies, not a moderation accident. Stripe prohibits cannabis products, dispensary businesses, and CBD above local THC limits including edibles, and treats even negligible-THC CBD as a restricted category needing prior approval. PayPal's Acceptable Use Policy prohibits narcotics and certain controlled substances categorically, with no certification path. The realistic replacements are Square's CBD program for hemp-derived products at 0.3% THC or less — expect pricing above standard rates — or a dedicated high-risk merchant account. Either way, the underwriting file decides the outcome: current licenses, per-batch COAs, visible shipping and refund policies, and product copy free of health claims. Expect a rolling reserve, watch your dispute exposure closely, and keep a backup merchant account boarded before you need it.

Do I really need an age gate and a state-by-state shipping matrix, or is that overkill?

It's now enforcement reality. Texas is the clearest example: Executive Order GA-56 directed agencies to bar hemp-derived THC sales to under-21s, and TABC rules adopted September 23, 2025 require government-issued photo ID verification, with retailer licenses at stake. Other states run their own regimes, and they change mid-year. Shipping restrictions also vary by product class, not just by state: under the PACT Act and the USPS final rule, hemp and CBD vaping products are nonmailable to consumers even at 0.3% THC or less, while non-vape hemp products can still ship. The correct implementation is a per-SKU-class matrix enforced in checkout — blocking restricted combinations before payment — with a change log showing when each rule took effect on your site. A disclaimer paragraph doesn't do any of that work.

Verticals / Cannabis & Hemp

Cannabis & Hemp

Growth infrastructure for the vertical where every ad account gets closed.

Cannabis and hemp operators run consumer brands under conditions most DTC founders never encounter. Google Ads classifies marijuana under its recreational drugs policy and prohibits it outright. Meta's ad standards state that advertisers can't run ads promoting THC products or cannabis products containing related psychoactive components — and both platforms enforce against hemp-derived intoxicants exactly as they do against dispensary flower. The carve-outs that exist are narrow, certification-gated, and cover almost none of what actually sells.

The regulatory floor is moving at the same time. On November 12, 2025, the federal funding package (H.R. 5371) rewrote the definition of hemp: total THC — including THCA — now counts toward the 0.3% dry-weight limit, finished consumable products are capped at 0.4 mg total THC per container, and cannabinoids synthesized outside the plant are excluded entirely. The new definition takes effect November 12, 2026. States moved even earlier: Texas spent 2025 fighting over an outright ban before settling, for now, on Executive Order GA-56 and TABC rules requiring 21+ ID verification for every consumable hemp sale.

In this vertical the website is not a brochure. It is the entire acquisition channel, the compliance record, and the underwriting file for whatever payment processor you can keep. zsty builds sites on that assumption, because zsty's founder operates a hemp brand under these exact constraints — this page describes our own operating environment, not a market we read about.

Where the ad platforms stand

Google Ads — cannabis / THCBanned

Google's recreational drugs policy prohibits ads for substances that alter mental state, naming marijuana explicitly, along with drug paraphernalia and cultivation equipment. Any product over 0.3% THC is prohibited regardless of state legality. Hemp-derived intoxicants (delta-8, THCA flower, hemp-derived delta-9 edibles) are enforced under the same policy.

policy source →

Google Ads — topical CBD carve-outCertification-gated

Google permits ads only for topical, hemp-derived CBD products at 0.3% THC or less (creams, sprays, roll-ons, lotions), only targeting California, Colorado, and Puerto Rico, and only for advertisers holding LegitScript certification plus Google's own CBD certification. Ingestibles, supplements, and inhalants are excluded — the carve-out does not cover most of a typical hemp catalog.

policy source →

Meta (Facebook / Instagram) — THCBanned

Meta's Drugs and Pharmaceuticals ad standard states advertisers can't run ads that promote THC products or cannabis products containing related psychoactive components. There is no certification path for anything intoxicating, and organic accounts promoting sales face removal under parallel commerce policies.

policy source →

Meta — CBD and non-CBD hempCertification-gated

CBD ads require prior written authorization from Meta plus active LegitScript certification, may run only in the United States, may not target under-18s, and may not make health claims. Only hemp products containing no CBD and no more than 0.3% THC (hemp seed, hemp fiber) can be advertised without authorization, in the US, Canada, and Mexico. LegitScript certifies non-ingestible CBD, so ingestible SKUs remain effectively closed.

policy source →

What closed paid channels do to the economics

When Google and Meta are closed, the standard DTC playbook — buy traffic, measure blended CAC, scale what converts — simply does not exist. What remains are channels that behave like assets instead of auctions: organic search, an owned email and SMS list, wholesale and licensed-channel distribution, and word of mouth. These channels have a different cost curve. They are expensive up front and nearly free at the margin, which means the operators who win in cannabis and hemp are the ones who treat content, site architecture, and list-building as capital expenditure rather than marketing spend. A ranking page keeps producing customers for years; there is no daily budget to get outbid on.

Payments compound the math. High-risk processing costs more per transaction than the 2.6–2.9% a standard retailer pays, reserves hold a slice of your cash, and a single processor termination can zero out revenue for weeks while you re-board. That means margin and retention have to carry more weight than in ordinary e-commerce: pricing must absorb the processing premium, and the owned list — the one channel no platform can revoke — becomes the primary engine of repeat purchase. Operators who plan for paid acquisition to stay at zero and build reorder economics around email, SMS, and subscriptions are the ones still standing after each policy shift.

Compliance is site architecture

Age verification is statutory now, not cosmetic
Texas Executive Order GA-56 (September 10, 2025) directed state agencies to bar hemp-derived THC sales to anyone under 21, and TABC adopted rules on September 23, 2025 requiring government-issued photo ID verification with license revocation on the line. A splash-page age gate is the floor; the architecture should log verification events and support real ID checks where a state requires them at sale or delivery.
Per-batch COAs wired into the catalog, not buried in PDFs
LegitScript certification requires third-party Certificates of Analysis and product samples tested against THC limits, and every serious processor underwriter asks for the same file. Each lot should resolve from the label QR code to a canonical COA page tied to the SKU and batch — structured, crawlable, and current. This is simultaneously a trust page, a certification artifact, and an underwriting document.
A state shipping matrix enforced at checkout, per SKU class
Hemp-derived THC legality varies by state and by product type, and 2025–2026 legislative sessions are rewriting it continuously. The matrix belongs in checkout logic — blocking restricted SKU classes by destination state — not in an FAQ paragraph. Keep an auditable change log so you can show when a rule took effect and when your site began enforcing it.
Zero health claims, enforced at the copy system level
Square's CBD program terms prohibit claims that products cure, treat, or aid conditions such as anxiety, depression, or inflammation, and LegitScript reviews marketing claims as part of certification. Claims discipline has to extend past product pages into email, reviews, and blog content — one 'helps with sleep' in a customer review widget can surface in a processor or certifier audit.
Model total THC per container before November 2026
The federal definition effective November 12, 2026 caps finished hemp products at 0.4 mg combined total THC per container and counts THCA toward the dry-weight limit. The catalog schema should carry milligrams of total THC per container and synthesis provenance as structured fields today, so you can segment, reformulate, or sunset SKUs on your own timeline instead of during a compliance emergency. Not legal advice — verify with counsel.

Payment infrastructure

Stripe — prohibited for cannabis, restricted for low-THC CBD
Stripe's restricted businesses list prohibits cannabis products, cannabis dispensaries and related businesses, and CBD products with THC levels greater than the applicable local jurisdiction's legal limit, including CBD edibles. CBD containing only negligible THC per local limits sits in the restricted category — meaning explicit prior approval, which in practice is rarely granted. Building a hemp store on default Stripe is building on a termination timer.
PayPal — categorically closed
PayPal's Acceptable Use Policy prohibits transactions involving narcotics, certain controlled substances, products that present a risk to consumer safety, and drug paraphernalia — language PayPal applies to cannabis and CBD products across the board. There is no certification path. Treat PayPal (and Venmo) as unavailable rails for this catalog.
Square's CBD program — the one mainstream on-ramp
Square operates a dedicated CBD program allowing sellers to accept payments for hemp and hemp-derived CBD products at or equal to 0.3% THC in most US states. Expect pricing above Square's standard rates, and hard lines: no marijuana, nothing over 0.3% THC, no kratom or paraphernalia, and no claims that products cure or treat health conditions. For compliant hemp CBD catalogs, this is the lowest-friction start.
Dedicated high-risk merchant accounts
CBD-specialist acquirers underwrite what mainstream processors won't, but they underwrite hard: business licenses, per-batch COAs, transparent shipping and refund policy pages, and claims-clean product copy. Rolling reserves are common, and dispute exposure is watched closely — descriptor clarity, delivery confirmation, and responsive refunds keep the account alive. Keep a second merchant account warm; redundancy is cheaper than downtime.
Above 0.3% THC, card rails are closed — design for licensed-channel commerce
Every processor above prohibits products over 0.3% THC, whatever a state license says. E-commerce for licensed cannabis is therefore order-ahead architecture: the site carries the menu, compliance content, and pickup or delivery orchestration, and payment completes on rails the license and the local rules actually allow. Also note shipping law: under the PACT Act and the USPS final rule, hemp and CBD vaping products are nonmailable to consumers even at 0.3% THC or less — non-vape hemp products remain mailable.

The zsty approach

The method is organic-first because it has to be. Search is the one high-intent channel that never asks for ad approval, and in cannabis and hemp the query landscape is saturated with exactly the questions this page covers — is this product legal in my state, where is the COA for this batch, can this ship to me, what changes in November 2026. Most brands won't invest in answering those questions rigorously. Pages engineered around them earn rankings and customer trust at the same time, and the same pages double as the documentation LegitScript reviewers and processor underwriters want to see. Compliance architecture and acquisition architecture are the same build.

This isn't theory zsty sells to other people. zsty's founder operates Big Moose Hemp, a DTC hemp brand, under the total ad prohibition described above — no Google, no Meta, no paid social, ever. zsty built and supports vendor-side work for Buck Mountain Cannabis, built out cbd.domains, and zsty.us itself ranks organically without a dollar of paid placement. The playbook was developed on our own properties, in the hardest ad-banned vertical there is, before it was ever offered as a service.

An engagement starts with an architecture audit against the constraints on this page: age and ID gating, the per-batch COA system, the state shipping matrix, claims-safe copy patterns, and the processor underwriting file — then a content program aimed at the query space your customers are already searching. We coordinate with your counsel rather than replacing them; nothing here is legal advice, and in this vertical the site should make your lawyer's job easier, not rehearse arguments for them.

Case study

Big Moose Hemp and Buck Mountain Cannabis: operating under the ban, not theorizing about it

Big Moose Hemp is a DTC hemp brand operated by zsty's founder — under the full ad prohibition this page describes. There has never been a Google Ads account to optimize or a Meta pixel to feed. The brand acquires customers through organic search and owned channels, and the storefront runs the exact architecture recommended above: per-batch COAs, age gating, claims-disciplined copy, and shipping rules enforced by state. When zsty proposes a build pattern to a client, it's because that pattern is running in production on our own store.

Buck Mountain Cannabis engaged zsty as a vendor: we built the website and supported Orange County distribution and product placement into licensed dispensaries. That work is where our order-ahead view of THC commerce comes from — a licensed cannabis brand's site sells nothing directly by card; its job is to move product into and through the licensed channel while the compliance layer holds. We are a vendor to that business, and we frame it exactly that way.

Alongside those sit cbd.domains, a domain buildout in the same space, and zsty.us itself, which ranks organically without paid placement. No composite case studies, no borrowed logos, no anonymized 'leading hemp brand.' This is the complete list, and we operate or built every property on it.

Questions operators ask

Is there any way to run paid ads for a hemp THC or CBD brand right now?: For anything intoxicating, no. Google's recreational drugs policy prohibits marijuana and enforces the same standard against hemp-derived intoxicants, and Meta prohibits ads promoting THC products with no certification path. The real carve-outs are narrow: Google allows topical, hemp-derived CBD at 0.3% THC or less, with LegitScript certification, targeting only California, Colorado, and Puerto Rico; Meta grants written authorization to LegitScript-certified CBD advertisers, US-only and 18+, and allows non-CBD hemp products like seed and fiber without authorization. Ingestibles and inhalables sit outside every carve-out. The practical planning assumption is paid acquisition at zero, with any carve-out treated as fragile upside rather than a channel.
What does the November 2026 federal hemp redefinition actually change for my product line?: H.R. 5371, signed November 12, 2025, rewrites the 2018 Farm Bill definition three ways: total THC including THCA counts toward the 0.3% dry-weight limit; finished consumable products are capped at 0.4 mg combined total THC per container; and cannabinoids synthesized outside the plant are excluded from the definition entirely. It takes effect November 12, 2026. Under that definition, most full-spectrum and hemp-derived THC SKUs on the market today will not qualify as hemp without reformulation. Litigation and amendment efforts are likely, but the safe operational move is to model milligrams of total THC per container as a structured catalog field now, so you can segment and reformulate on your own schedule. Not legal advice — verify the impact on your specific catalog with counsel.
Stripe or PayPal shut my account down. What are the realistic options?: That outcome is written into their published policies, not a moderation accident. Stripe prohibits cannabis products, dispensary businesses, and CBD above local THC limits including edibles, and treats even negligible-THC CBD as a restricted category needing prior approval. PayPal's Acceptable Use Policy prohibits narcotics and certain controlled substances categorically, with no certification path. The realistic replacements are Square's CBD program for hemp-derived products at 0.3% THC or less — expect pricing above standard rates — or a dedicated high-risk merchant account. Either way, the underwriting file decides the outcome: current licenses, per-batch COAs, visible shipping and refund policies, and product copy free of health claims. Expect a rolling reserve, watch your dispute exposure closely, and keep a backup merchant account boarded before you need it.
Do I really need an age gate and a state-by-state shipping matrix, or is that overkill?: It's now enforcement reality. Texas is the clearest example: Executive Order GA-56 directed agencies to bar hemp-derived THC sales to under-21s, and TABC rules adopted September 23, 2025 require government-issued photo ID verification, with retailer licenses at stake. Other states run their own regimes, and they change mid-year. Shipping restrictions also vary by product class, not just by state: under the PACT Act and the USPS final rule, hemp and CBD vaping products are nonmailable to consumers even at 0.3% THC or less, while non-vape hemp products can still ship. The correct implementation is a per-SKU-class matrix enforced in checkout — blocking restricted combinations before payment — with a change log showing when each rule took effect on your site. A disclaimer paragraph doesn't do any of that work.

zsty buys no ads. It ranks organically — and did so for itself first.

If paid acquisition is closed in your vertical, the owned layer is the whole game. That's the layer we build.

Start a conversation See the live SEO demo

Sources

Recreational drugs — Advertising Policies Help — Google
Dangerous products or services — Advertising Policies Help — Google
Google Advertising for LegitScript-certified CBD Manufacturers and Retailers — LegitScript
Drugs and Pharmaceuticals — Ad Standards — Meta Transparency Center
Prohibited and Restricted Businesses — Stripe
Acceptable Use Policy — PayPal
CBD Payment Processing — Sell CBD Online & In-Store — Square
Federal Funding Bill Overhauls Hemp Definition, THC Cap — Venable LLP
Change to Federal Definition of Hemp and Implications for Federal Enforcement — Congressional Research Service
Gov. Abbott orders Texas state agencies to enforce age restrictions on THC sales — KUT News
Treatment of E-Cigarettes in the Mail (Final Rule) — Federal Register / USPS
USPS Bans Mailing Hemp and CBD Vape Products to Consumers — Vicente LLP

Regulatory and platform policies change frequently. This page is operational analysis, not legal advice — verify current rules with counsel before acting.