Verticals / Firearms & Ammunition

Firearms & Ammunition

Growth infrastructure for a vertical where every mainstream ad channel — and most mainstream processors — already said no.

Where the ad platforms stand

What closed paid channels do to the economics

Compliance is site architecture

• Ship-to-FFL checkout is architecture, not a policy page

  Under 18 U.S.C. § 922, a firearm sold interstate to a nonlicensee must route through a federally licensed dealer in the buyer's state, where the buyer completes ATF Form 4473 and a NICS check before taking possession. That means checkout needs a dealer-selection step backed by an FFL directory, a license capture-and-verification workflow for dealers not yet on file, and an order lifecycle with distinct states — shipped to dealer, received by dealer, transferred to buyer — each with its own customer communications. Retailers bolting this on after launch rebuild their order model twice.

• State-level SKU gating has to fire before payment, not after

  Fourteen states plus D.C. restrict magazine capacity, at thresholds from 10 to 17 rounds — 10 in California, New York, New Jersey, and others; 15 in Colorado; split long-gun/handgun limits in Illinois and Vermont; 17 in Delaware (Giffords tracks the current map). Ammunition adds its own layer: California requires delivery through a licensed vendor with a point-of-sale eligibility check (currently under en banc review in Rhode v. Bonta), and New York routes every ammunition sale through a state-run background check. The catalog needs ship-to-state validation at the cart level, driven by a maintained state matrix, because the lines move with litigation.

• Age logic must be product-class aware

  The federal floor for licensed dealers: no handguns or handgun ammunition to anyone under 21, no long guns or long-gun ammunition to anyone under 18, with higher state minimums controlling where they exist (ATF). A site-wide 18+ age gate is not enough — the checkout has to know that a 19-year-old can lawfully receive rifle ammunition from a licensee but not 9mm, and attestation language should track the actual statutory categories.

• Shipping engines must encode carrier hazmat rules

  UPS accepts ammunition only as "cartridges, small arms" under the limited-quantity exception: Ground-only within the contiguous 48, packages capped at 66 pounds, calibers at or below .50 / 8-gauge, tendered through a scheduled pickup account with hazmat-compliant marking under 49 C.F.R. Part 172. Rate logic that offers an air method on an ammo cart is a compliance failure, not a UX bug — the shipping layer needs product-class awareness just like the age logic does.

• Copy discipline protects the accounts you still have

  Marketing copy should stay inside sporting, hunting, competition, and lawful-defense framing, and should never describe parts in terms of converting or enhancing fire capability — that language maps directly onto what Google and Meta prohibit and onto NFA territory. The same discipline applies to any surface you do not own: vet your email provider's acceptable-use policy the way you would vet a processor's before building your list on it, and keep every transaction on your own domain.

Payment infrastructure

• PayPal — prohibited without express prior approval

  PayPal's Acceptable Use Policy bars transactions involving firearms of any kind — rifles, shotguns, handguns, including curio and relic pieces regardless of working order — along with frames, receivers, and other serialized components, magazines holding more than 10 rounds, and ammunition containing propellant, unless the seller has received PayPal's express prior approval, granted at its sole discretion. Routing gun-sale proceeds through a personal or unapproved account is a fast path to a frozen balance.

• Square — prohibited outright

  Square's General Terms of Service bar using its services for "the sale of firearms, firearm parts, ammunition, weapons or other devices designed to cause physical harm." There is no approval pathway. Retailers have been dropped mid-stream after processing without incident, so treating Square as a temporary bridge is a working-capital risk, not a strategy.

• Stripe — restricted category, prior approval required

  Stripe's current Prohibited and Restricted Businesses list places firearms (rifles, shotguns, pistols), regulated parts and accessories such as suppressors, and other weapons in its restricted category — supportable only with Stripe's explicit prior authorization after review by its risk team — while unlawful weapons and improperly marked replicas remain prohibited. This is a meaningful softening from Stripe's earlier outright prohibition, but approval is discretionary and revocable; do not build a checkout that assumes it.

• Specialty firearms acquirers are the standard path, not the fallback

  The practical route is a processor that underwrites the category deliberately. Expect real underwriting: a copy of your FFL, your compliance workflow documented, disclosure of exactly what you sell, and pricing that reflects the category — higher discount rates and sometimes rolling reserves. Budget for it as a structural cost. The trade is stability: an acquirer that priced your risk on purpose is far less likely to terminate you for being what you told them you were.

• MCC 5723 — a state-by-state conflict your processor has to navigate

  The firearms merchant category code (MCC 5723) took effect in the card networks in 2024, and states immediately split: California (AB 1587, acquirer deadline May 1, 2025, with civil penalties for non-assignment), Colorado, and New York require it for gun retailers, while seventeen states have passed laws prohibiting or limiting its use. Visa and Mastercard apply it only where legally required. A multi-state retailer needs a processor that can handle divergent MCC assignment correctly — misclassification cuts both ways depending on the state.

The zsty approach

Questions operators ask

Can I run any Google or Meta ads at all as a firearms retailer?

For the core catalog — guns, ammunition, magazines, optics, functionality parts — no. Google prohibits ads for functional firearms and anything that enhances one; Meta prohibits promoting the sale or use of weapons and ammunition. Narrow adjacent lanes exist: Google permits ads for safety items like gun locks and chamber blocks, and Meta allows 18+-targeted ads for firearm-safety training, holsters, cases, and hunting or range gear not sold as part of a weapon. The operational caution is that enforcement lands at the account level — Google's policy provides as little as seven days' warning before suspension — so most operators keep any permissible campaigns in an ad account and legal entity separated from the firearms storefront, and accept that paid acquisition will never carry the business.

How does ship-to-FFL checkout actually work on the website?

Federal law (18 U.S.C. § 922) requires interstate firearm transfers to route through a licensed dealer in the buyer's state. In practice: the buyer pays you online, then selects a receiving dealer during checkout — from a directory you maintain, or by having their preferred dealer send you a signed copy of its license, which you verify against ATF records before shipping. You ship dealer-to-dealer; the receiving FFL logs the firearm, runs the buyer through Form 4473 and NICS, and completes the transfer in person, usually charging the buyer its own transfer fee. Your order system needs to model this: separate states for shipped, received-by-dealer, and transferred, with notifications at each step, because the buyer's experience of "where is my gun" spans two businesses and a background check.

Can I ship ammunition directly to consumers?

Sometimes — it depends on carrier rules and the destination state, and the checkout has to know both. Carriers accept small-arms ammunition only as a limited-quantity hazmat ground shipment: UPS requires Ground service within the contiguous 48, packages of 66 pounds or less, calibers at or below .50 / 8-gauge, tendered under a scheduled pickup account. Destination is the harder problem. California requires ammunition to be delivered through a licensed vendor with a point-of-sale eligibility check — a regime a Ninth Circuit panel enjoined in July 2025, with the full court's en banc review argued in March 2026, so the rule can change under you. New York routes every ammunition sale through a state-run background check with a per-transaction fee. Several other states layer license or permit requirements on top. The answer is a maintained state matrix wired into cart validation, reviewed on a litigation calendar, not a shipping policy written once.

Why not just sell on GunBroker instead of building my own site?

Use the marketplace — but as a channel, not as the business. Marketplaces bring real demand, and for a new retailer they are often the fastest first dollar. What they cost you is the margin they take and, more importantly, the asset: the marketplace owns the buyer relationship, the data, and the terms of service, all of which can change without your consent. In a vertical where every rented surface — ad platforms, processors, marketplaces — has a history of changing terms on the category, the compounding assets are the two things nobody can revoke: your own domain's organic rankings and your email list. The retailers who endure run marketplaces for reach while every listing, insert, and interaction points back toward the property they own.