The Federal Hemp Redefinition: What the December 11, 2026 Deadline Means for CBD Merchant Accounts

For seven years the question underwriters asked a CBD merchant was simple: does every product test under 0.3% delta-9 THC? That question stops working this winter. A provision buried in the November 2025 spending bill rewrote the federal definition of hemp, and once it takes effect a finished CBD product is federal hemp only if the whole container holds no more than 0.4 milligrams of total THC. Most tinctures, gummies, softgels and full-spectrum topicals on the market today hold far more than that, and a product that falls outside the definition is not a grey-area hemp product; under the statute it is marijuana. Square has already told its sellers to pull CBD and hemp items by October 15. This guide sets out exactly what the law says, what Congress did to the timeline on September 2, 2026, and what a CBD merchant should be doing about payment processing between now and December.

What Congress changed, and where

The change is Section 781 of Division B of Public Law 119-37, the Continuing Appropriations, Agriculture, Legislative Branch, Military Construction and Veterans Affairs, and Extensions Act, 2026, signed on November 12, 2025. It amends the definition of hemp in Section 297A of the Agricultural Marketing Act of 1946 (7 U.S.C. 1639o), the definition the 2018 Farm Bill created, and it was written to take effect 365 days after enactment. An amendment to strip it out of the bill was tabled in the Senate before passage.

Under the 2018 definition, hemp was Cannabis sativa L. and anything derived from it with a delta-9 THC concentration of not more than 0.3% on a dry weight basis. The new definition keeps the 0.3% figure but measures total tetrahydrocannabinols, expressly including THCA, and then adds a list of exclusions that do most of the work:

• Any hemp-derived cannabinoid product, intermediate or finished, that contains cannabinoids not capable of being naturally produced by the cannabis plant.
• Any such product that contains cannabinoids the plant can produce naturally but which were synthesized or manufactured outside the plant.
• Any intermediate product, meaning an extract, distillate, powder or oil not yet in its final form or meant to be mixed into something else, with more than 0.3% combined total THC and any other cannabinoid with similar effects, as determined by the Secretary of Health and Human Services.
• Any intermediate product sold as a finished product or directly to a consumer.
• Any finished hemp-derived cannabinoid product containing more than 0.4 milligrams combined total per container of total THC and any other cannabinoid with similar effects.

The statute defines a hemp-derived cannabinoid product as anything derived from hemp, other than industrial hemp, that contains cannabinoids in any form and is intended for human or animal use by inhalation, ingestion or topical application. Topicals and pet products are inside the definition. A drug approved by the FDA is carved out; nothing else is.

0.4 milligrams per container is the number that matters

Container is defined in the law itself: the innermost wrapping, packaging or vessel in direct contact with the finished product in which it is enclosed for retail sale, such as a jar, bottle, bag, box, packet, can, carton or cartridge. Bulk shipping cartons and outer wrappings that are not essential to the retail sale do not count. The cap is therefore per bottle of tincture, per bag of gummies, per jar of salve, not per serving and not per milligram of CBD.

The arithmetic is unforgiving. A 30 millilitre tincture weighs roughly 30 grams, and 0.4 milligrams in 30 grams is about 0.0013% by weight, thirteen parts per million. A full-spectrum oil formulated to sit just under the old 0.3% delta-9 ceiling carries on the order of ninety milligrams of THC per bottle, more than two hundred times the new limit. Troutman Pepper Locke's Regulatory Oversight blog, analysing the statute in December 2025, concluded that the cap will effectively remove most ingestible products and many full-spectrum products from lawful federal commerce unless they are reformulated to micro-dose levels. NPR member stations reported this week that even the vast majority of non-intoxicating CBD products contain more than 0.4 milligrams of THC per container, and quoted Jonathan Miller of the U.S. Hemp Roundtable estimating that around 95% of the hemp product industry would be wiped out. Treat the percentage as the trade association's estimate, but the direction is not in dispute.

Two further points on the maths. First, total THC on a certificate of analysis follows the USDA convention in 7 CFR 990.1: delta-9 THC plus 0.877 times THCA. A lab result that reports delta-9 alone no longer proves compliance. Second, a result of "below the limit of quantitation" does not prove compliance either unless the limit is low enough. If your lab's LOQ is 0.01% by weight, a non-detect on a 30 gram product only shows the bottle holds less than 3 milligrams, seven times the cap. Merchants who intend to keep selling will need results reported in milligrams per container from a method sensitive enough to resolve fractions of a milligram.

Products the law does not touch

The new definition expressly includes industrial hemp, and defines it as hemp grown for the stalk and fibre, for whole grain, oil, cake, nut, hull or any other non-cannabinoid derivative of the seed, for microgreens and edible leaf from immature plants, for research that does not enter commerce, and for seed to produce any of those. Hemp seed oil, hemp protein, hemp hearts, hemp textiles and hemp-fibre goods are outside the cannabinoid rules entirely. So, in practice, are CBD isolate and broad-spectrum products that genuinely test below 0.4 milligrams of total THC and similar-effect cannabinoids per container, provided nothing in them was synthesized outside the plant. Underwriters will want to see the lab work that proves it, not the marketing description.

The timeline: November 12 for some products, December 11 for the rest

The original effective date was November 12, 2026. On September 2, 2026 the President signed H.R. 6500, the Continuing Appropriations and Extensions Act, 2027, after the Senate passed it 90 to 6 on August 8 and the House 370 to 48 on September 1. Section 2019 of that act provides that until December 11, 2026 the Section 781 amendments apply only to products described in paragraphs (1)(C)(ii)(I) and (1)(C)(iv)(I) of the amended definition.

Read against the statute, that means:

• November 12, 2026: products containing cannabinoids that the cannabis plant is not capable of producing naturally lose hemp status on the original date. The delay does not reach them.
• December 11, 2026: everything else takes effect thirty days later, including the total-THC standard, the exclusion for naturally occurring cannabinoids made outside the plant, the 0.3% limit on intermediates and the 0.4 milligram per container cap on finished goods.

Which specific compounds fall into the first bucket is not something the law spells out. Section 781 directed the FDA, within 90 days of enactment, to publish a list of cannabinoids the plant can produce naturally, a list of naturally occurring THC-class cannabinoids, a list of other cannabinoids with similar effects, and further guidance on the meaning of container. That deadline passed on February 10, 2026. CRS reported the lists unpublished as of May, and industry trackers reported the same in mid-September. Merchants are being asked to sort their catalogues against categories the agency has not yet defined.

A thirty-day extension is not a reprieve. During the August floor debate an amendment to strip the delay from the funding bill was tabled 61 to 32, and on August 4 a bipartisan group of 35 state and territorial attorneys general wrote to the Speaker and the Senate Majority Leader urging Congress not to delay, repeal, suspend or weaken the new definition. Bills to postpone it by two years (H.R. 7024, H.R. 7010, S. 3686), to repeal it (H.R. 6209) and to replace it with an FDA regulatory framework (H.R. 7212, S. 3474) have all been introduced; as of mid-September 2026 none has passed either chamber. Several states, meanwhile, have written total-THC rules and deadlines of their own into state law, and the federal delay does not move those. Plan for December 11 as a real date.

Why this lands on your merchant account before it lands anywhere else

Nobody expects the DEA to start with CBD retailers. The Congressional Research Service's December 2025 enforcement briefing says it remains unclear if and how federal law enforcement will enforce the new prohibitions, and that both the FDA and the DEA may lack the resources to do so broadly. But payment processing does not wait for enforcement. Every acquiring bank that underwrites CBD today does so on one legal footing: the product is hemp under 7 U.S.C. 1639o and therefore not a controlled substance. The card networks prohibit transactions for goods that are illegal where the merchant operates, and processing agreements routinely carry federal-law compliance and illegality clauses. On the effective date, a product outside the definition is, as CRS puts it, subject to regulation under the Controlled Substances Act as marijuana. A bank does not need a raid to decide that it no longer wants that on its books; it needs a compliance memo.

Square is the proof. On August 7, 2026 Square emailed its CBD sellers under the subject line "[Action required] Important update about your Square account and CBD products", telling them that selling CBD and hemp-derived products, online or in person, would no longer be permitted on its platform and instructing them to remove those items from their catalogues by October 15, 2026. A Square spokesperson confirmed the notice to Marijuana Moment, citing the new federal law, and the page on which Square previously marketed its CBD program now returns a 404. Square did not wait for December or for the FDA's lists, and its notice drew no line between compliant isolate products and non-compliant full-spectrum ones. It exited the category. Stripe and PayPal already prohibited CBD before any of this, and Shopify Payments does not support hemp or CBD sales, so for a large share of the market Square's move removes the last mainstream option.

What the dedicated high-risk acquirers will do is the question every CBD merchant is asking, and the honest answer is that it will be decided bank by bank, product category by product category, over the next twelve weeks. Nobody can promise you today that a specific bank will still underwrite a specific product on December 12. What can be said is that a bank which has spent years underwriting CBD deliberately, with COAs and product reviews as part of the file, is in a far better position to keep a compliant catalogue than a platform that treated CBD as a side program and now wants it gone.

What to do before December

1. Split your catalogue three ways now. Products that already test under 0.4 milligrams total THC and similar-effect cannabinoids per container; products that could get there by reformulating to isolate or broad spectrum; and products that cannot, which includes anything made with a converted or synthesized cannabinoid regardless of dose. Be honest about the middle group. A 10 millilitre bottle has a third of the headroom of a 30 millilitre one.
2. Re-test to the new standard. Ask your lab for total THC using the 0.877 THCA conversion, reported in milligrams per container, with a stated limit of quantitation low enough to resolve the cap. A COA dated 2024 that shows delta-9 only is no longer evidence of anything an underwriter needs to know.
3. Read your processing agreement for illegality and change-of-law clauses, and ask your current provider in writing what happens to settlement, reserves and account status on November 12 and December 11. If you are on Square, you have until October 15 and should assume no extension.
4. If you are on any mainstream platform, apply to a dedicated CBD merchant account now, while you can still show clean processing history and a compliant product set. Underwriting takes time, and the queue of merchants displaced from Square will not get shorter in November.
5. Do not hide products. Relabelling a full-spectrum tincture as "hemp extract" or routing it through a second storefront is transaction laundering under card network rules, and it converts a product problem into a MATCH-list problem that follows you to every future application.
6. Diversify rails. ACH and bank-transfer acceptance sit outside the card networks and give a compliant catalogue a second way to get paid while card acquirers settle their positions.

How PayKings is handling it

PayKings places CBD merchants with acquiring banks that underwrite hemp-derived products deliberately rather than as a side program. When you apply between now and December, expect to be asked for total-THC lab work in milligrams per container and for a full product list, and expect a plain answer about which products can be placed and which cannot. That is a less comfortable conversation than an instant approval, but instant approval is exactly what Square's CBD sellers had until August 7. If you sell CBD or hemp-derived products and want to know where your catalogue stands before December 11, talk to a PayKings specialist about a CBD merchant account now, with your current COAs and product list to hand.