Age Restricted Products and Shopify Payments: What to Know
If you sell age-restricted products on Shopify — whether that's alcohol, CBD, vaping supplies, knives, or adult content — you already know the compliance landscape is anything but simple. What many me
If you sell age-restricted products on Shopify — whether that's alcohol, CBD, vaping supplies, knives, or adult content — you already know the compliance landscape is anything but simple. What many merchants don't realise until it's too late is that Shopify Payments has its own set of rules that sit entirely separately from local laws and trading standards. You might be fully compliant with UK or US legislation and still find your payouts frozen or your account terminated because of how Shopify Payments interprets your product catalogue.
This disconnect catches thousands of merchants off guard every year. A store selling craft spirits may have all the right licences, responsible drinking messaging, and delivery restrictions in place — and still trigger a Shopify Payments review simply because their storefront lacks a visible age verification step. The payment processor sees risk where the merchant sees compliance, and that gap is expensive.
This post walks you through exactly what Shopify Payments looks for, why age-restricted categories face heightened scrutiny, how age verification affects your payment eligibility, and what practical steps you can take to protect your store from disruption. Whether you're just launching an age-restricted product line or you've been trading for years, what follows applies directly to your business.
What Shopify Payments Actually Prohibits
Shopify Payments operates under a list of prohibited and restricted business types that most merchants skim once during onboarding and never revisit. The prohibited list is absolute — selling those products will get your payment account terminated. The restricted list is more nuanced: it means Shopify Payments may allow your business but reserves the right to review, hold funds, or impose additional requirements at any time.
Age-restricted categories that consistently appear in the restricted tier include alcohol, tobacco and nicotine products, CBD and hemp-derived products, adult toys and explicit content, certain bladed items, and fireworks. The exact treatment varies by country. For example, alcohol sales are permitted through Shopify Payments in the UK and US under most circumstances, but CBD products sit in a grey zone where approval is assessed on a case-by-case basis and documentation is frequently requested. Merchants who launch without understanding this structure often discover the restrictions only when a payout is delayed.
What makes this especially tricky is that Shopify Payments decisions are not always transparent. You may receive a generic terms-of-service violation notice without a clear explanation of which product triggered the review. Keeping your business description accurate during onboarding, including explicit notes about age-restricted categories, reduces the chance of a surprise review later. When in doubt, contact Shopify Support proactively before listing a new restricted product category — it creates a paper trail and often surfaces restrictions you wouldn't otherwise find until they bite you.
Why Age Verification Matters to Your Payment Processor
Payment processors, including Shopify Payments and its underlying partners like Stripe, assess chargeback risk and regulatory liability when deciding how to treat a merchant category. Age-restricted products carry an elevated risk profile because a sale to a minor — even an accidental one — can expose the processor to regulatory penalties, reputational damage, and in some jurisdictions, direct legal liability. This is why your age verification setup is not merely a legal formality; it is a signal to your payment processor that you are operating responsibly.
Stores that display a clear, functional age gate at the storefront level — rather than buried in a checkbox at checkout — demonstrate active risk management. This distinction matters when Shopify's Trust and Safety team reviews your account. A store that asks "Are you 18?" via a JavaScript modal with a visible dismiss button is meaningfully different in their eyes from a store with no gate at all. Neither is bulletproof, but one clearly shows intent to comply while the other shows indifference.
The practical implication is that age verification should be treated as payment infrastructure, not just a legal checkbox. Document your verification process, keep screenshots of your age gate as it appears to new visitors, and make sure it fires before any product or pricing information is visible. Some merchants go further and implement ID-based verification at checkout for high-risk categories — solutions like AgeGuard make this feasible without building anything custom. The stronger your verification setup, the more defensible your position if Shopify Payments flags your account.
The Real Cost of Getting This Wrong
A payout hold from Shopify Payments can freeze anywhere from a few hundred to tens of thousands of pounds or dollars depending on your revenue cycle. Shopify typically holds funds for 90 to 120 days during a review, and there is no guarantee the hold will be lifted rather than converted into a permanent account termination. For merchants relying on cash flow to fund stock, that window can be business-ending.
Beyond frozen funds, there is the operational disruption of migrating to an alternative payment gateway mid-trading. Shopify supports third-party gateways like Stripe direct, PayPal, Worldpay, and many others, but switching introduces a 0.5% to 2% additional transaction fee depending on your Shopify plan — a cost that compounds quickly on high-volume stores. There is also the integration work involved: updating checkout flows, testing payment paths, and ensuring subscriptions or recurring charges continue to process correctly.
Then there is the reputational dimension. Some payment processors that specialise in high-risk merchant categories charge significantly elevated rates — anywhere from 3% to 6% per transaction — compared to the standard 1.5% to 2.2% range most Shopify Payments merchants enjoy. Getting forced onto a high-risk processor because of a preventable compliance gap is an ongoing tax on your margins. The cost of proper age verification tooling — which typically runs between £10 and £50 per month — is trivial compared to even a single week of frozen payouts.
Specific Rules by Product Category
Different age-restricted categories carry different risk profiles and different documentation expectations. Alcohol is the most established category with the clearest rules: you need proof of a valid retail licence (such as a UK Personal Licence or a US state-level alcohol licence), you must not sell to under-18s in the UK or under-21s in the US, and your storefront must include an age gate. Many alcohol merchants also add a date-of-birth input rather than a simple yes/no confirmation, which provides stronger evidence of due diligence.
Vaping and e-cigarettes face tighter restrictions. In the UK, the Tobacco and Related Products Regulations 2016 require specific product notifications, nicotine warnings, and restrictions on product capacity. Shopify Payments is particularly cautious with this category and has in the past suspended accounts without warning when product descriptions or imagery were flagged as non-compliant. If you sell in this category, your product pages need to include all legally mandated health warnings exactly as specified, and your age gate must be robust enough to withstand scrutiny.
CBD and hemp products represent the highest-risk category for payment processing on Shopify. Despite being legal in both the UK and US under defined conditions, the legal complexity — and the adjacency to cannabis products in general — means payment processors apply significant additional scrutiny. You should expect to provide third-party lab reports, a clear statement that products contain less than 0.2% THC (UK) or 0.3% (US), and documentation of your supply chain. Some Shopify Payments accounts operating in the CBD space are never reviewed; others are flagged immediately. Proactive documentation is your best protection.
How to Structure Your Store for Payment Compliance
The starting point for a compliant age-restricted store is a clearly visible, technically robust age gate that activates before any content loads. This is not just about legal compliance — it signals to payment processors and regulators that you have implemented a meaningful control. A cookie-based gate that remembers returning visitors is acceptable for most categories, but for higher-risk products like nicotine or CBD, a date-of-birth field with server-side validation offers stronger protection.
Your product descriptions and metadata also matter. Avoid language that could be interpreted as marketing to minors — phrases like "fun for everyone" or imagery featuring young-looking models can trigger automated content reviews. Your store's age-restricted products should be clearly labelled, ideally with dedicated collection tags that make it easy to demonstrate to Shopify's Trust and Safety team exactly what you sell and to whom. Some merchants create a separate landing page that outlines their compliance approach, links to relevant licences, and describes their verification process — this takes thirty minutes to build and can dramatically accelerate a payment review.
Finally, keep your Shopify admin business description accurate and current. If you add a new product category that falls under age restrictions — say you're a homewares merchant who starts stocking premium spirits — update your business description before you list the products. Mismatches between your stated business type and your actual product catalogue are a primary trigger for payment account reviews.
Alternatives If Shopify Payments Won't Cover You
If Shopify Payments declines to support your specific product category, you have several credible alternatives. Stripe — which powers Shopify Payments under the hood — offers direct merchant accounts and applies its own, sometimes more flexible, underwriting process. Merchants who are declined through Shopify Payments have sometimes been approved through a direct Stripe application, particularly when they can provide stronger documentation of their compliance setup.
Worldpay and Barclaycard are established UK options with experience handling age-restricted merchants, particularly in alcohol and tobacco. Both offer competitive rates for established businesses with clean processing histories, though their onboarding processes are more involved than Shopify Payments and typically require a phone consultation. PayPal is another fallback, though its terms of service exclude many age-restricted categories, so review their acceptable use policy carefully before integrating it as a primary gateway.
For merchants operating at high volume in categories like adult products or certain CBD lines, specialist high-risk processors such as Verotel or PayXpert exist specifically to serve these markets. Their rates are higher, but they offer stability and category expertise that general processors cannot match. The key is to identify your payment options before you launch, not after your account has been frozen — having a backup gateway configured and tested is basic operational hygiene for any age-restricted merchant.
Conclusion
Selling age-restricted products on Shopify is entirely viable, but it requires a level of payment compliance awareness that most general e-commerce advice skips entirely. The core principle is straightforward: Shopify Payments is not neutral territory. It has its own risk framework, its own prohibited and restricted categories, and its own team that will review your account if your product catalogue raises flags. Understanding that framework before you launch — or before you expand into a new restricted category — is the difference between a stable, growing store and an unexpected operational crisis.
The practical steps are manageable: implement a robust age gate, keep your business description accurate, document your licences and compliance approach, and have a backup payment gateway configured. None of this requires significant technical expertise or budget. It requires attention and the right tools. Start with your age verification layer — everything else builds from there.
Try AgeGuard free at saltai.app — no credit card required.
SaltAI Team
SaltAI builds focused Shopify apps for food merchants and general merchants. Every app is tested in production at a real food store — including Vanda's Kitchen — before it ships.