Quick answer: On June 23, 2026, the California Attorney General announced that Shopify had decided to ban the sale of all vaping products, including e-cigarettes, through its e-commerce platform. For a U.S.-facing merchant, that means a product being lawful to market is not the same as being eligible for a Shopify storefront, the Shop channel, Shopify Payments, or any other provider. Do not treat an age gate, a different payment gateway, or a general ENDS compliance page as permission to continue selling. Confirm the current written scope with Shopify and obtain jurisdiction-specific legal advice before making a sale or moving a store.
| Gate | What it decides | What a merchant should retain |
|---|---|---|
| Product legality | Whether the exact product may be sold in the destination market. | Exact SKU identity, authorization or notification evidence where applicable, pack photos, supplier invoice, and last-check date. |
| Platform and channel | Whether Shopify and its channels permit the category and the merchant. | Current written policy, support or account correspondence, affected storefront/channel list, and removal or migration decisions. |
| Payment and delivery | Whether the payment and shipping stack will support the transaction. | Gateway approval, age-verification result, adult-signature delivery evidence, exception record, and carrier notices. |
What is confirmed about the Shopify vape ban?
The California Attorney General said on June 23, 2026 that Shopify decided to ban sales of all vaping products, including e-cigarettes, through its e-commerce platform after a multistate enforcement request. That announcement is stronger evidence than the earlier report that a ban was being prepared.
Shopify’s own product-policy pages also show why merchants should treat this as a channel-risk issue. The Shop channel lists age-restricted products, including tobacco, as prohibited. Shopify Payments lists tobacco and related products among high-level prohibited categories. Shopify’s ENDS guidance says that, where a merchant violates ENDS law in a jurisdiction in which it does business, Shopify may remove products or terminate the online store.
The public pages do not replace a merchant-specific written scope decision. A merchant should ask Shopify which storefronts, sales channels, payments, markets, apps, inventory actions, and effective dates are affected, then preserve the reply with the compliance file. This article does not advise on evading a platform rule or finding a workaround.
What merchants can and cannot treat as permission to sell
Merchants cannot treat these as permission
- A general age gate: a landing-page prompt is not, by itself, proof that an online sale meets the applicable age, identity, delivery, or recordkeeping rules.
- A product being listed by a supplier: supplier availability is not proof that the exact SKU is legal in the destination market or eligible for a platform, payment provider, or carrier.
- FDA authorization for a different product: FDA authorization is product-specific. FDA says the authorized e-cigarettes are the only e-cigarettes that may currently be lawfully sold in the United States; a brand name does not authorize every device, pod, flavor, strength, or later variant.
- A different payment gateway: changing a payment provider does not override a platform ban, a carrier rule, or a federal, state, or local requirement. It also does not establish that the new provider accepts the category.
- The word “approved”: do not market an authorized tobacco product as “FDA approved.” FDA distinguishes a marketing authorization from an approval or a safety finding.
Merchants can use these as a decision process, not a sales clearance
- Verify the exact product and destination-market rule with a qualified lawyer or compliance professional.
- Request written, current platform, payment, and carrier eligibility decisions before relying on a channel.
- Pause or remove a listing when the evidence file is incomplete, the policy scope is unclear, or a provider has restricted the category.
- Use a product-by-product intake and recheck process. VapeRisk’s Vape Retailer Intake File provides the fields to keep with each SKU.
Why platform, payment, and legal exposure are separate
Online vape compliance has more than one gate. FDA marketing authorization addresses whether an exact new tobacco product may be lawfully marketed in the United States. It does not compel a commerce platform, card network, gateway, carrier, or marketplace to provide service. Conversely, a payment or storefront account does not establish that the product is lawful in every destination.
For Shopify, the practical exposure can begin before checkout: a platform can remove a product or end store access. The payment layer is separate. Shopify Payments describes tobacco and related products as a prohibited high-level category, while a third-party provider has its own underwriting and contract rules. The delivery layer is separate again. For U.S. ENDS sales and shipments, Shopify’s guidance points merchants to PACT Act controls including commercial-database age verification, tobacco-tax and U.S. Attorney General registration where applicable, private delivery with adult signature, no USPS shipment, and five-year records for interrupted deliveries caused by a carrier’s PACT Act determination.
A multistate coalition has also pressed payment companies and processors to address alleged illegal e-cigarette transactions. That makes a documented, truthful file more useful than a broad claim that a store is “compliant.” It does not make any product, merchant, or transaction pre-approved.
Age-verification and evidence records to keep
Keep one dated file per SKU and one dated file per sales channel. The exact retention period and acceptable method depend on the law, provider contract, and destination, so counsel should confirm the merchant’s requirements. As an operational baseline, retain the following:
- SKU identity: product name, device or pod configuration, flavor, nicotine strength, pack size, barcode or supplier SKU, and current pack photos.
- Source trail: supplier identity, invoice, purchase date, batch or lot information where shown, and any manufacturer statement. Record statements as supplier claims unless independently verified.
- Legal-status check: the relevant official source or authorization record, the exact match decision, the jurisdiction, who checked it, and the next recheck date.
- Platform and payment decision: the policy version or written approval/denial, account or channel affected, date checked, and any required remediation.
- Age and delivery controls: age-verification vendor/result reference, date and time, exception handling, carrier/service used, adult-signature confirmation where required, and delivery interruption records.
- Change log: listing pause, removal, relisting, package change, supplier change, or regulatory/policy update, with the person responsible and supporting evidence.
This is a compliance-management checklist, not a representation that the listed records satisfy every law or contract. A merchant should not keep more personal data than needed, and should secure and retain it only as required by the applicable privacy, tobacco, platform, and payment rules.
What should a Shopify merchant do now?
- Freeze new ENDS listings and paid promotion through affected Shopify surfaces until Shopify provides the current written scope for the merchant’s account and markets.
- Inventory every live and draft SKU by exact configuration. Do not use brand-level labels as a legal-status shortcut.
- Separate platform eligibility, payment eligibility, delivery capability, and product legality in the decision record. A pass in one column is not a pass in the others.
- Save policy versions, notices, and provider correspondence before changing a store. Record the effective date and owner of each action.
- Have qualified counsel review the applicable federal, state, local, destination-market, advertising, privacy, and shipping obligations before selling or migrating.
VapeRisk risk read
The Shopify decision shows that e-commerce infrastructure can become an enforcement point, not merely a neutral storefront. The practical priority for an adult-only retailer is not a fast migration claim. It is a defensible evidence file, a clear written provider decision, and a pause when those do not line up.
For broader operational context, see Vape Compliance & Market. For the SKU-level record, use the Vape Retailer Intake File.
FAQ
Is Shopify banning vape sales?
California’s Attorney General announced on June 23, 2026 that Shopify had decided to ban sales of all vaping products, including e-cigarettes, through its e-commerce platform. A merchant should obtain Shopify’s current written scope for its own account, markets, channels, and effective dates before acting.
Can a vape merchant use Shopify Payments if the product is legal?
Do not assume so. Shopify Payments lists tobacco and related products among prohibited high-level categories. Product legality and payment-provider eligibility are separate questions, and a merchant needs written confirmation of the provider’s current rules.
Does FDA authorization make every vape SKU legal to sell online?
No. FDA authorization is product-specific and does not decide state or local requirements, platform eligibility, payment eligibility, shipping rules, or marketing restrictions. It is also not an FDA safety approval.
Is an online age gate enough for vape sales?
No. Shopify’s U.S. ENDS guidance points to PACT Act controls that include commercial-database age verification and adult-signature delivery, among other obligations. The exact requirements depend on the transaction and jurisdiction; obtain legal advice.
What records should an online vape retailer keep?
Keep exact SKU, supplier, authorization or rule-check, platform/payment, age-verification, delivery, and change-log evidence. Use the Vape Retailer Intake File as the operating record and confirm retention rules with counsel.
Sources
- California Department of Justice: Attorney General Bonta welcomes Shopify ban on all e-cigarette sales
- Shopify Help Center: Electronic Nicotine Delivery Systems (ENDS) products
- Shopify Help Center: Shopify Payments eligibility
- Shopify Help Center: Prohibited products on Shop
- FDA: Advisory and enforcement actions against industry for unauthorized tobacco products
- New York Attorney General: bipartisan effort to curb alleged illegal vaping sales
Legal notice: This article is general information, not legal advice. Tobacco, nicotine, advertising, privacy, payment, and shipping requirements can vary by product, merchant, provider, and destination. Consult qualified counsel and the current written rules of each platform, processor, and carrier before selling, shipping, or migrating an online vape business.