What is extended due diligence in CBD payments and how does it differ from standard KYC?

Extended due diligence (EDD) for CBD payments goes beyond standard Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures by adding a comprehensive, ongoing review of a merchant's business practices, products, and regulatory compliance specific to the CBD industry. Standard KYC verifies who the merchant is — identity, ownership, and basic financial legitimacy. EDD for CBD adds nine additional dimensions: product catalog detection and THC verification, shipping jurisdiction compliance, deceptive health claim detection, Certificate of Analysis analysis, required disclaimer audit, continuous monitoring, audit evasion prevention, cross-platform coverage, and expert mitigation recommendations. The core distinction mirrors Qredible's fundamental positioning: KYC verifies who the merchant is; EDD verifies what the merchant sells and how they represent it.

Why is ongoing monitoring more important than point-in-time EDD for CBD merchants?

CBD merchant compliance at the time of application approval is not compliance at the time of account activity. Merchant websites change continuously — marketing copy is updated, new products are added, blog posts go live with prohibited health claims, and influencer partnerships create links to therapeutic use language. A merchant whose application was clean can accumulate significant compliance exposure within weeks of approval through routine marketing activity. Point-in-time EDD captures a snapshot; ongoing monitoring captures the actual compliance trajectory. Payment processors whose monitoring ends at onboarding are exposed to the compounding compliance drift that accumulates in the months between approval and any subsequent manual review. Q-Audit's continuous change-detection scanning reviews only what changed since the last scan, making portfolio-scale perpetual monitoring operationally viable.

What is audit evasion in CBD payments and how is it detected?

Audit evasion in CBD payments refers to merchants temporarily hiding non-compliant products, removing prohibited health claims, or otherwise altering their websites specifically during known or suspected audit periods — then restoring the problematic content after the audit is complete. Recent findings have confirmed this practice is active in the CBD industry. Detection requires comparing website content over time rather than evaluating a single snapshot: EDD systems that track content changes across scan periods can identify suspicious patterns of content appearing and disappearing that indicate deliberate concealment rather than routine website updates. This behavioral signal is as important as the content of any individual scan.

How do Dynamic EDD Checklists improve on traditional extended due diligence processes?

Traditional EDD for CBD payments is a manual underwriting exercise producing a one-time report. Q-Trust's Dynamic EDD Checklists auto-configure tailored EDD requirements per merchant type from the Policy Key — so a CBD supplement brand, a hemp beverage company, and a CBD topical brand each receive EDD checklists appropriate to their specific product category, applicable regulations, and risk signals. The checklist is dynamic: when regulations change, the checklist parameters update automatically via compliance bulletins without requiring manual reconfiguration. The outcome is a pre-validated merchant application that arrives underwriting-ready rather than requiring iterative back-and-forth to collect missing documentation — eliminating the onboarding bottlenecks that make CBD merchant underwriting expensive for processors.

What are the most important EDD components specifically for CBD merchant accounts?

For CBD merchants specifically, the highest-risk EDD dimensions are: product catalog THC compliance verification (every SKU must meet the 0.3% threshold, not just the products highlighted in the application); shipping jurisdiction compliance (CBD is not legal in all states, and merchant shipping patterns must be assessed against current state-level restrictions); health claim detection (FDA and FTC prohibited claims on CBD websites are the most common compliance failure and the most common trigger for account termination by processors enforcing their compliance programs); and COA verification (expired, fraudulent, or missing lab reports are a direct indicator of product quality and regulatory risk). These four dimensions capture the majority of the CBD-specific enforcement and termination triggers that make CBD merchant accounts higher risk than general supplement accounts.

Extended Due Diligence in CBD Payments

Category: Business Learning Center

Author: Joy

Date: September 23, 2024

As the CBD industry continues to grow rapidly, payment processors and financial institutions face increasing challenges in maintaining compliance with ever-evolving regulations. To address these challenges, many have turned to extended due diligence (EDD) processes. This article explores the concept of extended due diligence in the context of CBD payments and how it works to ensure compliance and mitigate risks.

Understanding Extended Due Diligence

Extended due diligence goes beyond standard Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. It involves a more comprehensive and ongoing review of a merchant's business practices, products, and compliance with industry regulations. For CBD businesses, this process is particularly crucial due to the complex and sometimes ambiguous regulatory landscape surrounding cannabis-derived products.

Key Components of Extended Due Diligence for CBD Payments

1. Product Detection and Verification

One of the primary focuses of EDD in the CBD industry is accurate product detection and verification. This involves:

Web crawling technology to identify all products sold on a merchant's website
Expert underwriting teams to analyze product listings
Verification of THC levels in products to ensure compliance with legal limits (typically 0.3% or less)

2. Shipping Compliance

EDD processes also scrutinize the shipping practices of CBD merchants:

Identifying where products are being shipped to
Analyzing website visitor locations
Cross-referencing shipping destinations with local CBD regulations
Flagging potential issues with shipping to jurisdictions where CBD is regulated or illegal

3. Deceptive Statement Detection

To protect consumers and ensure regulatory compliance, EDD systems are designed to detect potentially misleading or false claims:

AI-powered content analysis to identify medicinal claims not approved by regulatory bodies
Flagging of other deceptive statements that could violate FTC guidelines

4. Lab Report Analysis

For CBD products to be sold legally in many jurisdictions, they must undergo third-party laboratory testing. EDD processes include:

Verification of the existence of lab reports
Analysis of report contents to ensure they meet regulatory standards
Confirmation of THC levels reported in lab tests

5. Disclaimer Identification

Many regulatory authorities require specific disclaimers on CBD products and websites. EDD systems check for:

Age restriction notifications
Product applicability statements
Potential health concern warnings
Other legally required disclosures

6. Ongoing Monitoring and Health Checks

A critical aspect of EDD is that it's not a one-time process but an ongoing effort:

Regular "health checks" of merchant websites and practices
Continuous updating of regulatory knowledge bases
AI engines and bots that gather and interpret new regulations and guidelines
Systems that comb through websites periodically to ensure ongoing compliance

7. Audit Evasion Prevention

Recent findings have revealed that some merchants attempt to evade audits by temporarily hiding products or altering their websites. EDD processes now incorporate measures to prevent this:

Detection of hidden product features on websites
Comparison of website content over time to identify suspicious changes
Incorporation of audit evasion prevention into compliance platforms

8. Cross-Platform Compatibility

Modern EDD systems are designed to work across various e-commerce platforms:

Compatibility with popular systems like WordPress
Ability to integrate with custom-built websites
Adaptability to different content management systems

9. Expert Advice and Mitigation Recommendations

Beyond just identifying issues, comprehensive EDD processes also provide:

Detailed reports on compliance issues
Expert advice on how to address identified problems
Mitigation recommendations for each detected issue

The Importance of Extended Due Diligence in CBD Payments

The implementation of robust EDD processes is crucial for several reasons:

Risk Mitigation: By thoroughly vetting CBD merchants and their practices, payment processors and financial institutions can significantly reduce their exposure to regulatory and legal risks.
Consumer Protection: EDD helps ensure that CBD products being sold are safe, properly labeled, and compliant with local regulations, thus protecting consumers.
Industry Legitimacy: As the CBD industry continues to mature, rigorous due diligence processes help establish credibility and trust in the sector.
Regulatory Compliance: With the complex and evolving nature of CBD regulations, EDD helps businesses stay ahead of compliance requirements and avoid potential penalties.
Fraud Prevention: Comprehensive due diligence can help identify and prevent fraudulent activities in the CBD space, protecting both businesses and consumers.

EDD in CBD

Extended due diligence is an essential tool in navigating the complex landscape of CBD payments. By implementing thorough, ongoing, and technologically advanced EDD processes, payment processors and financial institutions can better serve the growing CBD industry while managing risks effectively. As regulations continue to evolve, the role of EDD in ensuring compliance and building trust in the CBD market will only become more critical.