Top stories

FDA & Product Rules

Iowa Delays Its Vapor Products Directory and Sets No New Date for Enforcement

The Iowa Department of Revenue postponed publication and enforcement of its vapor products directory on October 15 without new dates. Once the list appears, unlisted products are banned at once and penalties start 21 business days later.

E-commerce 4 Internet Marketers Editorial
CBD / Hemp

New Jersey Senate Passes Bill Tying Licensed Hemp Sales to the Federal Date as Online Ban Stays

The New Jersey Senate passed S.4635 on October 22, moving the state's hemp beverage cutoff for liquor and cannabis licensees to a federal compliance date no earlier than December 11. The online sales ban is unchanged, and S.4287 would make unlicensed marijuana and vapor sales a third-degree crime.

E-commerce 4 Internet Marketers Editorial
Chargebacks & Fraud

A Skimmer Hidden in Google Tag Manager Used Stripe’s Own API to Store Stolen Cards

Sansec documented a Magecart skimmer that loads from real Google Tag Manager containers and stores Magento checkout data as fake Stripe customers. Why a CSP allowlist misses it, what PCI DSS 6.4.3 and 11.6.1 expect, and what to check.

E-commerce 4 Internet Marketers Editorial

Authorize.Net

Firearms & Tactical

Firearms & Tactical

ATF Would Remove the 2024 Gun Dealer Presumptions, Including One Tied to Merchant Accounts

An analysis of ATF's plan to drop the 2024 engaged in the business presumptions, including one tied to merchant services, and what it means for gun marketplaces and payment providers.

E-commerce 4 Internet Marketers Editorial
Firearms & Tactical

Firearm Industry Trade Group Opposes ATF Plan for Remote Same-State Gun Sales

NSSF told ATF in August that remote same-state gun sales would weaken dealers' role as a first line of defense. An analysis of what the May 8 proposal requires and what it would mean for online FFL checkouts.

E-commerce 4 Internet Marketers Editorial

High-Risk Merchant Accounts

High-Risk Merchant Accounts

How Stripe’s FDA Vape Rule Compares With Shopify Payments and PayPal Policies

Analysis. Stripe's Prohibited and Restricted Businesses page, updated September 22, 2026, says U.S. merchants selling electronic tobacco may only sell FDA-authorized products. Shopify Payments prohibits tobacco outright, and PayPal's 2022 policy puts e-cigarettes in pre-approval.

E-commerce 4 Internet Marketers Editorial

CBD / Hemp

CBD / Hemp

UPS Will Require Total THC Lab Reports in Raw Hemp Shipments Starting December 11

UPS's hemp shipping page says raw hemp shipments must contain a Certificate of Analysis showing total THC, including THCA, of no more than 0.3% on a dry weight basis from December 11, 2026, the same day most of the new federal hemp definition takes effect.

E-commerce 4 Internet Marketers Editorial

Regulatory & Compliance

Regulatory & Compliance

What Age-Restricted Shopify Sellers Should Check as Shop MCP Opens Agent Checkout

Shopify opened Shop MCP on October 13 so AI agents can search Shopify Catalog and check out with Shop Pay. Sellers of age-restricted and regulated products have reason to review how their listings, age checks, and order controls work when an agent does the buying.

E-commerce 4 Internet Marketers Editorial

Nicotine & Vape

Nicotine & Vape

Pennsylvania Can Now Seize Vapes Missing From the Attorney General’s ENDS Directory

Enforcement of Pennsylvania's Act 57 began October 19, 2026. Nicotine vapes not on the Attorney General's ENDS directory can be seized, first violations cost $500 per unit, and nicotine-free products sold under a nicotine brand name must be listed too.

E-commerce 4 Internet Marketers Editorial