Top stories

Authorize.Net

Moving Stored Cards Between Authorize.Net and NMI Vaults Without Losing Autoship Customers

Authorize.Net full-card exports need an owner-approved, fee-based request that can take three weeks, NMI imports only through affiliate-initiated PGP files and charges at least $500 to export, and neither gateway imports subscription schedules.

E-commerce 4 Internet Marketers Editorial
Card Network Programs

Firearm and Vape Merchants Need a Descriptor Check Whenever an Acquirer Changes Their MCC

When an acquirer moves a firearm or nicotine account to MCC 5723, 5993, or a new location record, Visa's April 2026 data rules and October 2026 dispute guide make the statement descriptor part of the change, with VAMP's 1.5% merchant line leaving little room for unrecognized charges.

E-commerce 4 Internet Marketers Editorial
Authorize.Net

Holiday Chargeback Prep When Auth-to-Capture Delays Stretch Across FFL and Backorder Queues

Firearm and other regulated merchants that authorize at checkout and capture after FFL transfer or backorder release need Authorize.Net's 30-day unsettled ceiling, NMI's processor-dependent auth windows, and tested reauth plus customer notices before holiday volume.

E-commerce 4 Internet Marketers Editorial

Authorize.Net

Authorize.Net

BigCommerce Native NMI and Authorize.Net Paths When Platform Rails Drop Regulated Catalogs

BigCommerce lists native NMI and Authorize.Net connections for specialty MIDs when platform rails drop regulated catalogs. The Payments API table shows Authorize.net vaulting support and NMI raw-card-only limits, while Commerce's AUP puts highly regulated product compliance on the merchant.

E-commerce 4 Internet Marketers Editorial

Headless & Custom Storefronts

Headless & Custom Storefronts

NMI Lays Out How Classic transact.php Integrations Move to Its JSON Payments API

NMI's Classic API Migration Playbook moves server-side payments from /api/transact.php to JSON endpoints such as POST /api/v5/payments/sale, with the private key alone in the Authorization header and errors returned as HTTP status codes. Keys and Collect.js tokens carry over, and the classic API stays supported.

E-commerce 4 Internet Marketers Editorial

CBD / Hemp

CBD / Hemp

WooCommerce 11.2 Lets Age-Restricted Stores Collect Birthdays in the Checkout Block

WooCommerce 11.2 adds a date field type to the Additional Checkout Fields API, letting Checkout block stores collect a birth date and reject underage birthdays with relative limits such as -P21Y. The field is self-reported, so vape sellers still need PACT Act database verification.

E-commerce 4 Internet Marketers Editorial
CBD / Hemp

Missouri and Illinois Hemp Cart Blocks Still Hit November 12 Despite the Federal Delay

Public Law 119-103 delays most of the federal hemp redefinition to December 11, 2026, but Missouri HB 2641 and Illinois Public Act 104-463 still take effect November 12, forcing earlier cart blocks and licensed-channel rules for intoxicating hemp SKUs.

E-commerce 4 Internet Marketers Editorial

Card Network Programs

Card Network Programs

Visa Dispute Condition 10.4 Evidence Rules Expand Across Tokens on October 24

Visa Compelling Evidence 3.0 under Dispute Condition 10.4 expands on October 24, 2026 to prior purchases on the same card or associated tokens, including across merchants an acquirer processed, when qualifying data elements match.

E-commerce 4 Internet Marketers Editorial

Firearms & Tactical

Firearms & Tactical

ATF Stops Enforcing NFA Approval for Suppressors While Online FFL Sales Stay Under GCA and State Law

ATF's October 9, 2026 Open Letter ends enforcement of NFA approval and registration for suppressors, short-barreled rifles and shotguns, and any other weapons, but special occupational taxes, Gun Control Act duties, and state laws still govern online FFL sales.

E-commerce 4 Internet Marketers Editorial

Chargebacks & Fraud

Chargebacks & Fraud

WooCommerce 11.2 Closes a Shop Manager Flaw That Could Reach Administrator Accounts

WooCommerce 11.2.0, released October 7, 2026, fixes CVE-2026-106608, which let shop managers take over multi-role accounts including some administrators, and adds four other security changes. 11.2.1 followed on October 9 with checkout fixes.

E-commerce 4 Internet Marketers Editorial