Tuesday, October 20, 2026
News For Internet Marketers
Shopify launched Shop MCP on October 13 so AI agents can search Shopify Catalog and check out with Shop Pay. Shopify says vaping products and weapons are excluded from Catalog, yet EC4IM searches on October 20 returned nicotine e-liquids, pepper spray, and riflescopes with checkout links.
Enforcement of Pennsylvania's Act 57 began October 19, 2026. Nicotine vapes not on the Attorney General's ENDS directory can be seized, first violations cost $500 per unit, and nicotine-free products sold under a nicotine brand name must be listed too.
Authorize.Net full-card exports need an owner-approved, fee-based request that can take three weeks, NMI imports only through affiliate-initiated PGP files and charges at least $500 to export, and neither gateway imports subscription schedules.
When an acquirer moves a firearm or nicotine account to MCC 5723, 5993, or a new location record, Visa's April 2026 data rules and October 2026 dispute guide make the statement descriptor part of the change, with VAMP's 1.5% merchant line leaving little room for unrecognized charges.
Visa Compelling Evidence 3.0 under Dispute Condition 10.4 expands on October 24, 2026 to prior purchases on the same card or associated tokens, including across merchants an acquirer processed, when qualifying data elements match.
Firearm and other regulated merchants that authorize at checkout and capture after FFL transfer or backorder release need Authorize.Net's 30-day unsettled ceiling, NMI's processor-dependent auth windows, and tested reauth plus customer notices before holiday volume.
BigCommerce lists native NMI and Authorize.Net connections for specialty MIDs when platform rails drop regulated catalogs. The Payments API table shows Authorize.net vaulting support and NMI raw-card-only limits, while Commerce's AUP puts highly regulated product compliance on the merchant.
NMI's Classic API Migration Playbook moves server-side payments from /api/transact.php to JSON endpoints such as POST /api/v5/payments/sale, with the private key alone in the Authorization header and errors returned as HTTP status codes. Keys and Collect.js tokens carry over, and the classic API stays supported.
WooCommerce 11.2 adds a date field type to the Additional Checkout Fields API, letting Checkout block stores collect a birth date and reject underage birthdays with relative limits such as -P21Y. The field is self-reported, so vape sellers still need PACT Act database verification.
Public Law 119-103 delays most of the federal hemp redefinition to December 11, 2026, but Missouri HB 2641 and Illinois Public Act 104-463 still take effect November 12, forcing earlier cart blocks and licensed-channel rules for intoxicating hemp SKUs.
