For online cannabis sales, the top pick is a two-step age verification system that combines government ID scanning at checkout and a third-party verification service at delivery. Key criteria for choosing a method include legal compliance across state lines, accuracy against fake IDs, customer privacy protection, and impact on conversion rates.

what id do i need to buy cannabis

Federal vs State Age Rules

Cannabis is illegal under federal law, so there is no federal minimum age for cannabis sales. Instead, each state sets its own rules. In states with legal recreational cannabis, the minimum age is 21. Medical cannabis states often allow patients aged 18 or older, and some allow minors with caregiver consent. Because rules vary, online sellers must verify age based on the shipping address, not the billing address.

can a minor enter a dispensary with a medical card

Government-Issued ID Scanning

This method requires customers to upload a photo of their driver's license, passport, or state ID. Automated software reads the document and checks the birthdate against the local age minimum.

read more

Pros

  • High accuracy when paired with authentication features like holograms and barcodes.
  • Widely accepted by state regulators as a valid age verification method.
  • Provides a digital record for compliance audits.

Cons

  • Requires customers to share sensitive personal information.
  • Can be slow if manual review is needed.
  • Not all customers have a compatible smartphone or scanner.

Use Case

Best for high-volume online dispensaries and in-store kiosks where speed and accuracy are critical.

federal age limit buy cannabis 21

Third-Party Age Verification Services

These services connect to databases and government records to confirm age without requiring customers to upload a full ID. Some also offer identity verification and fraud detection.

Pros

  • Automates compliance across multiple states with different age limits.
  • Reduces liability by keeping verification records on a secure platform.
  • Can be integrated into checkout and delivery apps.

Cons

  • Per-verification fees add up for high-volume retailers.
  • Reliance on a vendor creates a single point of failure.
  • Some services have limited coverage for certain state IDs.

Use Case

Best for multi-state online retailers and delivery services that need a scalable compliance solution.

Biometric Age Estimation

This method uses facial analysis or other biometric markers to estimate age without an ID. It is typically used as a secondary check or for low-risk transactions.

Pros

  • Fast and frictionless for customers.
  • No need to share an ID.
  • Can be done on a smartphone.

Cons

  • Accuracy varies by lighting, skin tone, and age range.
  • Not accepted by all state regulators for cannabis sales.
  • Raises privacy concerns about biometric data storage.

Use Case

Best for in-store kiosks or loyalty programs where a quick check is acceptable, but not for primary age verification at checkout.

In-Store ID Checks

Budtenders or clerks check a physical ID against the customer's face and the state minimum age before allowing entry or purchase.

Pros

  • Immediate and low-tech.
  • Allows human judgment for unusual IDs.
  • Required by many states for all cannabis retail sales.

Cons

  • Human error can lead to fines or license suspension.
  • Inconsistent training across staff members.
  • Can be challenging during busy hours.

Use Case

Required for all physical dispensary sales. Pair with a digital scanner for higher accuracy.

Delivery Age Verification

Delivery drivers must verify age again at the point of delivery, even if the customer passed online checks. This is a legal requirement in most legal states.

Pros

  • Ensures the final recipient is of legal age.
  • Prevents underage proxy purchases.
  • Creates a chain of custody record.

Cons

  • Adds time to each delivery.
  • Puts drivers in a position of enforcement.
  • Requires a mobile verification app and training.

Use Case

Mandatory for all cannabis delivery services. Use a mobile app that scans IDs and records the transaction.

Compliance Best Practices

Follow these steps to stay compliant and protect your business.

  • Train staff on state-specific age limits and ID types.
  • Use a two-step verification process for online sales: checkout and delivery.
  • Store verification records securely for at least the period required by your state.
  • Audit your age verification system on a set schedule.
  • Never accept expired or damaged IDs.

When in doubt, refuse the sale. A lost sale costs less than a fine or license suspension.