PACT Act Compliance for Stores Selling Vapes and E-Cigarettes: Registration, Shipping Rules, and Flavored-Product Restrictions

Table of Contents

  • What the PACT Act Actually Covers (and Why Brick-and-Mortar Stores Are Not Exempt)
  • PACT Act Registration: Who Must Register and How to Do It
  • Shipping and Delivery Rules: What They Mean for Stores Using Third-Party Apps
  • Recordkeeping Obligations: What You Must Keep and for How Long
  • Flavored Vape Bans by State: Navigating the Most Volatile Layer of Compliance
  • FDA PMTA Status: Why the Products on Your Shelf May Already Be Illegal
  • Building a Store-Level PACT Act Compliance Program
  • How Penalties Work: Civil, Criminal, and License-Based Consequences
  • Staying Current: How to Monitor PACT Act and State Law Changes
  • Frequently Asked Questions About PACT Act Compliance for Vape Retailers
  • Key Takeaways for Vape and E-Cigarette Retailers

A convenience store owner in Richmond, Virginia rings up a customer buying a disposable vape. The sale goes through without a hitch. Three weeks later, a state compliance officer walks in with a clipboard. The question she asks is not about the product itself. It is about the paperwork: Is the store registered with the ATF? Are shipping records on file? Are those flavored pods still legal to sell in this state? The owner knows the product is popular. What he does not know is whether he has met a single requirement of the federal law that governs its sale.

That law is the Preventing Online Sales of E-Cigarettes to Children Act, better known as the PACT Act. Originally passed in 2010 to regulate tobacco shipments, the PACT Act was significantly expanded in December 2020 to cover electronic nicotine delivery systems (ENDS), including vapes, e-cigarettes, e-liquids, and cartridges. For independent retailers and convenience store operators, the expansion created a dense compliance web that intersects with state law, ATF registration, age-verification requirements, and a patchwork of flavored-product restrictions that varies dramatically from one zip code to the next.

This guide walks through every layer of that compliance web: what the PACT Act actually requires, how to register correctly, what the shipping and delivery rules mean for brick-and-mortar stores (not just online sellers), and how to navigate flavored vape bans that change by state. It is written for the store owner who sells vapes over the counter and wants to stay legal without hiring a compliance attorney.

What the PACT Act Actually Covers (and Why Brick-and-Mortar Stores Are Not Exempt)

The PACT Act is not just an online sales law. Many store owners assume it applies only to websites and mail-order businesses. That assumption is incorrect and it is one of the most common compliance mistakes in the vape retail space today.

The 2020 amendment defines a delivery seller as any person who makes a sale of cigarettes or smokeless tobacco, or ENDS products, through the mail or through a delivery service. That definition captures e-commerce operations, third-party delivery apps, and any retailer who ships product to a customer. But the registration, recordkeeping, and tax-collection obligations in the law extend to any retailer who sells ENDS products that are subject to federal excise tax or state cigarette tax, regardless of the sales channel.

In practical terms, this means a convenience store that sells vapes exclusively in person at the counter is not necessarily subject to every PACT Act provision (particularly the shipping-ban provisions), but it is subject to the registration requirements and, depending on the state, the tax-collection and age-verification mandates that run parallel to the federal law. The confusion arises because the PACT Act layers on top of existing state tobacco laws, and many states used the federal expansion as a trigger to pass their own ENDS-specific regulations that apply to all in-store vape retailers.

The products covered include:

  • Disposable e-cigarettes and vape pens
  • Rechargeable vape devices and pod systems
  • E-liquids and vape juice (with or without nicotine)
  • Cartridges and pods designed for use in ENDS devices
  • Any component, liquid, part, or accessory sold for use in an ENDS device

CBD vapes and cannabis-derived products occupy a separate regulatory lane under the DEA and state cannabis law, but any product marketed for nicotine delivery falls squarely under PACT Act jurisdiction. Zero-nicotine e-liquids exist in a gray zone at the federal level, but many states have extended their ENDS regulations to cover nicotine-free vape products sold alongside nicotine products.

The practical takeaway for a PACT Act convenience store operator is this: if vapes are on your shelf, you need to understand the law in full, not just the sections that seem to apply to online sellers. State enforcement agencies do not distinguish between an Amazon storefront and a corner store when auditing ENDS compliance.

PACT Act Registration: Who Must Register and How to Do It

Federal PACT Act registration is the first compliance obligation that applies to retailers selling ENDS products. The registration requirement applies to any person who sells ENDS products and ships them, or who qualifies as a delivery seller under the expanded definition. For brick-and-mortar retailers who also sell online or use third-party delivery apps, registration is mandatory before the first sale is made.

There are two distinct registration tracks depending on how the sale is made:

Federal ATF Registration

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) maintains the federal registry for delivery sellers under the PACT Act. PACT Act registration with the ATF is required for any business that ships ENDS products to consumers. The registration must be completed before any shipments begin, and it must be renewed annually. The ATF’s PACT Act guidance page provides the current registration form (ATF Form 5070.1) and instructions.

When registering with the ATF, the retailer must provide:

  • Legal business name and all trade names (DBAs)
  • Physical address of each location from which ENDS products are sold or shipped
  • Federal Employer Identification Number (FEIN)
  • A description of the types of ENDS products sold
  • Confirmation that the business complies with applicable state and local laws

The ATF shares registration data with state tobacco tax administrators, which is how state agencies identify businesses that may be operating outside of state-level compliance frameworks. Failing to register does not keep you off their radar; it just means you are on the list of unregistered sellers who will eventually be audited.

State-Level Retailer Registration

Separate from ATF registration, most states require ENDS retailers to obtain a state-specific vape retailer license or permit. This is the layer that catches most convenience store owners off guard because it is not part of the federal registration process and each state has its own timeline, fee structure, and renewal cycle.

As of today, more than 40 states have enacted laws requiring retailers to hold a state license or permit specifically for selling ENDS products. The fees range from nominal administrative charges to several hundred dollars per location per year. Some states require a separate permit for each product category (e-cigarettes vs. e-liquids vs. accessories), while others issue a single ENDS retailer permit.

States also require registration with the state revenue or tax department for purposes of collecting and remitting state excise taxes on ENDS products. As of the current legislative environment, more than 30 states levy an excise tax specifically on vape products, with tax structures ranging from a flat per-milliliter rate on e-liquid to a percentage of wholesale price on devices. The Alcohol and Tobacco Tax and Trade Bureau (TTB) maintains resources on federal excise tax obligations that run parallel to PACT Act compliance for ENDS products.

Practical Registration Checklist for Vape Retailers

Registration ObligationWho It Applies ToFrequencyWhere to File
ATF PACT Act RegistrationDelivery sellers / online + delivery retailersAnnualATF (Form 5070.1)
State ENDS Retailer PermitAll retail sellers of vapes (most states)Annual (varies by state)State revenue / tobacco control agency
State Excise Tax RegistrationAll retail sellers in states with ENDS excise taxOne-time + ongoing filingState department of revenue
Local Business License (Tobacco / Vape)Retailers in cities/counties with local ordinancesAnnualCity or county clerk
FDA Retailer Obligations (PMTA)Retailers selling products subject to FDA marketing ordersOngoing (product-level)FDA CTP

The registration process is not a one-and-done task. New locations, new product categories, and changes to business ownership all trigger re-registration requirements at the state level. A modern retail POS system can help track which product categories are active at each location, which is useful documentation when state auditors ask about the scope of your ENDS retail operation.

Shipping and Delivery Rules: What They Mean for Stores Using Third-Party Apps

The shipping provisions of the PACT Act are the most operationally disruptive for retailers who have expanded into delivery. The law does not just restrict who can ship vapes; it bans most common carriers from doing so entirely.

Under the PACT Act as amended, the following carriers are prohibited from delivering ENDS products:

  • The United States Postal Service (USPS), explicitly banned by statute
  • FedEx, UPS, and DHL, each carrier has voluntarily adopted policies that prohibit ENDS shipments in compliance with the law and their own terms of service
  • Most regional parcel carriers that have updated their terms of service since the 2020 amendment

The practical effect is that selling e-cigarettes with store delivery rules in mind means that any retailer using a third-party delivery platform (think app-based delivery services) must verify that the platform’s delivery mechanism complies with PACT Act requirements. The law does not categorically prohibit all delivery of ENDS products. It prohibits delivery through the mail and through common carriers that have opted into the ban. Age-verified, in-person delivery by a retailer’s own employees to a verified adult customer is a distinct model that operates under different legal standards.

What Third-Party Delivery Apps Must Do (and What That Means for Your Store)

If a convenience store lists vapes on a third-party delivery app, the retailer shares responsibility for ensuring the delivery meets PACT Act and state law requirements. Specifically, the law requires that delivery of ENDS products to consumers must include:

  • Age verification at the point of delivery, the recipient must present government-issued photo ID confirming they are 21 or older (the federal minimum age under the Tobacco 21 law). Signature on delivery is required.
  • Proof of state law compliance, the delivery must comply with the destination state’s laws on ENDS delivery, which in many states means the delivery is simply not permitted to residential addresses.
  • Tax payment documentation, applicable state excise taxes must be collected and remitted before or at the time of delivery.

Several states, including New York, California, and New Jersey, have enacted laws that go further than the federal PACT Act by banning direct-to-consumer shipment of ENDS products entirely, regardless of age verification or carrier type. A retailer in those states who lists vapes on a delivery app is likely violating state law even if the federal PACT Act requirements are technically met.

In-Store Age Verification: The Non-Negotiable Floor

Regardless of the sales channel, vape retailer compliance requires that every sale of ENDS products be made to a customer who is 21 years of age or older. The federal Tobacco 21 law, codified through the Further Consolidated Appropriations Act of 2020, raised the federal minimum age and requires retailers to verify age. The FDA enforces this through compliance checks, and retailers who fail age-verification checks face warning letters, civil money penalties, and in repeat cases, suspension of their ability to sell any tobacco or ENDS products.

A POS system with integrated age verification and ID scanning is the most reliable way to enforce this consistently across all staff and all shifts. The NRS POS system includes built-in age-verification prompts that require cashiers to confirm the customer’s date of birth before completing a tobacco or vape sale, creating a timestamped record of each age-check event.

Recordkeeping Obligations: What You Must Keep and for How Long

Recordkeeping under the PACT Act is one of the least-discussed compliance requirements, but it is the one that creates the most legal exposure during an audit. Retailers who are registered and selling vapes legally can still face significant penalties if they cannot produce the records the law requires.

The PACT Act requires delivery sellers to maintain records of all ENDS sales for a period of at least five years. Those records must include:

  • The name, address, and age of the purchaser (for delivery sales)
  • A description of the product sold, including brand, quantity, and any flavor designation
  • The date of sale
  • The method of payment
  • Proof that applicable state excise taxes were collected or that an exemption applies
  • Documentation of age verification performed at the time of sale

For in-store sales at a brick-and-mortar location, the recordkeeping requirements are less prescriptive at the federal level, but state law often fills the gap. Many states require ENDS retailers to maintain purchase invoices from wholesalers and distributors for at least three to five years, and those invoices must show that the products were sourced from a state-licensed distributor who paid applicable excise taxes upstream.

The Invoice Compliance Problem

One of the most common compliance failures found during state audits is that a retailer cannot demonstrate that their vape inventory was purchased from a properly licensed distributor. The PACT Act’s tax-compliance provisions require that ENDS products entering retail sale have had applicable excise taxes paid at some point in the supply chain. When a retailer buys from an unlicensed distributor or through gray-market channels (which is more common than many store owners realize, particularly with imported disposable vapes), they may be selling products on which no excise tax was ever paid. That exposure falls on the retailer.

Maintaining organized purchase records, distributor license numbers, and product invoices is not optional. It is the paper trail that stands between a retailer and a tax liability assessment. Good small business accounting practices should include a dedicated file for ENDS product invoices, organized by vendor and date, separate from general inventory records.

POS-Level Recordkeeping That Satisfies Auditors

A modern retail POS system that tracks inventory by SKU, logs sales with timestamps, and records payment method creates an automatic layer of the recordkeeping compliance framework. When an auditor asks for a transaction log of all vape sales for the past 18 months, a store with a well-configured POS can pull that report in minutes. A store using a manual cash register or a basic tablet POS without inventory tracking will struggle to reconstruct that data.

The POS should be configured so that every ENDS product SKU is tagged appropriately, allowing the system to generate category-level reports on demand. This is not just a compliance convenience; it is the practical difference between a clean audit and a months-long investigation.

Flavored Vape Bans by State: Navigating the Most Volatile Layer of Compliance

The flavored vape ban by state landscape is the most rapidly changing area of vape retail compliance. Federal law does not currently impose a blanket ban on all flavored e-cigarettes at the retail level, but the FDA has issued marketing denial orders for a large number of flavored ENDS products through the Premarket Tobacco Product Application (PMTA) process. Products that have received a marketing denial order cannot be legally sold anywhere in the United States, regardless of state law.

Beyond the FDA’s product-level marketing orders, individual states have enacted their own flavored ENDS restrictions that apply independently of federal action. The result is a compliance matrix where a product that is federally permitted may be state-banned, and vice versa.

States with Comprehensive Flavored ENDS Bans

Several states have enacted laws that prohibit the sale of all flavored e-cigarettes and vape products, including menthol and mint flavors, to any consumer. These are not partial restrictions; they are comprehensive bans on the retail sale of any flavored ENDS product.

StateScope of Flavored ENDS BanMenthol/Mint Included?Effective Status
MassachusettsAll flavored tobacco and ENDS products✅ YesIn effect
New JerseyAll flavored ENDS products✅ YesIn effect
CaliforniaAll flavored tobacco products (Prop 31, includes ENDS)✅ YesIn effect
MarylandAll flavored ENDS (non-tobacco-flavored)⚠️ Varies by flavorIn effect
New YorkAll flavored ENDS (excluding tobacco flavor)✅ YesIn effect
Rhode IslandAll flavored ENDS products✅ YesIn effect

Retailers in these states who continue to stock flavored vapes are not operating in a gray area. They are selling products that are prohibited by state law, and enforcement actions in these jurisdictions have resulted in product seizures, fines, and license revocations for convenience stores and vape shops alike.

States with Partial or Pending Restrictions

Beyond the comprehensive-ban states, a large and growing number of states have enacted restrictions that are narrower in scope but still operationally significant. Common partial-restriction models include:

  • Flavor bans limited to certain sales channels (e.g., prohibiting flavored ENDS sales from stores near schools or from stores without adult-only sections)
  • Menthol-only bans on ENDS products, mirroring proposed federal restrictions on menthol cigarettes
  • Fruit and candy flavor bans that permit tobacco and menthol flavors but prohibit flavors associated with youth appeal
  • Online-only flavor bans that restrict flavored ENDS sales through delivery channels while permitting in-store sales
  • Age-restricted venue exemptions that permit flavored ENDS sales in tobacconist or adult-only retail environments but not in general merchandise stores

Several additional states have flavored ENDS legislation pending or recently passed that has not yet taken full effect. Washington state, Minnesota, and Colorado have each moved through various stages of flavored ENDS restriction in recent legislative sessions. Retailers in these states should be monitoring their state legislature’s tobacco and public health committee activity regularly.

Local Ordinances: The Layer Below State Law

Even in states without statewide flavored ENDS bans, individual cities and counties have enacted local ordinances that restrict flavored vape sales. Chicago, San Francisco (pre-Prop 31), and numerous New England municipalities enacted local flavor bans before their states did. A retailer who checks state law and considers themselves compliant may still be in violation of a local ordinance that is stricter than the state standard.

The compliance framework for a vape retailer compliance program must therefore include a three-layer check: federal product authorization (FDA PMTA status), state law (flavor bans, excise tax, retailer permits), and local ordinances (city or county flavor restrictions, zoning-based sales restrictions).

FDA PMTA Status: Why the Products on Your Shelf May Already Be Illegal

One of the most significant and under-discussed compliance risks for stores selling vapes is the FDA’s Premarket Tobacco Product Application (PMTA) process. Under the Family Smoking Prevention and Tobacco Control Act, all ENDS products that were on the market as of August 8, 2016, were required to submit PMTAs to the FDA by September 9, 2020. Products that submitted timely applications could remain on the market while their applications were under review. Products that did not submit were required to be removed from sale immediately.

The FDA has since issued marketing denial orders (MDOs) for a very large number of ENDS products, particularly flavored products. A marketing denial order means the FDA has determined that the product is not appropriate for the protection of public health and that it cannot be legally marketed or sold in the United States. When an MDO is issued, retailers are expected to remove the product from their shelves.

The challenge for convenience store operators is that the FDA does not send individual letters to every retailer who carries a product that has received an MDO. The agency publishes MDO information and maintains a searchable database, but it is the retailer’s responsibility to check whether the products they stock have received marketing authorization or a denial order.

The FDA’s ENDS PMTA resource page provides access to the current list of authorized and denied products. Retailers should cross-reference their vape inventory against this list at least quarterly, or whenever they add a new product to their shelf.

Products that have received marketing authorization include primarily tobacco-flavored and certain menthol products from major manufacturers. The vast majority of fruit-flavored, candy-flavored, and dessert-flavored disposable vapes that are currently visible in the market have either received MDOs or are operating without any PMTA submission at all, meaning they are on the market illegally. A retailer stocking these products is carrying contraband under federal law, regardless of whether state law prohibits them.

Building a Store-Level PACT Act Compliance Program

Understanding the law is the prerequisite. Building a compliance program that actually functions at the register and in the back office is the operational challenge. The following framework gives convenience store operators a structured approach to PACT Act and ENDS compliance that can be implemented without outside legal counsel for most standard retail scenarios.

The Compliance Readiness Matrix

Compliance AreaIn-Store Only RetailerIn-Store + Delivery AppOnline / Ship-to-Consumer
ATF PACT Act Registration⚠️ Check state law✅ Required✅ Required
State ENDS Retailer Permit✅ Required (most states)✅ Required✅ Required (each state sold into)
Flavored Product Inventory Check✅ Required✅ Required✅ Required
FDA PMTA Status Verification✅ Required✅ Required✅ Required
Age Verification at Point of Sale✅ Required (21+)✅ Required (21+ at delivery)✅ Required (21+ at delivery)
Excise Tax Collection and Remittance✅ Required (where applicable)✅ Required✅ Required (destination state)
5-Year Sales Records⚠️ State-dependent✅ Required✅ Required
Staff Training Documentation✅ Best practice / required in some states✅ Required✅ Required

Staff Training as a Compliance Control

No compliance program survives contact with the register if the cashier does not know what they are supposed to do. Staff training for vape sales should cover three specific areas: age verification procedures (what ID is acceptable, how to enter the date of birth in the POS), prohibited product identification (which flavors and brands are not legal to sell in this state), and delivery restriction awareness (if the store uses any delivery platform, what products can and cannot be included).

Training records should be kept on file for each employee who is authorized to sell tobacco or ENDS products. In states that require documented training as a condition of the retailer permit, absence of training records is itself a violation.

Inventory Management as a Compliance Tool

Keeping flavored products that are state-banned or FDA-denied off the shelf is an inventory management problem as much as it is a legal one. A retail point-of-sale system that allows product categories to be flagged, restricted, or removed from the active inventory without being deleted from the historical record gives store operators a practical tool for managing prohibited SKUs. When a new state ban takes effect, the operator should be able to deactivate all affected SKUs in the POS so that those products cannot be rung up at the register, even if a unit is accidentally left on the shelf.

This also helps with the periodic inventory audits that state agencies conduct. A POS-level record showing that a banned product was deactivated from sale on the date the ban took effect is meaningful evidence of good-faith compliance.

How Penalties Work: Civil, Criminal, and License-Based Consequences

Penalties under the PACT Act and related state laws operate across three channels, and a single compliance failure can trigger consequences in all three simultaneously.

Federal PACT Act Penalties

Under the federal law, violations of the PACT Act can result in civil money penalties of up to $5,000 per violation for a first offense and up to $10,000 per violation for subsequent offenses. Each individual shipment or sale made in violation of the law is a separate violation. In cases involving knowingly false records or willful noncompliance, criminal penalties including fines and imprisonment are available to federal prosecutors. The ATF and the Department of Justice have both been active in pursuing PACT Act enforcement actions since the 2020 amendment, with a focus on large-scale online sellers but with increasing attention to multi-location retail chains.

FDA Enforcement Actions

Separately, the FDA’s Center for Tobacco Products (CTP) enforces retailer requirements under the Tobacco Control Act. FDA compliance checks, conducted through third-party contractors who send underage-appearing individuals into stores to attempt tobacco purchases, have been ongoing for years. Retailers who fail an FDA compliance check receive a warning letter for a first offense. Subsequent violations can result in civil money penalties ranging from several hundred to several thousand dollars per violation, and repeat violators can face a no-tobacco-sale order that prohibits the retailer from selling any tobacco or ENDS product for up to one year.

An FDA no-tobacco-sale order is one of the most commercially devastating enforcement outcomes a convenience store can face, because tobacco and vape products represent a significant share of revenue for most independent c-stores. The FDA’s compliance check inspection program is active across all 50 states.

State License Revocation

At the state level, the most severe consequence of ENDS non-compliance is revocation of the retailer’s state tobacco or ENDS retail license. Without that license, the store cannot legally sell any tobacco or vape product. In states where tobacco and vape sales are a primary revenue driver, license revocation is effectively a shutdown event for a significant portion of store income. State enforcement agencies have broad authority to conduct unannounced inspections, review sales records, and test age-verification procedures through compliance checks similar to the FDA’s program.

Staying Current: How to Monitor PACT Act and State Law Changes

The regulatory environment for vape retail is not static. New state flavor bans are enacted every legislative session. FDA marketing orders are issued on a rolling basis. ATF guidance on PACT Act interpretation is updated periodically. Staying current is not a one-time task; it is an ongoing operational responsibility.

Practical monitoring strategies for independent retailers include:

  • State tobacco control agency mailing lists: Most state health or revenue departments maintain email lists for tobacco retailers. Signing up for the list in your state ensures you receive direct notification of regulatory changes.
  • Distributor communications: A reputable licensed distributor will notify retail accounts when products receive FDA marketing denial orders or when state bans take effect for products in their catalog. If your distributor is not doing this, that is a red flag about the distributor’s own compliance posture.
  • FDA’s product authorization database: Bookmarking the FDA’s ENDS authorization page and checking it quarterly is the minimum due-diligence standard for any retailer who carries vape products.
  • Industry associations: The National Association of Convenience Stores (NACS) and the Vapor Technology Association both track legislative and regulatory developments at the state and federal level and publish member alerts when significant changes occur.
  • POS system updates: A compliance-aware POS system will push product database updates when known prohibited products need to be flagged. Retailers who use the NRS POS can contact NRS support at (800) 215-0931 for guidance on pricebook updates when product compliance status changes.

Staying ahead of regulatory trends also connects to broader inventory intelligence. Just as a retailer might use their POS data to track viral trends and anticipate out-of-stock events, the same sales data can flag when a product’s sales velocity drops suddenly, which can be an early signal that customers are aware of a new restriction before the retailer has formally processed it.

Frequently Asked Questions About PACT Act Compliance for Vape Retailers

Does the PACT Act apply to my store if I only sell vapes in person and never ship anything?

The federal PACT Act’s shipping ban and delivery-seller registration requirements primarily target businesses that ship ENDS products to consumers. However, the law also created a framework that triggered parallel state legislation requiring all in-store vape retailers to obtain state permits, collect excise taxes, and maintain purchase records. In most states, even a purely in-store vape retailer has compliance obligations under state law that were enacted in response to the federal PACT Act expansion. Check your state’s tobacco or ENDS retailer permit requirements specifically.

How do I register under the PACT Act with the ATF?

Registration is completed using ATF Form 5070.1, which is available on the ATF’s website. The form requires your business name, address, FEIN, and a description of the ENDS products you sell or ship. Registration must be completed before any shipments begin and renewed annually. If you also sell through a delivery app or ship products, you should complete this registration even if you primarily operate a physical store.

Which states currently ban all flavored vapes?

As of the current regulatory landscape, Massachusetts, California, New Jersey, New York, and Rhode Island have enacted comprehensive bans on the sale of all flavored ENDS products, including menthol and mint flavors. Several other states have partial restrictions. This list changes as new legislation passes, so retailers should verify current status with their state’s tobacco control authority or ENDS-specific regulatory agency.

Can I still sell menthol-flavored vapes in states that have banned flavored e-cigarettes?

In states with comprehensive flavored ENDS bans, menthol is typically included in the ban. Some states distinguish between menthol and other flavors in their specific statutory language, but the trend in comprehensive-ban states is to include menthol explicitly. Retailers should not assume menthol is exempt without checking the specific language of their state’s law.

What happens if I sell a vape product that has received an FDA marketing denial order?

Selling a product that has received a marketing denial order (MDO) is a federal regulatory violation. The FDA can take enforcement action against retailers selling MDO products, including issuing warning letters, civil money penalties, and referral for criminal prosecution in egregious cases. Products with MDOs should be removed from the shelf immediately upon notification and should not be restocked from any source.

Do I need to register in every state where I have a store location?

Yes. State ENDS retailer permits are issued on a per-location, per-state basis. If you operate stores in multiple states, you need a valid state permit for each location in each state. Each state has its own application process, fee schedule, and renewal timeline. Federal ATF registration covers your business entity but does not substitute for state-level permits.

What records do I need to keep for in-store vape sales?

For in-store sales, the most important records to maintain are purchase invoices from your licensed distributor (showing the product, quantity, price, and distributor license number), excise tax payment documentation, and age-verification logs if your state requires them. Keep these records for at least five years to align with the federal PACT Act standard, even if your state has a shorter retention period.

Can I use a third-party delivery app to deliver vapes to customers?

This depends heavily on your state. Several states, including New York, California, and New Jersey, prohibit direct-to-consumer delivery of ENDS products entirely, regardless of the carrier or platform. In states where delivery is permitted, the delivery must comply with age-verification requirements (government ID check, signature required, 21+) and state excise tax obligations. Verify your state’s specific rules before listing vape products on any delivery platform.

How does the FDA’s PMTA process affect which vapes I can stock?

The FDA requires all ENDS products to have received marketing authorization through the PMTA process in order to be legally sold. Products that received marketing denial orders are prohibited from sale. The authorized product list currently includes primarily tobacco-flavored products from large manufacturers. Retailers should regularly check the FDA’s ENDS authorization database to verify that each product in their inventory has received marketing authorization, not just a pending or denied application status.

What is the Tobacco 21 law and how does it affect my vape sales?

The federal Tobacco 21 law, effective since December 2019, raised the minimum age for purchasing tobacco and ENDS products to 21 at all retail locations in the United States. This federal floor applies everywhere and cannot be lowered by state law. Retailers must verify that every customer purchasing vapes is at least 21 years old. Some states have additional requirements, such as mandatory ID scanning or specific ID-check documentation, that go beyond the federal minimum. Age verification should be built into your POS workflow so it cannot be bypassed by a cashier who is in a hurry.

How often do I need to renew my state ENDS retailer permit?

Most states require annual renewal. The renewal period and deadline vary by state, and failure to renew on time typically results in a lapse of the permit, meaning you cannot legally sell ENDS products during the lapse period. Some states also require retailers to re-certify compliance training for all staff as part of the renewal process. Set calendar reminders for at least 60 days before your permit’s expiration date to allow time for the renewal application to be processed.

Are zero-nicotine vapes subject to the same rules as nicotine vapes?

At the federal level, the FDA’s jurisdiction under the Tobacco Control Act applies specifically to tobacco-derived nicotine and products containing it. Zero-nicotine vapes using synthetic or non-tobacco-derived nicotine operate in a more complex regulatory space, though FDA has taken the position that it has authority over synthetic nicotine products under the Omnibus Appropriations Act of 2022. At the state level, many state ENDS laws explicitly cover nicotine-free vape products, particularly those sold in the same retail environment as nicotine products. Do not assume zero-nicotine products are automatically exempt from state ENDS retailer permit requirements.