21+ for 7-OH: ID Scanners and Age Checks at the Register
Learn how the 7-OH age restriction works by state and how to set up ID scanning tied to your POS so processors and inspectors see proof.
Photo: Pixabay
On this page 6 sections
There is no single national minimum age to buy 7-OH. The 7-OH age restriction comes from state law, often written into a state's kratom statute, and counties and cities can add their own rules on top. In some places 7-OH can't be sold at all. If you want one rule you never have to revisit, use 21 at the register. Enforce it with an ID scan tied to the POS on every 7-OH sale, and log each scan.
The log matters as much as the check. Your processor and your local inspector will both want proof that you card buyers, and "our cashiers are trained" is not proof.
7-OH Age Restriction by State: Where to Find Your Number
How old someone must be to buy 7-OH depends on where your store sits, and the rules in this category have changed quickly. A state-by-state table printed today could be wrong by next quarter. Instead of a table, here is how to find the number for your location and keep it current.
Start with the state statute. Search your state's code for "kratom" and "7-hydroxymitragynine." Some states regulate 7-OH inside a kratom consumer protection act. Others treat concentrated 7-OH products separately or ban them outright. The agency that enforces the law is often the agriculture or health department, and it may publish guidance that reads more easily than the statute.
Then look below the state level, because counties and cities are writing their own limits. Our coverage of Franklin County, Georgia's proposed kratom and 7-OH ban and Jackson County's proposed limits shows how fast that happens. Federal action is the last layer to watch. Federal scheduling would make 7-OH sales illegal under federal law regardless of what your state or county allows. You can track it through our explainer on DEA scheduling of 7-OH and card processing.
Once you know your state's number, consider setting the register to 21 anyway. A 21+ house rule clears a lower state minimum. It also survives a state or county raising its age without any change to the POS. Cashiers get one number to remember across every age-restricted item you carry. The cost is turning away some customers your state would technically allow, which you weigh against the cost of a citation.
An age check can't fix a sale that's illegal in the first place. If your state or county bans 7-OH or caps its concentration, read where 7-OH is banned and how to block restricted sales before you configure anything. This is general information, not legal advice. Confirm your obligations with an attorney licensed in your state.
Why Processors Ask About Your Age Checks
Several rule sets meet at your register, and it helps to keep them apart. State and local law sets the minimum age and decides whether 7-OH can be sold at all. Card network rules from Visa and Mastercard don't set an age for 7-OH, but they expect merchants not to process transactions that are illegal where the sale takes place. A sale to an underage buyer is therefore a network problem as well as a legal one. Your processor's own policy decides what evidence it wants from you. That is the processor's choice, not a network rule, and it differs from one acquirer to the next.
7-OH is underwritten as high risk, and the processor and its sponsor bank answer for what runs through your account. A citation for selling to a minor can prompt an account review that ends with a larger reserve or a closed account. That is why underwriters on 7-OH payment processing accounts commonly ask how you verify age. Some want it in writing, with screenshots of the prompt.
A store with a scan-to-POS setup and logged results can answer that request on a single page. A store that relies on cashier judgment has nothing to hand over. For the rest of the file underwriters review, see how to get a 7-OH merchant account approved.
Choosing an ID Scanner for 7-OH That Works With Your POS
Most U.S. driver's licenses and state IDs carry a barcode on the back that encodes the holder's date of birth along with the card's expiration date. An ID scanner reads that barcode. What matters is where the result goes next.
| Setup | How it connects | Result saved with the sale? | Watch for |
|---|---|---|---|
| Scanner built into the POS or terminal | Camera or imager on the device | Usually, if the POS software supports age prompts | Confirm the software reads ID barcodes, not only product barcodes |
| External barcode scanner | USB or Bluetooth into the POS | Depends on the POS app parsing the ID data | Some scanners only "type" raw data, and the POS has to interpret it |
| Standalone ID verifier | Separate device at the counter | No, it keeps its own log | Two systems to reconcile when someone asks for proof |
The integrated setups take more work up front, but the pass or fail result attaches to the transaction itself. If you're shopping for hardware, smart terminals and full POS systems with a built-in camera or imager can read the barcode. Whether the software turns that read into an age decision depends on the POS app, so ask the vendor directly. Get written confirmation that the scanner works with your exact software version and reads the expiration date as well as the birth date. Then confirm the result is written to the sale record.
Many stores misunderstand what a scan proves. It confirms what the ID says, not that the ID is genuine or that it belongs to the person holding it. A decent fake carries a working barcode, and a real license can be handed over by its owner's younger sibling. Authentication-grade scanners also inspect physical security features and cost more. They earn their price near a college or anywhere fake IDs keep showing up. In every setup, the cashier still compares the photo to the face.
Age Verification at the POS: Forcing a Prompt on Every 7-OH SKU
A scanner on the counter does nothing if the cashier can skip it. The goal is a POS that won't complete a 7-OH sale until an age check passes. Our guide to locked SKUs and POS setup for 7-OH retailers covers the inventory side. For the age check itself, work through the setup in this order:
- Put every 7-OH item in one category. That includes every format and size, plus any bundle or kit that contains a 7-OH product.
- Flag that category as age-restricted at 21, so the prompt fires when an item is added rather than at tender.
- Require a scan to clear the prompt. Allow manual birth-date entry only with a manager PIN, and log every override.
- Close the side doors by locking open-price and miscellaneous keys for these items or putting them behind a manager PIN. Ringing 7-OH under another category to dodge the prompt also creates a coding problem, explained in the miscoding risk of ringing 7-OH as herbal supplements.
- Pull 7-OH from self-checkout and kiosks, or require staff approval before those sales finish.
- Test every SKU with a test ID. Confirm the prompt fires and a decline blocks the sale, then check that both events reached the log.
Why the POS Should Do the Date Math
Take an illustrative case with a house minimum of 21. A customer's 21st birthday is tomorrow. A cashier who subtracts birth year from the current year gets 21 and rings the sale. A POS that compares full dates sees someone who is still 20 and declines it. The same customer passes the next day.
Buyers a few days short of the line are the ones a busy cashier misjudges. A compliance check can use exactly that kind of buyer.
Expired licenses are a separate decision. A customer can be old enough while holding an ID that lapsed last month. Many stores refuse expired IDs in their written policy, and a scanner that reads the expiration date can enforce that rule once you switch it on.
Storing Scan Records Without Privacy Problems
Proof does not mean a copy of every license. You need a log that ties each 7-OH sale to a passed check. Each entry only has to identify the sale and the cashier and record the outcome: a pass, a decline or a manager override. Add the date of birth and ID expiration only if your written policy calls for them.
Leave license images out of the log, along with home addresses and license numbers, unless a specific law or your attorney says otherwise. Some states restrict what businesses can do with data read from a driver's license, including how long it may be kept and whether it can be used for marketing. If a scanner uses facial matching, biometric privacy laws in some states add consent and retention requirements.
Then check where the data lives. Many scanner apps sync to the vendor's cloud, so read the vendor's retention and sharing terms before you sign. Limit log access to managers. Pick a retention period long enough to answer an inspection or a processor inquiry, and delete records on that schedule.
License data sits outside PCI DSS scope, but the same habits carry over. Store the minimum and restrict who can see it. Never paste ID details into payment fields or send them by email. Confirm your state's retention rules with counsel.
Training Staff for Compliance Checks
A scanner only works if staff use it every time. The first rule is universal scanning: everyone who buys 7-OH gets scanned, with no exceptions for customers who look old enough. A rule without exceptions is easier to follow, and it is easier to defend after a failed compliance check.
Staff also need to know the fallback. When the scanner fails, a manager checks the ID by hand and enters the override, so the log shows who approved the sale. Teach cashiers to refuse the sale when an adult appears to be buying for someone underage. Give them a short line to use: "I can't sell this without a valid ID showing 21 or older." It ends most conversations without an argument.
Have each employee sign and date your age policy, and keep the signed copies on file. Review the override log weekly. A rising override rate usually points to a scanner problem or a cashier shortcut, and you want to find it before an inspector or an underwriter does.
Start this week by exporting your item list and tagging every 7-OH SKU. Run a test sale, then save screenshots of the prompt and the log entry next to a one-page written policy. If your current POS can't force an item-level age check, request a free quote. A MannyPay specialist will respond within one business day to talk through hardware and a high-risk merchant account for this category.
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
