The Shopify vape ban is global. Here's what you can actually do.

What actually happened

The short version: Shopify no longer allows vape products. Anywhere. At all.

The longer version matters, because the dates tell you how much warning the next category will get.

• 24 November 2025. A bipartisan coalition of 25 state attorneys general, plus DC, Puerto Rico and New York City, sent Shopify a letter demanding it stop supporting vape sales. The letter named 29 Shopify-hosted sites. It's public on the California AG's website.
• 23 June 2026. Reuters reported Shopify would bar vapes "as soon as this week". California AG Rob Bonta welcomed the ban the same day.
• 24 June 2026. Merchants started receiving individual notices: Shopify "no longer supports the sale" of electronic nicotine delivery systems. No public policy page, no press release. Just emails.
• 7–8 July 2026 (UTC). Deadline. Remove every vape product or face listing suspension and store termination. Two weeks, for stores that had traded on the platform for a decade.
• 10 July 2026. Shopify confirmed the policy to Reuters.
• Mid-July 2026. The other shoe dropped. The ban applies globally, not just in the US. Bonta's office told Reuters as much, and Vaping360 reported UK and EU merchants receiving the same eviction notices.

The scope is categorical. Hardware, e-liquids, pods, disposables, coils, accessories. It includes the 45 products the FDA has actually authorised. Legal status is irrelevant.

Yes, it applies to you

If you read early coverage saying UK merchants weren't affected, that advice is out of date. Some of it is still ranking on Google, which is genuinely unhelpful for anyone searching now.

A UK shop selling MHRA-notified, fully compliant reusable vapes to adults is doing something legal. Doesn't matter. Shopify's ban overrides local law, because it isn't law, it's a landlord's house rule. To be clear, this is separate from the UK's own single-use disposables ban from June 2025. That one came from Parliament. This one came from an email.

We'd add one honest caveat: Shopify is within its rights here. Every hosted platform reserves the right to decide what it will and won't support. That's exactly the problem.

This was never just about vapes

Here's the part that should worry you even if you've never sold a vape in your life.

The pressure campaign worked, and everyone involved knows it worked. The attorneys general have signalled other platforms and payment processors are on their list. Stripe, PayPal and Square already exclude vape in their acceptable use policies. If your products sit anywhere near a regulator's radar, CBD, nicotine pouches, peptides, supplements, knives, adult products, you are one policy email away from the same two-week deadline.

In our experience running restricted-category stores, the pattern is always the same. You build on a platform, you follow the rules, the rules change, and the notice period is measured in days. Paid ads were never available to you in the first place. Now the platform itself is conditional.

So the question isn't "which Shopify alternative?". It's "how do I stop renting?".

Your four real options

Most of the migration guides published since July recommend the same three platforms and move on. The honest version has four options, and the right one depends on your size.

1. Stay on Shopify, exit the category. If vape is a side line, removing it and keeping the store may be rational. Do the maths before sentiment does it for you.

2. Move to another hosted platform. BigCommerce and similar will take your store today. Before you migrate, get their policy on your category in writing, not a sales call, an email from someone whose title includes "compliance". Then accept what you're doing: moving from one landlord to another, hoping the next AG letter goes to someone else's platform. For some stores that's a reasonable bet. Call it what it is.

3. Self-host WooCommerce or Magento. Nobody can deplatform a WordPress install. This is a legitimate answer, especially under about £500k turnover, and plenty of the stores displaced in July went this way. The trade is that you now own hosting, security, updates and performance, and WooCommerce at serious catalogue size needs real engineering attention anyway.

4. Own the stack properly: headless, open source. Build on an open-source commerce engine (Medusa is the one we use) with your own frontend, your own database, your own payment integrations. No acceptable use policy exists. Age verification and compliance become features you design rather than apps you hope stay compatible. This is the most work and the most freedom, and until recently it was an enterprise-only conversation. It isn't anymore.

Not one of the ban guides we reviewed mentions option 4. Every one of them was written by an agency that resells options 2 or 3.

The questions none of the guides answer

Four things we know from doing this that we couldn't find written down anywhere.

Export everything before termination, not after. A suspended store can still lose you your data access. Products, customers, orders, redirects, blog content, theme files. Do it this week even if you haven't picked a destination.

Your redirects die with your store. This is the nasty one. Every URL your store has earned over the years is served by Shopify. When the store goes, so does your ability to 301 those URLs to their new home. If you migrate in good order you can map everything first. We mapped 2,938 live URLs one-to-one and imported 9,418 redirects, then verified every single one before switching anything off. Wait for termination and that option is gone.

Start payments before you start building. High-risk merchant accounts take weeks of underwriting. A finished store that can't take money is a very expensive brochure. Applications first, build second.

Age verification is a build item, not a checkbox. Whatever platform you land on, your AV flow has to survive the move, and your existing verified customers ideally shouldn't have to verify again. We carried 52,559 completed age verifications across so returning customers never noticed.

What moving a £4.5M vape store actually took

We're not writing about this from news reports. Hollow Point rebuilt a £4.5M UK vape retailer on Medusa, off Shopify. The migration was already under way when the ban landed and turned a strategic decision into a mandatory one.

The scale, since honest numbers are hard to find in this conversation: 2,933 products across 207 collections. 260,880 customer accounts with 206,750 addresses. 511,740 historical orders with 1.6 million line items, imported with zero errors in the run logs. 280 blog articles kept at their original URLs. Age verification, loyalty points, promotions logic and transactional email rebuilt as first-class features rather than a stack of apps.

And the SEO groundwork: every live URL mapped, every redirect imported and verified, zero redirect chains or loops. The method is written up in our URL parity case study if you want the detail.

None of that took ten minutes, whatever the migration marketing says. It took months of proper engineering. That's the price of never getting the email again, and for a store doing millions in a category platforms keep evicting, we think it's obviously worth paying. For a store doing £200k, it probably isn't, and we'll say so if you ask.

Which option fits which store

• Under ~£500k, simple catalogue: self-hosted WooCommerce. Take the ops burden, keep the freedom.
• £500k–£1M, standard products, low regulatory heat: a hosted alternative with your category approved in writing can work. Keep exports current. Know where the exit is.
• £1M+, restricted category, or your store IS the business: own the stack. The engineering cost stops looking expensive the day you multiply your revenue by the number of days a forced two-week migration would take.
• Any size: if the platform can evict you and you'd struggle to trade within a month, you have a continuity problem worth solving before someone else schedules it.

UK merchants: your clock is running twice

If you're a UK vape retailer, the Shopify ban is only half your year. The new vaping products duty arrives on 1 October 2026, with duty-paid stamps and HMRC registration. You're re-engineering pricing, compliance and stock anyway. Doing your platform move in the same window is one disruption instead of two, and it means your new store launches already built for the duty regime rather than patched for it. That's the sequencing we'd run. It's the sequencing we did run.

Common questions

Is the Shopify vape ban global?

Yes. It began as a US enforcement response but applies worldwide, including to UK and EU merchants selling legal, MHRA-notified products. Merchants outside the US received the same removal notices.

Does the ban affect CBD or other restricted products?

Not directly, this ban covers nicotine vaping products (ENDS). But the mechanism that produced it, regulator pressure leading to a platform policy change with a two-week deadline, applies to any restricted category. CBD merchants should treat it as a warning shot.

Can I appeal a Shopify vape ban decision?

Realistically, no. The ban is categorical, so appeals only help false positives, a store wrongly flagged that doesn't actually sell ENDS products. If you sell vapes, the policy is the policy.

Will I lose my Google rankings if I migrate off Shopify?

Not if the migration preserves your URLs or redirects every old URL to its new equivalent before the old store is switched off. That work has to happen while you still control the Shopify store. We mapped 2,938 URLs and verified 9,418 redirects for exactly this reason.

Can I keep selling non-vape products on Shopify?

Yes. The ban covers ENDS products, not merchants. Some stores are splitting: general catalogue stays on Shopify, regulated catalogue moves to an owned platform.

What happens to my myshopify.com domain and store data if I'm terminated?

Your custom domain is yours; the myshopify.com address and everything served by Shopify is not. Export products, customers, orders, redirects and content while you have normal access. After termination you may not get another chance.

Where we fit

Hollow Point builds and runs ecommerce for restricted categories. We migrate stores off Shopify onto stacks their owners actually own, and we've done it at the scale described above, with high-risk payments and age verification treated as engineering rather than plugins. If the ban email landed in your inbox, or you'd rather move before your category's version of it does, the honest first step is a conversation about whether you should move at all. Sometimes the answer is no. We'll tell you either way.

Also read: 10 Shopify features we rebuilt in Medusa, the technical companion to this piece.