PACT Act Compliance Guide for Online Vape Retailers

The PACT Act (15 U.S.C. § 376a) sets strict federal rules for all online retailers shipping vapor products to U.S. customers. It covers ATF registration, monthly delivery reporting to state tax authorities, age verification at checkout, adult signature on delivery, and certified carrier agreements. For operators, the cost of missing even one requirement goes beyond fines. Carrier termination and loss of shipping access are on the table too.

This guide covers every PACT Act obligation in one place, with actionable steps for each requirement.

What Is the PACT Act and Who Does It Cover?

The Prevent All Cigarette Trafficking Act applies to any retailer.

It covers retailers that ship cigarettes, smokeless tobacco, and retailers that ship electronic nicotine delivery systems (ENDS). This includes shipments sent through the U.S. mail or a common carrier. For online vape retailers, this means Shopify and WooCommerce stores. These stores ship e-liquids, vape devices, pods, cartridges, and other ENDS products.

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) enforces the law at the federal level. State tax agencies handle monthly delivery reporting.

Who must comply:

  • Any online retailer selling ENDS products and shipping them to U.S. consumers
  • Third-party marketplaces that facilitate ENDS sales and handle shipping
  • Drop-shippers who arrange ENDS delivery on behalf of a merchant
A semi-realistic digital editorial illustration featuring a professional vape product display on a counter, bathed in a teal and mint green color wash with warm golden lighting. In the upper center, a glowing green shield with a white checkmark floats, connected by dotted curved arrows to a digital "Verification Successful" screen and a compliance checklist clipboard. The screen displays a "21+ Verified" badge, while the clipboard shows green checkmarks next to "ATF Registration," "State Filing," and "Age Verified". No human figures or third-party logos are present.

Do Online Vape Retailers Need to Register with the ATF?

Before your first shipment, you must register with the ATF as a delivery seller of tobacco or ENDS products.

What registration requires:

  • Submit your business name, address, and contact information to ATF via ATF Form 5070.1
  • Register separately with the tobacco tax administrator in every state where you ship
  • Renew registration annually

You can submit registration directly through ATF.gov. Failure to register before shipping is itself a federal violation, separate from any penalty for late reporting.

Not sure which states require separate registration? Run your state-by-state excise tax check at vapetaxes.com before your first shipment.

What Do the PACT Act Monthly State Delivery Reports Require?

Every month, you must file a delivery sales report with the tax administrator of each state where you shipped ENDS products.

What each monthly report must include:

  • Your business name, address, and state registration numbers
  • The name and address of each customer who received a shipment
  • The brand, quantity, and type of product shipped
  • The date of each delivery
  • Proof that the excise tax was collected and remitted

The June 10, 2026 deadline applies to all May sales. Each state requires a separate filing. If you ship to 30 states, you file 30 reports.

State deadlines are independent of each other. Keeping each report filed on time and complete is what stops penalties from building.

States with active enforcement programs include California, New York, Colorado, Washington, and Minnesota. ATF.gov maintains the full list of state tobacco tax administrators.

How Does the PACT Act Define Age Verification at Point of Sale?

Two federal rules govern age verification for online ENDS sales: the PACT Act and the FDA Deeming Rule. Each has a distinct requirement.

The FDA Deeming Rule requires age checks for any customer who appears to be under 30 at the point of purchase. For online sales, this means identity verification at checkout, not a simple date-of-birth entry.

The PACT Act requires delivery sellers to verify each customer’s age by obtaining their full name, birth date, and residential address through one or more commercially available databases, per 15 U.S.C. § 376a(b)(4).

What compliant age verification requires:

  • Check the purchaser’s age against an authoritative identity database or government-issued ID
  • Confirm the buyer is 21 or older (the federal minimum for all ENDS products under the Tobacco 21 law)
  • Log the verification result with a timestamp, keyed to the order

A birthday field with no verification behind it does not satisfy either requirement. The FDA’s under-30 visual check standard applies even for customers who just turned 21. This helps reduce the risk of age misrepresentation.

Does the PACT Act Require an Adult Signature on Every Vape Delivery?

Every ENDS shipment must require an adult signature at the point of delivery. This means:

  • The carrier must obtain a signature from a person who is 21 or older
  • Delivery cannot be completed to a mailbox, parcel locker, or unattended location
  • You must keep a record of the signed delivery confirmation for each order

This requirement applies to every shipment, regardless of package size or order value.

A semi-realistic editorial illustration of a vape retail shelf featuring unbranded e-liquid bottles and devices in a teal and mint-colored environment. On the left, a wooden clipboard displays a checklist with green checkmarks next to "Register with ATF," "File Monthly State Reports," and "Verify Age at Checkout". The right side features a digital ID card icon and a gold padlock with a green checkmark. A glowing green compliance shield floats centered above the scene, connected to the clipboard, the shelf, and the security icons by dotted curved arrows under warm, golden lighting.

Which Carriers Can Legally Ship Vape Products Under the PACT Act?

The PACT Act prohibits USPS from delivering ENDS products. All ENDS shipments must use a private carrier under a current certified carrier agreement.

Note: Both UPS and FedEx have significantly restricted consumer ENDS shipments since 2021. Before you choose a carrier, confirm their current policy allows your product type.

Also confirm a valid, certified carrier agreement is in place. Carrier policies can change. A signed, current agreement is a legal requirement, not just a formality.

What carrier compliance requires:

  • Confirm your carrier’s current ENDS shipping policy covers your product category
  • Maintain a signed, current certified carrier agreement with each carrier you use
  • Disclose that your shipments contain tobacco or ENDS products at the time of tender
  • Comply with each carrier’s internal ENDS shipping policies, which may be stricter than federal minimums

Review your carrier agreements at least once per year. An expired or unsigned agreement can prevent you from shipping legally. This can happen even if your ATF registration is up to date. It can also happen even if your state filings are current.

How Token of Trust Supports PACT Act Compliance for Vape Retailers

The PACT Act’s monthly reporting requirement does not scale evenly. A retailer shipping to 30 states files 30 separate reports, each mapped to a different state tax administrator, a different template, and a different deadline schedule. Token of Trust is built to reduce that operational load without adding steps for your customers at checkout.

Age Verification: Token of Trust checks each buyer’s identity against authoritative data sources at checkout. It meets the PACT Act’s under-30 verification standard without adding friction for legitimate adult purchases.

Government ID Verification: For higher-risk orders or stricter state rules, Token of Trust supports automated government ID checks. Results are logged with a timestamp, keyed to the order, and ready for audit.

PACT Act Compliance Reporting: Every state uses its own reporting template, filing schedule, and tax administrator contact. Token of Trust’s compliance reporting tools map your shipment data to each state’s required fields automatically. You are not reformatting the same data set 30 times before every monthly deadline.

Excise Tax Filing: Token of Trust offers a free vape excise tax calculator at vapetaxes.com. Enter your product and state to see the applicable excise tax rate for your ENDS products.

Token of Trust helps vape retailers meet PACT Act requirements across every state they ship to.

Talk to one of our Compliance Specialist

Ready to work through your PACT Act requirements?

Download the free 2026 PACT Act Compliance Checklist. It covers every federal requirement and includes a state-by-state filing reference so you know exactly which template, deadline, and tax administrator applies to each state where you shipped last month. Use it to run a pre-filing audit before your next monthly deadline. Covers ATF registration, monthly report data fields, age verification setup, carrier agreements, and a completion check you can run in under 10 minutes.

A semi-realistic digital editorial illustration centered on vape industry compliance, set against a teal and mint green textured background. On the left, a collection of unbranded silver vape mods and various glass e-liquid bottles are grouped together. To the right sits a formal, cream-colored document titled "PACT Act Compliance Authorization," featuring a signature line and a sleek pen resting beside it. Hovering centered above the scene is a glowing green compliance shield with a white checkmark, emitting a warm golden light. Dotted golden arrows curve downward from the shield to both the vape products and the document, symbolizing a verified connection.

Frequently Asked Questions

Does the PACT Act apply to nicotine pouches and oral nicotine products?

Yes. Nicotine pouches are covered under the original PACT Act as smokeless tobacco products, since they are tobacco intended to be placed in the oral cavity. All PACT Act requirements apply to their online sale and shipment: ATF registration, monthly state delivery reports, age verification, adult signature on delivery, and certified carrier agreements. The 2021 ENDS amendment separately expanded coverage to electronic nicotine delivery systems, but nicotine pouches do not fall under the ENDS definition. They have always been subject to the law as smokeless tobacco.

When is the PACT Act monthly report due?

Monthly delivery reports are due by the 10th of each calendar month. They cover delivery sales from the previous month. For May sales, the filing deadline is June 10, 2026. Each state requires a separate filing. Note that several states, including Vermont, do not extend deadlines when the 10th falls on a weekend or holiday.

Can I ship vape products through USPS?

No. USPS is prohibited from delivering ENDS products under the PACT Act. All ENDS shipments must use a private carrier under a current certified carrier agreement. Note that both UPS and FedEx have significantly restricted consumer ENDS shipping since 2021. Verify your carrier’s current policy and confirm your certified carrier agreement is active before shipping.

What happens if I miss a monthly state delivery report?

Under 15 U.S.C. § 377, federal civil penalties for PACT Act violations can reach up to $5,000 for a first violation or $10,000 for each subsequent violation, or 2% of gross sales during the prior one-year period, whichever is greater. Each state assesses penalties separately under its own rules, so missing multiple state filings multiplies your exposure. Repeated non-compliance can result in ATF enforcement action, placement on the federal non-compliant list, and carrier agreement termination.