compliance
PACT Act Compliance for California Nicotine Pouch Retailers (2026)
What the PACT Act is
The Prevent All Cigarette Trafficking Act is a federal law (15 U.S.C. § 375 et seq.) originally passed in 2009 to crack down on tax evasion and underage sales of mail-order cigarettes. It was significantly amended in December 2020 (effective March 27, 2021) to cover:
- Electronic Nicotine Delivery Systems (ENDS) — vape devices, vape juice, disposable vapes
- Tobacco-free oral nicotine products — including all nicotine pouches (ZYN, VELO, Rogue, etc.)
Before 2021, pouches operated in a regulatory grey zone for shipping. After the 2020 amendments, they’re squarely inside the PACT Act framework.
The five core requirements
Any business shipping nicotine pouches across state lines (or even within a state, in some interpretations) must comply with five rules:
1. No USPS shipping
The USPS is prohibited from accepting nicotine product shipments. You must use UPS, FedEx, DHL, or another private carrier. Each of these has its own internal rules around nicotine shipments — typically requiring you to register as a tobacco shipper before they’ll accept your packages.
2. Adult-signature delivery
Every shipment must require an adult signature at delivery, with the carrier checking ID for 21+. UPS / FedEx have built-in services for this (UPS Adult Signature Required, FedEx Adult Signature Required). The recipient must be 21 or older, present, and able to show ID.
3. Registration
Shippers must register with:
- ATF (Bureau of Alcohol, Tobacco, Firearms and Explosives) federally
- State attorneys general of every state they ship into
- State tax authorities (in California: CDTFA)
Registration is one-time per state but requires annual renewal in most states.
4. Monthly state reporting
Every month, shippers must file a PACT Report with the AG of every state they shipped into during that month. Reports include:
- Recipient name and address
- Brand / product / quantity
- Wholesale value
- Shipment date
Reports are due by the 10th of the following month. Most states accept electronic filing.
5. Recordkeeping
Maintain shipment records (recipient details, products, quantities, taxes) for 4 years after the last shipment to that recipient. Subject to inspection by the ATF and state AGs.
How Wholepouch handles PACT for B2B customers
Wholepouch is registered with the ATF, the California AG, and the CDTFA. We hold adult-shipper status with our carriers (UPS, FedEx). For every B2B shipment from Wholepouch to your business address:
- We use UPS / FedEx with Adult Signature Required
- Your delivery recipient must be 21+ with ID
- We file monthly PACT reports with the CA AG
- We maintain shipment records for the required 4-year retention
Your responsibility on the receiving end:
- Ensure a 21+ adult is available at the delivery address to sign
- Verify the shipment matches your order before signing
- Maintain your own purchase records (you’re already doing this for tax purposes)
When YOU become the PACT-regulated party
The moment you re-ship a Wholepouch product to one of your own customers — DTC online order, mail-order to a customer’s home, anything that involves a carrier — you become the regulated party for that downstream shipment. Wholepouch’s compliance covers your B2B inbound; it does not cover your retail outbound.
This means:
- If you only sell in-person, no additional PACT obligations
- If you ship to customers — even just within California — you need your own ATF registration, your own state AG registration, your own monthly reports, your own carrier setup, your own adult-signature service
For most independent CA vape / smoke shops, the PACT compliance overhead for DTC is the reason they don’t ship — it’s easier to keep retail in-store and direct online customers to in-state DTC players (like Wholepouch) for their fulfillment.
California-specific layers
On top of PACT, California adds:
- CDTFA Tobacco Products Distributor / Retailer license — required to sell or wholesale nicotine products in CA
- California Tobacco Products Tax (TPT) — currently 56.93% wholesale rate (subject to update)
- Tobacco 21 — minimum age 21 statewide for all nicotine purchases
- Local tobacco retail permits — many cities (LA, SF, San Diego, Sacramento) require additional permits
- SB 793 flavor ban — applies to vape products, NOT pouches; pouches remain legal in all flavors
The compliance stack is real but not prohibitive — most established CA vape / smoke shops navigate all of it as a routine matter.
Common PACT mistakes
| Mistake | Consequence |
|---|---|
| Shipping via USPS | Federal violation, potential criminal exposure |
| Skipping adult signature on a “small” order | $5K civil penalty per shipment |
| Missing the monthly state AG report deadline | $5K civil penalty per month |
| Not registering with a state before shipping into it | $5K civil penalty per shipment |
| Letting an underage employee accept a delivery | Voids your compliance posture |
| Not retaining records for 4 years | Inspection failure, presumption of non-compliance |
Practical checklist for CA retailers
If you’re a CA shop selling nicotine pouches in person only:
- CDTFA Tobacco Products Retailer license — current
- Local city / county tobacco permits — current
- Tobacco 21 ID verification training for all staff (CDTFA STAR program)
- B2B account with a CA-licensed wholesaler (e.g. Wholepouch)
- 21+ adult available at receiving dock for inbound deliveries
If you also ship to customers:
- All of the above PLUS:
- ATF tobacco shipper registration
- State AG registration in every destination state (start with CA)
- Tobacco shipper account with UPS or FedEx
- Adult-signature service enabled on all outbound
- Monthly PACT report filing process
- 4-year recipient record retention system
- Tax remittance process per destination state
Source from a CA-licensed wholesaler
If you don’t want to handle inbound PACT compliance yourself, source from a CA-licensed wholesaler that handles the upstream shipping into your business. Wholepouch carries every major brand with same-day fulfillment to CA businesses:
Bottom line
PACT Act compliance is non-negotiable for any business shipping nicotine pouches in 2026. For CA retailers selling only in person, the obligations stay in-state (CDTFA, T21, local permits) and most wholesalers handle the inbound side. For retailers shipping DTC, the federal and state stack is significant — registration, monthly reports, carrier setup, recordkeeping — and most independent shops decide it’s not worth the overhead vs in-store sales.
This article is informational, not legal advice. Verify specific compliance questions with the ATF, CDTFA, and your state attorney general — and have a tobacco-experienced attorney review your shipping setup before you start fulfilling DTC orders.
Frequently asked questions
- Does the PACT Act apply to nicotine pouches?
- Yes — the PACT Act was amended in December 2020 (effective March 2021) to cover Electronic Nicotine Delivery Systems (ENDS) and oral nicotine products including nicotine pouches. Tobacco-free pouches like ZYN, VELO, and Rogue are explicitly covered.
- What does the PACT Act require?
- Five things for nicotine product shipments: (1) USPS shipping ban — must use UPS, FedEx, or other private carrier; (2) adult-signature delivery (21+ ID check); (3) registration with the federal ATF and state attorneys general where you ship; (4) monthly reports of all shipments to state AGs; (5) recipient and tax records retention for 4 years.
- Does the PACT Act apply if I only sell in person?
- No, mostly. The PACT Act governs interstate / mail-based sales. In-person sales at a California vape shop are governed by California law (CDTFA license, Tobacco 21, local permits). PACT applies if you ship to a customer — either in-state or out-of-state.
- What's the penalty for PACT Act non-compliance?
- Civil penalties up to $5,000 per violation. Each shipment that violates the act counts as a separate violation. Federal courts have issued multi-million-dollar judgments against non-compliant online sellers. ATF and state AGs both enforce.
- Does Wholepouch handle PACT for B2B customers?
- Yes — Wholepouch handles all PACT Act compliance on shipments to your business address (registration, signature delivery, state AG reporting). If you re-ship to your own customers (DTC, online sales), you become the regulated party for those shipments and must register and report independently.