Age Verification Requirements for Tobacco and Vape Retailers

Federal law requires tobacco and vape retailers to verify the age of any customer who appears to be under 30 using a valid, unexpired, government-issued photo ID, and to refuse the sale if that ID does not show the buyer is at least 21. The age verification requirements for tobacco and vape retailers apply to every product that meets the federal definition of a tobacco product, every sales channel from counter to vending machine to website, and every retailer regardless of size. Getting it wrong triggers an FDA penalty schedule that escalates quickly.

The Federal Age of 21

Since December 2019, it has been illegal for any retailer to sell a tobacco product to anyone under 21.¹ The rule covers cigarettes, cigars, smokeless tobacco, pipe tobacco, hookah tobacco, e-cigarettes, vape pens, e-liquids, and every other product that meets the federal definition. There are no exceptions for active military personnel, and no state can set a lower age floor.

Who You Have to Card

You do not have to card every customer. Under 21 CFR 1140.14, a retailer must verify age using a photo ID with a date of birth for anyone buying a tobacco product who appears to be under 30.² No verification is required for a person who is obviously over 29. In practice, many retailers card everyone, because guessing wrong is a violation.

This is where most compliance failures happen. An employee eyeballs a customer who looks “old enough,” skips the ID check, and the customer turns out to be 19. The regulation puts the burden on you to ask, and the safe harbor disappears the moment the customer could plausibly be under 30.

Which IDs Count

The regulation requires a “photographic identification containing the bearer’s date of birth,” which means any government-issued photo ID showing the holder’s birth date can satisfy the requirement.² The FDA’s guidance to retailers lists these specific examples:

State-issued driver’s license or photo ID card from a Department of Motor Vehicles or equivalent agency
U.S. or foreign government-issued passport
Federally recognized tribal-issued photo ID
Canadian provincial driver’s license or Indian and Northern Affairs Canada card
USCIS Employment Authorization Card (Form I-766)

The FDA’s published examples do not include military identification cards, even though military IDs are government-issued and contain a date of birth.³ Some retailers accept them under the broader regulatory language, but employees should follow their company’s policy and err on the side of accepting only the documents the FDA specifically lists.

Whatever the document type, it must not be expired. An expired license or passport is not valid verification, even if the birth date clearly shows the customer is over 21.

Digital and Mobile IDs

A growing number of states now offer digital driver’s licenses on smartphones, but the FDA has not issued formal guidance accepting mobile IDs for tobacco sales. The regulation was written around physical photo identification, and digital formats raise questions about how a clerk inspects security features or handles the document. Until the FDA explicitly addresses this, retailers who accept only physical IDs are on the safest legal ground.

How to Actually Check the ID

Checking an ID is more than glancing at a birth date. The employee should confirm, in sequence, that the photo matches the person at the counter, that the birth date shows the customer is at least 21 as of today, and that the document has not expired. If any check fails, the sale cannot go through.

Security features matter too. Legitimate state-issued IDs contain holograms, ghost images, microprinting, and specific textures that are difficult to replicate. Employees should handle the card physically and look for peeling lamination, mismatched fonts, or uneven surfaces around the photo area. A card that feels wrong probably is wrong.

Many modern point-of-sale systems require the cashier to scan the ID’s barcode or magnetic stripe before the register unlocks the transaction. The scanner reads the encoded birth date and calculates whether the customer meets the age threshold. That removes the mental math and creates a digital record that the verification happened, which matters if the store is later inspected. Stores without electronic scanning should keep a printed age-verification calendar at the register showing the earliest acceptable birth date for purchases that day.

Self-Service and Vending Machine Restrictions

Cigarettes and smokeless tobacco can be sold only through a direct, face-to-face exchange between the retailer and the customer. Self-service displays where a customer can grab a pack without interacting with an employee are prohibited.⁴ This is why tobacco products sit behind the counter or inside locked cases at most retailers.

Vending machines are banned in most settings. The only exception is a facility where the retailer ensures that no person under 21 is present or permitted to enter at any time, such as an adults-only bar or lounge.⁴ A convenience store, gas station, or restaurant that admits minors cannot legally have a tobacco vending machine.

Online and Remote Sales

Selling tobacco online or by phone triggers a separate layer of federal requirements under the Prevent All Cigarette Trafficking (PACT) Act. Remote sellers cannot simply ship tobacco to whoever places an order. Before accepting an order, the seller must collect the buyer’s full name, birth date, and residential address, then verify that information against a commercially available database composed primarily of government-sourced data.⁵ The seller cannot own or control that database, which prevents companies from rubber-stamping their own verifications.

At delivery, the shipping method must require an adult signature. The person who signs for the package must be at least 21 and must show a valid, government-issued photo ID to the delivery driver at the time of receipt.⁵ Remote sellers must also comply with every applicable state and local law at the delivery destination, including state bans on flavored products and local restrictions on remote sales.⁶

FDA Compliance Inspections

The FDA does not wait for complaints. It runs an active inspection program that sends contracted inspectors into retail locations unannounced to test whether stores are following the rules.⁷ The agency contracts with states, tribes, territories, and private firms to carry out these checks nationwide.

The most common type is the undercover buy inspection. An underage person, working under the supervision of an FDA inspector, enters the store and attempts to purchase a tobacco product. Neither the minor nor the inspector identifies themselves. The purpose is to determine whether the retailer sells the product without checking ID or sells it to someone under 21.⁸ If the sale goes through, the store has a documented violation on its record. Inspectors also check advertising and labeling compliance during separate visits.

Because these inspections are unannounced and can happen at any time, retailers cannot treat age verification as something to take seriously only when they suspect a sting. Every transaction is a potential inspection.

Penalties for Selling to Underage Buyers

The FDA’s penalty structure gives a retailer one chance to correct a mistake, then hits progressively harder with each repeat violation. The current civil money penalty schedule works as follows:

First violation: warning letter (no fine)
Second violation within 12 months: up to $365
Third violation within 24 months: up to $727
Fourth violation within 24 months: up to $2,920
Fifth violation within 36 months: up to $7,300
Sixth violation within 48 months: up to $14,602

The maximum penalty for any single violation of the tobacco provisions of the Federal Food, Drug, and Cosmetic Act is $21,903.⁹ The cumulative math catches retailers off guard. Two bad inspections in a year plus a third within the next year is already a $727 fine, and the window for counting violations stretches as far back as 48 months.

No-Tobacco-Sale Orders

Beyond fines, the FDA can issue a No-Tobacco-Sale Order that prohibits a retail location from selling any tobacco products for a set period. The FDA can pursue this remedy against any retailer with five or more repeated violations within 36 months.⁹ When setting the length, the FDA weighs the severity of the violations, the retailer’s history, and the business’s ability to continue operating. For a store that depends heavily on tobacco revenue, even a short sales ban can be devastating.

State Penalties on Top of Federal

Federal penalties are a floor, not a ceiling. Most states impose their own fines, license suspensions, or revocations for tobacco sales to minors. Some states can suspend or revoke a retailer’s license after a single violation, and repeat offenders may face permanent bans. The specifics vary widely, so retailers need to know the rules in their own state alongside the federal baseline.

Employee Training as a Penalty Mitigator

Federal law does not require retailers to run a formal employee training program for tobacco sales. But having one can directly reduce the financial pain if a violation occurs. The FDA’s guidance states that evidence of a qualifying training program may be considered a mitigating factor during penalty settlement negotiations, potentially lowering civil money penalties.¹⁰

The FDA has not finalized official standards for what counts as an “approved” training program, but its guidance recommends several elements:¹¹

A legal overview so employees understand the federal age requirement, which products are covered, and the penalties for violations.
ID verification techniques, including checking photo IDs for authenticity, calculating age from the birth date, and recognizing signs of tampering.
A written company policy shared with every employee, acknowledged in writing, and kept on file.
Refusal skills for situations where a customer pressures the clerk, lacks valid ID, or sends a friend to buy on their behalf.
A written test to confirm employees understand the material, with records of test scores retained for at least four years.

Stores with structured programs tend to have fewer violations in the first place, which keeps them off the escalating penalty ladder entirely. The cost of setting up a training program is trivial compared to even a single mid-tier fine.

1
Office of the Law Revision Counsel. 21 USC 387f – General Provisions Respecting Control of Tobacco Products – Section: Minimum Age of Sale
2
eCFR. 21 CFR 1140.14 – Additional Responsibilities of Retailers
3
U.S. Food and Drug Administration. Tips for Retailers: Preventing Sales to Persons Under 21 Years of Age
4
eCFR. 21 CFR 1140.16 – Conditions of Manufacture, Sale, and Distribution
5
Office of the Law Revision Counsel. 15 USC 376a – Delivery Sales
6
Bureau of Alcohol, Tobacco, Firearms and Explosives. Prevent All Cigarette Trafficking (PACT) Act
7
U.S. Food and Drug Administration. FDA Commercial Tobacco Retail Compliance Check Inspection Program
8
U.S. Food and Drug Administration. The 5 Ws of Undercover Buy Compliance Check Inspections
9
U.S. Food and Drug Administration. Advisory and Enforcement Actions Against Industry for Selling Tobacco Products to Underage Purchasers
10
U.S. Food and Drug Administration. Tobacco Retailer Training Programs: Guidance for Industry
11
U.S. Food and Drug Administration. Tobacco Retailer Training Programs