No, not all dispensaries scan IDs, but every licensed dispensary in the United States will check one. Whether the clerk runs your card through an electronic reader or just looks at it depends on the state and the shop. A handful of states require an electronic scan; most only require that the dispensary verify your age using a valid government-issued photo ID, and leave the method up to the business. What often matters more to customers is what happens to the data after the scan, and that varies just as much.
When a Scan Is Required and When It Isn’t
“Scanning your ID” covers two different things. Some dispensaries pull data from the barcode or magnetic strip using an electronic reader. Others look at the card carefully by hand. Both methods satisfy the legal age-verification requirement in most states.
A few states have gone further. Illinois requires dispensaries to use an electronic reader or scanning device on every purchaser’s government-issued ID. Nevada mandates digital scanning with specific technical capabilities, including high-resolution barcode reading, multispectral imaging, and the ability to verify international passports. In those states, the method is not the dispensary’s call.
Everywhere else, dispensaries choose whether to scan. Many do, because it’s faster, reduces human error, and produces a compliance record they can show regulators. An electronic scan can catch sophisticated fakes by reading embedded data a visual check would miss. A few states also offer an affirmative defense against underage-sale charges if the dispensary scanned the ID and it appeared legitimate, which is a strong nudge toward scanning even when the law doesn’t require it. Still, in a state that only requires age verification, a careful visual inspection of your driver’s license is legally enough.
Age verification also feeds purchase-limit tracking. Every legalized state caps how much cannabis you can buy in a day, typically around one ounce of flower for recreational customers. State-mandated tracking systems log each sale, and the dispensary needs to identify you to feed accurate data into that system.
Mobile Driver’s Licenses
A growing number of states issue driver’s licenses that live on a smartphone. Acceptance at dispensaries is uneven. Arizona, Colorado, and Montana have begun allowing or piloting digital ID verification at cannabis retail, and where it’s permitted the dispensary’s point-of-sale system has to meet specific technical standards to read the credential securely. If a mobile ID is all you carry, check your state’s policy first. Most locations still expect a physical card as the primary form of identification.
What the Scan Captures
When a reader pulls data off your ID, it typically picks up your name, date of birth, ID number, expiration date, and sometimes your address. Seeing that information at the moment of sale is one thing. Storing it is another, and state rules on retention diverge sharply.
Some states minimize aggressively. Oregon prohibits dispensaries from retaining any information obtained from an ID scan after verifying age. Illinois requires that all personally identifiable information be flushed immediately after eligibility is confirmed. New Jersey allows dispensaries to keep audit logs of scans but strips out everything except the date of birth.
Other states permit more. Colorado allows dispensaries to record information tied to daily purchase maximums. Connecticut permits data retention by electronic intermediaries but bars sale or transfer of that data. Montana caps retention at 180 days and prohibits dispensaries from sharing the information with the state or any third party.
Broad consumer privacy laws layer on top. In California, the Consumer Privacy Act may give you the right to request access to the data a dispensary holds about you, ask for its deletion, and opt out of any sale of that data. Maryland requires dispensaries to post signage explaining that creating a customer profile is optional and that no data can be saved without your express consent.
If retention concerns you, ask the dispensary directly about its policy before your first purchase. Loyalty program sign-ups are a separate consent decision from the ID check; you can decline the program and still complete your purchase anywhere.
How Safe Is the Data
Cannabis customer data has already been targeted. One breach exposed nearly a million records from a medical cannabis service, including dates of birth, physical addresses, medical histories, and mental health evaluations. A separate incident at a large California-based cannabis brand involved customer information leaking through a compromised third-party vendor.
Reputable dispensaries use encryption, access controls, and regular security audits. But the industry has a structural weakness: because cannabis remains illegal at the federal level, many operators have limited access to mainstream banking and enterprise-grade cybersecurity infrastructure. The gap between the sensitivity of the data and the resources typically available to protect it is worth understanding before you hand over an ID.
Why Federal Law Makes This More Than a Privacy Question
Cannabis remains a Schedule I controlled substance under federal law, sitting on the Controlled Substances Act’s most restrictive list alongside heroin and LSD.1Office of the Law Revision Counsel. 21 USC 812 – Schedules of Controlled Substances That creates consequences for dispensary customers even in states where cannabis is fully legal, and it’s the reason a stored purchase record can matter.
Firearms
Federal law prohibits any unlawful user of a controlled substance from possessing a firearm or ammunition.2Office of the Law Revision Counsel. 18 USC 922 – Unlawful Acts Because cannabis is federally illegal regardless of state law, anyone who uses it counts as an “unlawful user” under this statute. ATF Form 4473, which every buyer completes when purchasing a firearm from a licensed dealer, asks directly about controlled substance use. Answering dishonestly is a federal felony. Dispensary purchase records could, at least in theory, serve as evidence contradicting a buyer’s sworn answer on that form.
Immigration and Border Crossing
Non-citizens face the sharpest risk. Federal immigration law makes any person who has been convicted of, or who admits to committing acts that constitute, a controlled substance violation inadmissible to the United States.3Office of the Law Revision Counsel. 8 USC 1182 – Inadmissible Aliens A non-citizen who admits to cannabis use during a border interview, or whose dispensary records reveal purchases, could be denied entry. U.S. Customs and Border Protection has stated that its enforcement of federal marijuana laws remains unchanged regardless of state legalization.4U.S. Customs and Border Protection. Travel Advisory – Personal Use Marijuana – Border-Crossing Policies Remain Unchanged Canadian citizens, who have had legal access to cannabis nationally since 2018, have been turned away at the U.S. border for admitting past use.
Security Clearances and Federal Employment
Federal background investigations for security clearances ask about drug use. Cannabis use, even where state-legal, can result in denial or revocation of a clearance. Dispensary records that confirm purchases create a paper trail that is difficult to explain away during an investigation.
What to Bring
Every dispensary accepts the same core set of government-issued photo identification:
- A driver’s license from any U.S. state or territory, including temporary licenses in most jurisdictions
- A state ID card, the non-driver equivalent issued by your state’s motor vehicle agency
- An unexpired U.S. passport or passport card
- A U.S. military ID (active duty, reserve, or dependent)
- A tribal enrollment card, accepted in some states if it includes a photo and date of birth
If your ID is damaged, cracked, or in an older format that doesn’t scan cleanly, bring a backup. Most dispensaries will attempt manual verification when the scanner can’t read the card, but they’re under no obligation to accept an ID they can’t verify. An expired ID will be refused everywhere.
Medical Patients
Medical cannabis patients typically need both a valid government-issued photo ID and their state-issued medical marijuana card. The dispensary matches the name and photo on each. In some states, patients must also be registered in a state database that the dispensary checks in real time during the sale.
Medical programs sometimes allow patients younger than 21, usually at age 18 with a qualifying condition and physician recommendation. Minors with serious medical conditions can access cannabis in many states, but only through a registered adult caregiver who presents ID and the medical card at the counter. Patient registration fees range from free to roughly $125 depending on the state, separate from any physician consultation cost.
If You Refuse to Show ID
The transaction ends. No licensed dispensary will sell to you without verifying your age. Penalties for underage sales can include fines from $10,000 to $100,000, suspension or permanent revocation of the cannabis license, and in some states felony charges against the employee who made the sale. The ID check is the legal minimum, and it’s not negotiable at any dispensary in any legalized state.