How to Run CBD Ads on Google in 2026 Without Getting Banned

Can you actually run CBD ads on Google in 2026?

Yes, but the eligible lane is narrow. Google permits ads for topical, hemp-derived CBD products with 0.3% or less THC, sold by LegitScript-certified advertisers, geo-targeted to California, Colorado, and Puerto Rico. Everything ingestible stays banned under Google's Recreational Drugs policy.

That single sentence is the whole game. Most brands that get banned never fit inside it in the first place. They try to advertise gummies, target Texas, or write "relieves anxiety" in a headline, and Google's automated review catches them. The path to running CBD Google Ads in 2026 without getting banned is less about clever tactics and more about staying inside lines Google drew in January 2023 and has barely moved since.

This is a spoke in our broader coverage of compliant paid acquisition. For the full strategic picture across every channel, see our complete compliant advertising playbook. If your media plan also includes social, read it alongside our breakdown of Meta's CBD ad policy, which uses a different and arguably stricter framework.

Citation capsule: Google's policy allows promotion of "topical, hemp-derived CBD products with THC content of 0.3% or less" and FDA-approved pharmaceutical CBD, restricted to advertisers who hold LegitScript certification and who target only California, Colorado, and Puerto Rico. Source: Google Ads Recreational Drugs policy.

What CBD products does Google allow versus prohibit?

Google allows non-ingestible, topical, hemp-derived CBD with 0.3% or less delta-9 THC: creams, lotions, sprays, roll-ons, balms, salves, and bath bombs. It prohibits anything swallowed, smoked, vaped, or inhaled, including oils, tinctures, gummies, and capsules, according to Google's policy documentation and LegitScript's Google CBD program page.

The dividing line is the route of administration, not the cannabinoid. A CBD cream and a CBD tincture can come from the same hemp extract and the same Certificate of Analysis (COA), yet only the cream qualifies. Google treats ingestibles as an unresolved Food, Drug, and Cosmetic Act question and keeps them off the platform entirely.

Product type	Route	Google Ads status (2026)
CBD cream, lotion, balm	Topical	Allowed (certified, geo-limited)
CBD roll-on, spray	Topical	Allowed (certified, geo-limited)
CBD bath bomb	Topical	Allowed (certified, geo-limited)
CBD oil, tincture	Ingestible	Prohibited
CBD gummies, capsules	Ingestible	Prohibited
CBD vape, smokable hemp	Inhaled	Prohibited
Delta-8, delta-9, THCA products	Intoxicating	Prohibited
FDA-approved CBD pharmaceutical	Prescription	Allowed (separate certification)

If your hero SKU is a gummy, Google search is not your launch channel. Build the topical line for paid search and route ingestibles through SEO, email, and owned media instead.

Source: Google Ads Recreational Drugs policy and LegitScript Google CBD certification, 2026.

Which states can CBD Google Ads target?

Only three places. Certified topical CBD ads may target California, Colorado, and Puerto Rico, and nowhere else, per Google's policy and confirmed by LegitScript: "Currently, per Google's policy, advertising is available in California, Colorado, and Puerto Rico." This geo-restriction has held since the policy launched and is the single most overlooked compliance trap.

State legality and Google eligibility are not the same thing. CBD topicals are legal to sell in most US states, yet Google only lets you advertise into three jurisdictions. Texas, Florida, and New York are all large CBD markets where the product is legal, and all three are off-limits for Google Ads. Targeting them does not just waste budget. It is a policy violation that can escalate to suspension.

Citation capsule: Even FDA-approved pharmaceutical CBD advertisers "may only target California, Colorado, and Puerto Rico" on Google Ads. The geographic restriction applies regardless of where CBD is legal to sell, which means lawful nationwide commerce does not translate into lawful nationwide advertising. Source: Google Ads Recreational Drugs policy.

How do you lock targeting to eligible regions?

Set location targeting to California, Colorado, and Puerto Rico explicitly, then change the location options from the default "presence or interest" to "presence: people in your targeted locations." The default setting can serve your ads to someone in Ohio who merely searched for Colorado dispensaries, which is exactly the leakage that draws disapprovals. Audit this setting on every campaign, because a single new campaign created from a template can silently reset it.

Is LegitScript certification still required in 2026?

Yes, without exception. Google requires every CBD advertiser to hold LegitScript certification and to complete a separate Google CBD Ads Certification form before a single ad serves. This requirement has been in place since the policy went live on January 20, 2023, per the Canna Law Blog, and remains the gatekeeper in 2026.

LegitScript vets supply chain documentation, manufacturing practices, a third-party COA for each product category, and the officers behind the company, including disclosure of prior regulatory or criminal violations, as Harris Sliwoski's analysis details. The certification is not a rubber stamp. It is the mechanism Google uses to offload product-level compliance risk to a specialist vetting firm.

Budget realistically. Annual LegitScript fees commonly land in the low-thousands range depending on catalog size and complexity, and review can take several weeks to a few months from application to approval, based on practitioner reporting from cannabis compliance specialists. Start the process well before you plan to launch, because nothing in your account works until both certifications clear.

How do you run compliant CBD Google Ads step by step?

The compliant launch sequence is six steps in a fixed order: confirm product eligibility, certify with LegitScript, certify with Google, geo-restrict targeting, scrub ad copy and landing pages of claims, then add age-gating and ongoing monitoring. Skipping or reordering any step is the fastest route to suspension, per Google's enforcement framework.

1. Confirm product eligibility. Inventory only your topical, non-ingestible SKUs with 0.3% or less delta-9 THC. Pull a current COA for each. Set ingestibles aside for other channels.
2. Get LegitScript certified. Apply for product certification on every eligible SKU, then apply for website certification once your advertised catalog is fully certified. Supply COAs and fix any flagged site issues promptly.
3. Complete Google's CBD Ads Certification form. This is a distinct step from LegitScript. Submit it from the certified Google Ads account you intend to advertise from.
4. Geo-restrict every campaign. Target California, Colorado, and Puerto Rico only. Switch location options to "presence" rather than "presence or interest."
5. Scrub copy and landing pages. Remove every health, therapeutic, disease, or efficacy claim from ads, extensions, and the destination URL. Keep messaging cosmetic and lifestyle.
6. Age-gate, disclaim, and monitor. Add 21+ age-gating, COA access, and clear disclaimers on landing pages, then monitor disapprovals weekly and renew certifications annually.

Source: process synthesized from Google Ads Recreational Drugs policy and LegitScript Google CBD requirements, 2026.

What claims and landing-page mistakes trigger a ban?

Health and disease claims are the leading avoidable cause of CBD ad disapproval, alongside cloaked or non-compliant landing pages. Google and the FTC both treat unsubstantiated efficacy language as a serious violation, and Google designed its CBD policy specifically to avoid facilitating Food, Drug, and Cosmetic Act breaches.

Words like "treats," "cures," "relieves pain," "reduces anxiety," "anti-inflammatory," and "clinically proven" do not belong anywhere in a CBD ad or its destination page. Compliance specialists confirm that no efficacy or disease-treatment language is permitted in ad copy, per cannabis advertising guidance for 2026. Keep your messaging cosmetic and lifestyle: "soothing body balm," "post-workout roll-on," "moisturizing hemp lotion."

Citation capsule: Google built its CBD restrictions to avoid assisting "violations of the Food, Drug, and Cosmetic Act," which is why supplements, food additives, and inhalants are excluded and why therapeutic claims are policed aggressively. Cosmetic and lifestyle framing is not a style choice. It is the compliance requirement. Source: Harris Sliwoski Canna Law Blog.

What does a compliant CBD landing page include?

A compliant destination page matches the ad's cosmetic framing, posts the product COA or makes it one click away, carries 21+ age-gating, and avoids any medical claim or condition reference. It must not cloak, meaning the page Google's reviewers see has to be the page the customer sees. Disclaimers should state that the product is not evaluated by the FDA and is not intended to diagnose, treat, cure, or prevent any disease. Treat the landing page as part of the ad, because Google reviews both as a single unit.

How does Google enforce CBD policy, and what is the ban risk?

Google enforces in two tiers: individual ad disapprovals first, then account-level suspension for repeated or egregious violations, per Google's policy enforcement framework. A suspended CBD account is hard to recover, and Google can also suspend related accounts, which makes a single careless campaign an existential risk for a brand's entire paid-search presence.

The practical risk profile is predictable. Advertising ingestibles, claiming health benefits, targeting ineligible states, or running without certification are the four violations that most reliably end accounts. None of them are subtle, and all of them are avoidable with the sequence above.

Source: directional ranking based on Google Ads enforcement policy and Lootloop client casework, 2026.

How does Google compare to Meta and TikTok for CBD in 2026?

Google offers the clearest certified pathway of the major platforms, while Meta and TikTok remain murkier. Meta classifies CBD adjacent to "drug and drug paraphernalia," lacks a formal certification program, and only permits ads in a handful of explicitly authorized states through an opaque approval process, according to 2026 platform analysis.

That makes Google the most predictable paid channel for compliant topical CBD, precisely because its rules are written down and gated by LegitScript. The tradeoff is reach: three eligible geographies and topicals only. For the full cross-platform comparison, including how Meta's state-by-state authorization differs from Google's flat three-state rule, see our dedicated analysis of Meta's CBD ad policy, and map your overall channel mix using the complete compliant advertising playbook.

Citation capsule: Across the major platforms in 2026, Google provides the only transparent, certification-based CBD advertising pathway. Meta and TikTok treat CBD as drug-adjacent, offer no equivalent certification, and authorize advertising in limited, often unpublished regions. Predictability, not reach, is Google's advantage. Source: Cannabis & hemp advertising analysis, 2026.

The bottom line on CBD Google Ads in 2026

Running CBD ads on Google in 2026 is genuinely possible, but the eligible lane is narrow and unforgiving. The brands that survive on the platform share the same profile: a topical, non-ingestible product line at 0.3% or less delta-9 THC, full LegitScript and Google certification, targeting locked to California, Colorado, and Puerto Rico, and ad copy stripped of every therapeutic claim. The brands that get banned almost always violated one of those four pillars before they ever wrote a headline.

The strategic implication is that Google search should be one disciplined slice of a regulated-industry media plan, not the whole plan. Use it for the topical catalog where the rules are clear and the certification path is real. Push your ingestibles, your intoxicating cannabinoids, and your broader national reach through channels built for them: organic search, email, owned content, and the platform-specific paths covered in our compliant advertising playbook. Compliance here is not a constraint on growth. It is the only version of growth Google will let you keep.