How Cannabis Companies Should Underwrite Customers Like Bank...
Customer Underwriting Risk Scorecard
Bank-style checks for cannabis B2B customers. Answer a few questions, then generate a risk tier (A–D) and suggested terms.
Results
Recommended Terms & Controls
Category Breakdown
Printable Underwriting Memo
Use this as a one-page internal note. Click "Print" to save as PDF from your browser's print dialog.
Extending credit in cannabis can feel like driving without headlights: the industry is cash-heavy, regulatory expectations are high, and many operators are still “underbanked.” That’s exactly why How Cannabis Companies Should Underwrite Customers (Like a Bank Would) is becoming a core operational skill—not just a finance function. If you sell wholesale on terms, offer equipment financing, float invoices, or provide any “buy now, pay later” arrangement, you’re taking credit risk. Banks already have mature playbooks for managing that risk in cannabis, and you can borrow those playbooks to protect cash flow, reduce bad debt, and build stronger long-term accounts.
Financial institutions that serve cannabis-related businesses (CRBs) do so under a heavy compliance and monitoring burden, including stringent “know your customer” expectations and ongoing oversight tied to federal guidance like FinCEN’s 2014 framework and the priorities reflected in the Cole Memorandum-era approach. The same discipline—clear policies, documented underwriting, and continuous monitoring—can help cannabis operators make smarter credit decisions, even if you’re not a bank.
Why bank-style underwriting matters in cannabis (and why it’s different)
Cannabis businesses often operate with limited access to traditional financial services, which pushes more activity into cash and creates additional operational risk. Abrigo notes that CRBs frequently struggle to secure loans—or even maintain a bank account—leaving them to manage cash-intensive operations outside traditional financial systems. That cash intensity increases security concerns and makes documentation and verification even more important when you’re deciding who gets credit and on what terms.
Industry experts also describe cannabis as underbanked rather than fully unbanked. Flowhub quotes Dan Roda, Chief Credit Officer at Safe Harbor Financial, emphasizing that the U.S. Treasury issued guidance in 2014 on serving the cannabis industry, but the compliance burden can be “expensive or otherwise impractical” for many banks. For a cannabis operator, the takeaway is simple: expect counterparties to have uneven banking access and uneven documentation—and build an underwriting process that accounts for that reality.
Finally, there’s a practical benchmarking point: as of September 2023, 812 banks and credit unions service the marijuana industry, according to FinCEN data cited by Enjoy Würk. That number signals two things at once: (1) banking is possible, and (2) the institutions that do it must be far more cautious—so adopting bank-like underwriting standards will align you with what the most risk-aware players already do.
Build a “KYC file” for every customer before you extend terms
In the California State Treasurer’s report on banking access strategies, the “foremost” requirement for serving cannabis businesses is to know your customer: confirming the business is complying with state laws and is not engaging in activity prohibited under federal enforcement priorities, with monitoring and reporting expectations under FinCEN guidance. Your company may not have to file bank-style reports, but you can still adopt the same concept: create a standardized customer due diligence file before you ship product on credit.
Customer due diligence checklist (what to collect up front)
- Entity and ownership documents: operating agreement/bylaws and who is authorized to sign (Flowhub recommends compiling these to establish ownership and bank signatories).
- Licensing documentation: copies of state/local cannabis licenses, plus a process to confirm they are active and match the legal entity (Abrigo specifically highlights requiring additional licensing documentation to verify compliance with state laws).
- Certificate of good standing and basic corporate registrations (Flowhub notes this is commonly requested by banks).
- Source of funds / business funds documentation: a clear explanation of how the customer’s business is funded (Flowhub notes documenting sources of business funds is part of account application readiness).
- Banking and payments profile: where they bank (if they do), how they deposit cash, and how they pay vendors—because CRBs often spend outsized effort converting cash into usable payment methods (as quoted by Green Check Verified cofounder Paul Dunford via Flowhub).
Verify licensing and compliance like a lender would
Underwriting in cannabis is not just “can they pay?” It’s also “can they operate legally long enough to pay?” The Abrigo best-practices guidance calls out the need for internal policies that define underwriting criteria, risk thresholds, and how you will handle CRB-specific challenges—like requiring licensing documentation to verify compliance with state laws. Make this verification repeatable:
- Match the license holder name to the legal entity on contracts and invoices.
- Confirm license status on a defined cadence (monthly/quarterly) and document the check.
- Require disclosure of any license changes, suspensions, or material regulatory actions as a contractual obligation.
Don’t ignore “basic” details banks care about
Flowhub also highlights a surprisingly practical point from Dan Roda: be thoughtful in naming your entity—don’t misrepresent your business, but avoid unnecessary attention in your legal entity name, and consider a DBA with counsel if needed. For underwriting, this matters because inconsistencies across legal names, DBAs, licenses, and invoices can become operational red flags and slow collections, disputes, and enforcement later.
Underwrite the way banks do: relationship, character, and collateral
Abrigo summarizes core lending fundamentals as relationship, character, and collateral. Cannabis companies can apply the same framework to trade credit decisions (net terms), equipment leases, or any customer financing program.
1) Relationship: understand the operating account reality
Abrigo notes that financial institutions should have operational accounts when considering lending to CRBs to truly understand the relationship. You may not hold deposits, but you can still recreate the insight:
- Ask for a payment workflow map: how cash becomes payroll, taxes, supplier payments, and rent.
- Look for friction points that could delay payment (e.g., cash pickup timing, deposit limits, processor holds).
- Start with smaller limits and expand based on observed payment behavior (a “relationship-based” approach).
2) Character: management ability and operating discipline
NCUA guidance on hemp-related businesses states that lending should align with safe and sound commercial practices, including underwriting standards that consider management ability and experience, the financial condition of the borrower, and the ability to meet obligations and service the debt. Translate that into questions your credit team can consistently answer:
- Who is running day-to-day finance (and how long have they been doing it)?
- Is there a history of timely tax/fee payments and regulatory compliance (where documented)?
- Do they have the internal controls to manage a cash-intensive business without constant surprises?
3) Collateral: define what you can actually enforce
Abrigo recommends clear internal policies, including collateral requirements and risk thresholds. For cannabis operators extending terms, collateral can be tricky—so your policy needs to be explicit. Depending on your business model, collateral and credit support may include:
- Personal guarantee (where legally appropriate and enforceable).
- UCC/security interest in eligible assets (consult counsel; enforceability and priority matter).
- Cash-in-advance or partial deposits for higher-risk accounts.
- Tighter terms (shorter net days) instead of larger limits if collateral is weak.
Set clear credit policy: limits, terms, pricing, and escalation
The fastest way to create avoidable losses is inconsistent decision-making. Abrigo advises defining loan criteria, risk thresholds, and how you’ll address CRB-specific challenges. Build a written credit policy that your sales and finance teams can follow without guesswork.
Define a risk-tiered decision model
Instead of “approve/deny,” use risk tiers that map to specific controls. Example controls aligned with the realities described in the research (cash intensity, compliance burden, underbanking):
- Tier 1 (lowest risk): verified licensing, clean documentation, stable payment method; offer standard net terms and higher limits.
- Tier 2: licensing verified but banking access is sporadic; offer smaller limits, shorter terms, and require additional documentation.
- Tier 3 (highest risk): inconsistent entity/licensing info or unclear funding sources; require prepay, deposits, or secured terms.
Use cash-flow ability to pay as the anchor
NCUA’s guidance emphasizes the borrower’s ability to meet obligations. Require simple, repeatable financial inputs (without inventing complex ratios):
- Recent financial statements (P&L and balance sheet) and a basic cash-flow explanation.
- A/R and A/P aging schedules (to understand who already gets paid late).
- Proof of tax/fee payment processes where available, since the State Treasurer report highlights the importance of safer, more efficient tax and fee collection in this cash-heavy environment.
Write down escalation triggers before they happen
Because the compliance and risk environment is dynamic, your policy should specify what changes a customer’s terms. Examples:
- License status change or lapse (immediate hold until re-verified).
- Material ownership/management change (refresh due diligence file).
- Repeated payment delays tied to cash handling constraints (reduce limit; move to shorter terms).
Monitor accounts like a bank would: ongoing diligence and technology
Serving cannabis customers is not “set it and forget it.” The State Treasurer report explains that financial institutions must follow rigorous monitoring and reporting requirements under FinCEN guidance, and that these requirements are onerous without the right information and tools. Abrigo similarly emphasizes investing in the right AML/CFT software for transaction monitoring, robust internal controls, staff training, and refined customer due diligence procedures.
Your company may not be obligated to run bank-grade AML programs, but you can still adopt the underlying discipline: continuous monitoring that catches problems early and documents what you did about them.
What to monitor (practical signals tied to the research)
- License validity and compliance documentation updates (Abrigo’s emphasis on licensing verification).
- Payment behavior: sudden changes in how or when cash is converted into vendor payments (Flowhub notes CRBs spend significant time and effort transforming cash to pay bills).
- Operational risk indicators tied to cash: Enjoy Würk highlights that cash reliance increases theft risk and complicates sustainability, pushing banks to be “far more critical and cautious.” If your customer’s cash handling becomes unstable, your collection risk rises.
Use technology and partners to reduce human error
Abrigo notes automated systems for compliance, transaction monitoring, and customer due diligence can save time and reduce human error, and suggests partnering with compliance advisors or specialists familiar with cannabis. Even for non-banks, the message is clear: don’t run underwriting on spreadsheets alone if you can avoid it. At minimum:
- Centralize documents in a system of record (licenses, entity docs, contracts).
- Standardize a credit memo template so each approval is documented the same way.
- Train sales teams on what “complete” customer documentation looks like, so deals don’t bypass controls (Abrigo highlights enhanced staff training as part of robust internal controls).
“The industry is not unbanked, but it is underbanked.” —Dan Roda, Chief Credit Officer at Safe Harbor Financial (via Flowhub)
When you design credit terms around underbanking realities—cash friction, extra paperwork, longer processing timeframes (noted by Enjoy Würk), and uneven access to institutions—you reduce surprises for both sides. That’s the core idea behind How Cannabis Companies Should Underwrite Customers (Like a Bank Would): build a process that assumes complexity, documents decisions, and adapts as conditions change.
Frequently Asked Questions
Do cannabis companies really need bank-style underwriting if we’re not a financial institution?
If you extend terms or finance invoices, you’re functionally taking on credit risk. The research shows cannabis banking involves rigorous monitoring and “know your customer” expectations (California State Treasurer report), and Abrigo emphasizes clear policies, risk thresholds, and stronger due diligence for CRBs. Using similar discipline helps you avoid avoidable losses and makes your receivables more predictable.
What’s the minimum documentation we should collect before offering net terms?
At minimum, mirror what banks commonly request for CRBs: entity/ownership documents and authorized signers, a certificate of good standing, documentation of sources of business funds (Flowhub), and licensing documentation verified against state/local records (Abrigo’s recommended practice).
How do we evaluate “ability to pay” in a cash-intensive cannabis business?
NCUA guidance for hemp lending highlights assessing financial condition and the ability to meet obligations. Practically, that means reviewing basic financial statements, A/R and A/P aging, and understanding how the customer converts cash into vendor payments—something Flowhub notes is a major time and effort drain for many CRBs.
What ongoing monitoring should we do after we approve a customer?
Borrow from the monitoring mindset described in FinCEN-related expectations summarized by the State Treasurer report and the internal controls Abrigo recommends. Re-verify license status on a set schedule, track payment behavior for sudden changes, and document any material compliance or ownership updates before increasing limits.
How often should we revisit our underwriting policy?
Abrigo notes ongoing regulatory uncertainty requires institutions to stay agile and continuously update policies. Even as a cannabis operator, you should review underwriting rules regularly (e.g., when regulations shift, when your customer base changes, or when loss rates rise) and retrain staff so the process stays consistent.
Bottom line: How Cannabis Companies Should Underwrite Customers (Like a Bank Would) is less about acting like a bank and more about adopting bank-grade discipline—documented KYC, clear credit policy, realistic cash-flow assessment, and ongoing monitoring aligned with the real-world constraints the research highlights.
