Ask ten CBD founders whether they can advertise on Facebook and Instagram and you will get ten different answers, most of them wrong in one direction or the other. The truth is narrower and more useful: most of the category is banned, a specific slice is allowed, and the brands that qualify for that slice are advertising to audiences their competitors legally cannot reach.
What is flatly banned
Meta prohibits ads for THC products, full stop. It also prohibits vape ads of any kind, including hemp and nicotine vapes. If your product is psychoactive or inhalable, paid social is not your channel, and any agency promising otherwise is gambling with your ad account. See Meta's advertising policies for the current language.
What is actually allowed
Meta permits limited CBD and hemp advertising under strict conditions. In practice, the door opens for:
- Non-ingestible CBD products (topicals, for example) with an active LegitScript certification and prior written permission from Meta
- U.S.-only targeting, age-gated to adults, depending on product and state
- No health or medical claims anywhere in the creative, the copy, or the landing page
- Non-ingestible hemp (fiber, seeds) under lighter rules that no longer require written approval in the U.S., Canada, and Mexico
Ingestibles sit in the heaviest restriction tier. The pattern across all of it: the further your product is from "you swallow or inhale it," the more room you have.
LegitScript is the toll booth
LegitScript is the third-party certification Meta leans on before approving most CBD advertising. Getting certified means an audit of your products, claims, labels, and testing. It costs money and takes weeks, which is exactly why it works as a moat: most of your competitors will not bother, and their ad accounts will keep getting flagged while a certified brand runs compliant awareness and retargeting campaigns in the open.
And when your product cannot run at all
If you sell THC, inhalables, or ingestibles that will not clear review, the answer is not creative workarounds. Accounts get banned, and banned accounts take pixels, audiences, and years of data with them. The answer is putting that budget where the demand already lives: organic search, where Google's ad ban means nobody can outspend you either.
We run compliant Meta campaigns for regulated brands, including the LegitScript and written-permission process, and we will tell you honestly if your product cannot run. Book a free audit and we will map which of your products can be advertised and which should lean on search.
