The short answer
Federal law defines hemp as cannabis with no more than 0.3% delta-9 THC by dry weight. THCA is not delta-9 THC, and it isn't named on the federal schedules. That gap is why so many online stores sell THCA flower, vapes, and concentrates and ship them nationwide. It is also why the real answer depends on your state, not the seller's warehouse.
How Is THCA Made in Hemp? Biosynthesis, Enzymes, and What Happens Next
So the honest version: buying THCA online is a gray area that varies by zip code. If you live in a state that never closed the loophole, ordering is generally treated like buying any other hemp product. If you live in a state that banned intoxicating hemp cannabinoids or switched to a total-THC definition, that same order can be illegal to possess, not just to sell.
thca hemp legal status farm bill 2018
Why convenience rewrote the rules
A few years ago, buying THCA meant finding a local shop or wiring money to a website you weren't sure about. Now it's a cart, a card, and two-day shipping. The friction is gone.
That shift moved the risk. The seller collects payment and drops a box in the mail. You're the one with a package addressed to your name and a state statute you may never have read. I look at it this way: convenience removed the research step from the transaction, so somebody has to put it back, and that somebody is the buyer.
THCA Legality Guide: Understanding the Laws in Your State
Five checks before you pay
1. Find out how your state defines THC
This is the whole ballgame. The federal 0.3% ceiling applies to delta-9 THC. Many states rewrote their hemp statutes to use total THC, calculated as delta-9 plus THCA multiplied by 0.877. Under a total-THC rule, flower testing at 22% THCA and near-zero delta-9 fails, because the math lands far above 0.3%. If your state uses total THC, assume THCA flower is effectively banned and don't order it.
2. Check for a named ban, not just a math rule
Several states skipped the arithmetic and simply listed intoxicating hemp cannabinoids, THCA included, as prohibited for retail sale. Others capped sales by product type or channel. Your state department of agriculture usually publishes a hemp page with the current position. Read the statute if you can. A news article from last year may already be obsolete.
3. Match the lab report to the batch
A COA is only useful if the batch number on the report matches the batch number on the package you receive. Look for an ISO 17025 lab, a test date, and a full cannabinoid panel that separates delta-9 THC from THCA. A pretty PDF with no batch ID is decoration.
4. Look for a restricted-state shipping list
Reputable sellers publish one. If a store claims it ships THCA to all fifty states with no caveats, that tells you something about how carefully they read the law, and how carefully they'll treat your order.
5. Confirm age gating and payment terms
21+ verification is standard for intoxicating hemp products. Watch for no-refund policies on a product that can be seized in transit, and be aware that many processors treat THCA as high-risk, which is why some checkouts quietly fail.
Pitfalls I see people hit
- Assuming "hemp-derived" means legal where they live. It doesn't. Hemp-derived just means the source plant, not the destination state.
- Treating THCA as non-intoxicating. Heat converts it to delta-9 THC, which is exactly why so many legislatures moved against it.
- Ignoring interstate movement. A product that's fine at the seller's address can be contraband at yours, and shipping rules add another layer.
- Ordering before a trip or a move, then having the package arrive somewhere it isn't welcome.
- Trusting a potency claim with no third-party verification. Vape and edible labels are the worst offenders here.
Bottom line
Buying THCA online is legal in a shrinking number of states and illegal in a growing number. The federal picture is unresolved and Congress has debated closing the THC loophole in farm bill talks. Before you check out, spend five minutes on your own state's hemp statute. If it says total THC, or names THCA, that's your answer.