Guide
What the Federal Rule Actually Says About Vending Machines
Almost every summary of this rule states it backwards. Vending is not restricted to 21+ venues. It is banned, with one exception that happens to be 21+ venues.
Under 21 CFR 1140.16(c)(1) a retailer may sell cigarettes and smokeless tobacco only in a direct, face-to-face exchange, and the regulation names vending machines and self-service displays as examples of methods that are not permitted. Paragraph (c)(2)(ii) then permits vending machines and self-service displays “located in facilities where the retailer ensures that no person younger than 21 years of age is present, or permitted to enter, at any time.” Everything about hosting a machine rests on that sentence.
The default is prohibition
The order of the regulation matters, because it decides who has to prove what. Paragraph (c)(1):
Except as otherwise provided under this section, a retailer may sell cigarettes and smokeless tobacco only in a direct, face-to-face exchange between the retailer and the consumer. Examples of methods of sale that are not permitted include vending machines and self-service displays.
A vending machine is not a permitted method of sale that comes with conditions attached. It is a prohibited method of sale with one exception, and a venue hosting a machine is relying on that exception. If the exception does not apply, there is no fallback position.
The exception, in full
Vending machines (including vending machines that sell packaged, single cigarettes) and self-service displays that are located in facilities where the retailer ensures that no person younger than 21 years of age is present, or permitted to enter, at any time.
Four things in that sentence do real work:
| facilities | The unit of measurement is the facility, not the machine and not the corner it stands in. A room inside a larger building that admits under-21s is a hard question, not an easy one. |
|---|---|
| the retailer ensures | The duty is active and it sits with the retailer — the licensed seller — not with whoever owns the building. |
| present, or permitted to enter | Two separate tests. Nobody being present today does not help if they are permitted to enter. |
| at any time | Not during trading hours, not after 9pm. At any time. |
Why “we card at the door” is not the test
Carding is how a venue satisfies the requirement; it is not a substitute for it. The regulation asks whether anyone under 21 is permitted to enter at any time — so an all-ages lunch service, a private booking, a family event, or an under-21 employee on shift all bear on the answer even though none of them involves a sale. This is the single most common reason a venue that looks like a fit is not one. The eligibility test →
What the rule covers
Part 1140 sets out restrictions on cigarettes, smokeless tobacco and covered tobacco products (§ 1140.1(a)), where a covered tobacco product is one deemed subject to the Act under § 1100.2. The face-to-face provision in (c)(1) names cigarettes and smokeless tobacco specifically. Which products a particular machine may lawfully vend therefore depends on the product mix and on how the deeming rule applies to it, and that is a question for counsel rather than for a vending operator's website.
State law sits on top, not underneath
The federal rule is a floor. New Mexico adds that tobacco products may be sold by vending machine only in age-controlled locations where minors are not permitted (§ 61-37-15(B)), plus licensing, signage and verification duties. Arizona limits machines to bars and closed employee lounges. A venue has to clear the federal exception and its own state's rule. Laws by state →
Last reviewed . A person rechecks the sources before this date changes.
Common questions
Are vending machines banned outright?
As a method of sale, yes — subject to the exception in 21 CFR 1140.16(c)(2)(ii) for facilities where the retailer ensures nobody under 21 is present or permitted to enter at any time.
Does an ID scanner satisfy the federal rule?
No. The exception is about the facility and who may enter it, not about verification at the point of sale. Verification is a separate duty.
Who has to ensure nobody under 21 can enter?
The regulation puts it on the retailer. Which party that is depends on the arrangement, and should be written into the venue agreement.
See whether your venue qualifies
The assessment applies everything on this page to your actual address.