Tobacco 21 ID checks at the register: a carding guide for c-stores

Every week someone walks up to a convenience store counter with a pack of cigarettes or a vape and a face that could be 19 or 29. What the cashier does in the next five seconds decides whether your store keeps its tobacco licence clean. This guide covers the rule, the routine and the record.

What does Tobacco 21 require?

Since December 20, 2019, federal law sets 21 as the minimum age to buy any tobacco or nicotine product in the United States. That includes cigarettes, cigars, cigarillos, smokeless tobacco, hookah tobacco, pipe tobacco, and electronic cigarettes and e-liquids. It applies in every state, regardless of what the state law said before.

The federal rule is the floor. States and cities add their own: retail tobacco licences, flavour restrictions on vapes and menthol in some places, restrictions on where products can be displayed, and their own inspection programmes. Your licence conditions are the rules you are inspected against.

FDA runs compliance checks in which a person under 21, working with inspectors, tries to buy a tobacco product. If the store sells, it is a violation. You do not get to explain afterwards that the buyer looked older.

Who should a cashier card?

FDA’s guidance to retailers is to check photo ID for anyone who looks under 30. That gap between 21 and 30 exists because people are bad at guessing age, especially at the end of a long shift.

Many stores simplify it: card every tobacco and vape customer, every time. It is easier to train, nobody feels singled out, and regulars stop being offended after the first week. A sign at the counter (“We ID every tobacco customer. It is the law and our policy.”) does most of the talking.

How do you check an ID in five seconds?

A good check is quick if it is the same every time:

1. Ask for the ID before you ring the item. Not after the customer has paid.
2. Hold the ID. Do not read it in the customer’s hand.
3. Read the date of birth, not the age you think. Or let the register do the arithmetic.
4. Check the expiry date. An expired ID is not valid.
5. Compare the photo with the face. Hairline, ears, chin. Look up, look down.
6. Feel the card. Peeling edges, a raised photo, or lamination over a paper card are warning signs.
7. Decide. If anything feels wrong, refuse. A refusal is never a mistake.

Watch for the classic situations: an adult buying for a younger person standing nearby, a group passing one ID around, and “I left it in the car”.

What should the register do?

A POS cannot replace the cashier’s judgement, but it can stop the most common failure: forgetting. A good age-verification setup does four things:

• Flags restricted items by category, so every new SKU in “cigarettes” or “vapes” inherits the rule without anyone remembering.
• Stops the sale with a prompt that shows the minimum age and today’s cut-off date of birth, so nobody does arithmetic at the counter.
• Reads the licence barcode with a 2D scanner, filling the date of birth and flagging expired cards, or takes a typed date when the card will not scan.
• Logs the result of every check: passed, refused, or overridden by a manager, with the time, register and cashier.

On GetConvenienceStorePOS this is the age verification feature, set up in a few minutes using the age-restricted categories guide.

Why log every check, and what should you not keep?

The log is your evidence. When an inspector, a manufacturer representative or your insurer asks how you prevent underage sales, “we train our staff” is a claim. A report showing every check, every refusal and every override over the last three months is proof.

The log also helps you manage people. A cashier who types dates far more often than scanning, or a manager who overrides more than others, is a conversation to have before an inspector has it for you.

What you should not keep is the customer’s personal information. You do not need their name, address or licence number to prove you checked. Storing it creates a privacy risk with no benefit. Keep the result, not the person.

How do you train new staff on carding?

Put this on one page and go through it on a new cashier’s first shift:

Rule	Why
Ask every tobacco and vape customer for ID	Simple, fair, no guessing
Scan the back of the ID; type the DOB if it will not scan	The register does the maths
Check expiry and compare the photo	A scan does not catch a borrowed ID
If the register says no, the answer is no	Overrides are for managers, with a reason
Refuse sales to adults buying for minors	Still an underage sale
A refusal is good work	It is logged as compliance, not as a lost sale

Give each cashier their own PIN on day one, so their checks are theirs. See adding staff and PINs.

What about alcohol and lottery?

The same prompt works for beer, wine and spirits (21 everywhere in the US, with state rules on sale hours) and for lottery at your state lottery’s minimum age, which is 18 in most states and higher in a few. Set each category’s age once and the register applies it.

Sources and further reading

• FDA, Tobacco 21 and retailer guidance (fda.gov), checked October 2026.
• Federal Food, Drug, and Cosmetic Act as amended on December 20, 2019 (Tobacco 21).
• Your state’s tobacco retail licence conditions and local ordinances.

This article is general information for store owners, not legal advice. Your state and local licences govern what you must do.