How Online Vape Sales Are Regulated
How Online Vape
Sales Are Regulated
in the UK
The four-layer framework that sits behind every UK online vape order. Age verification at checkout, MHRA notification on every SKU, TPD compliance on every product plus delivery verification at the door.
UK online vape sales sit inside a four-layer regulatory framework. Every product must be MHRA notified and TPD compliant. Every transaction must pass a robust age verification check. Every delivery must reach an adult recipient. Every piece of marketing must follow the Advertising Standards Authority (ASA) Code. Enforcement is shared between Trading Standards, the MHRA plus the ASA. Penalties run from £2,500 fines up to unlimited court-imposed fines for serious breaches.
Three hard numbers every
UK online vape site must meet
Age, tank size plus nicotine strength. These are the three numerical tests that Trading Standards check against first when reviewing an online UK vape seller.
Minimum buyer age
The buyer must be 18 or older. The site must verify this through a method stronger than a self-declared date of birth.
Max pod or tank size
Every product listed for sale must meet the UK TPD 2ml ceiling for pre-filled pods plus refillable tanks.
Max nicotine strength
No e-liquid above this strength may be listed or shipped. Any site advertising 50mg/ml products for UK delivery is non-compliant.
Every UK online vape order passes through four regulatory layers
Buying a vape online in the UK looks the same as buying anything else. A product page, a cart, a checkout, a delivery. Behind the scenes the journey is tighter than almost any other consumer category. Every order passes through four separate regulatory layers before it reaches your door. Here is what each one does.
Layer 1: product compliance
Before a product is even allowed on a UK retailer’s website it must have already been notified to the MHRA by the producer or importer. The notification process takes six months from submission to approval. It covers ingredient disclosure, emissions testing plus a full product specification sheet. Any product that is not on the MHRA notified product database cannot legally be listed for UK sale online.
The product itself must also meet the physical limits set by the Tobacco and Related Products Regulations 2016:
- 2ml maximum tank or pod capacity for every device or disposable.
- 20mg/ml maximum nicotine strength on every bottle of e-liquid.
- 10ml maximum bottle size for any pre-mixed e-liquid containing nicotine above 0mg.
- Child-resistant plus tamper-evident packaging on every unit.
- Health warning on at least 30% of both the front plus back of the retail pack.
Layer 2: age verification at checkout
A UK online vape site cannot rely on a tickbox alone. The Nicotine Inhaling Products (Age of Sale and Proxy Purchasing) Regulations 2015 require the retailer to take reasonable steps to verify the buyer is 18 or older. In practice that means one or more of:
- Yoti or AgeChecked digital ID verification which cross-checks against a photo ID in real time.
- Credit reference bureau checks via Experian or Equifax matching name, address plus date of birth.
- Manual photo ID review for high-risk or flagged orders. The retailer receives a photo plus compares it against the buyer’s declared details.
Dispergo Vaping runs age verification on every order before dispatch. Orders that fail are placed on hold and a request for photo ID is sent to the buyer.
Layer 3: delivery
Royal Mail, DPD and Evri all accept vape consignments for UK delivery. The retailer remains responsible for ensuring the buyer was verified as an adult before dispatch. Several additional delivery-side checks are common:
- Royal Mail Age Verified requires the recipient to show photo ID at the door.
- DPD Age Check similar method using the DPD driver app to log a date of birth on delivery.
- Signature on delivery at the adult’s name as a minimum friction alternative.
Layer 4: marketing plus advertising
Marketing UK vape products online is one of the most tightly policed areas of the whole framework. The Committee of Advertising Practice (CAP) Code plus the Broadcast Committee of Advertising Practice (BCAP) Code are both enforced by the Advertising Standards Authority. In short:
- No paid advertising of nicotine vapes on open social media platforms.
- No endorsement by under 25s or by anyone who appears to be under 25.
- No health benefit claims about vaping beyond the smoking cessation context.
- No youth appeal language, imagery or packaging design.
- Age-gated email marketing only to subscribers verified as 18 or older.
Four visible signals on the
checkout page of a good UK site
Age verification badge at checkout
A Yoti or AgeChecked logo with a clear message that the order will be verified before dispatch. No verification means no dispatch.
Health warning on every product page
The standard UK nicotine warning covering at least 30% of the product image or a clear textual equivalent alongside it.
Business address plus company number
A real UK business address on the contact page. Companies House number typically in the site footer. No PO Box only trading.
Clear delivery verification policy
A shipping page that sets out how age is verified at the door plus what happens if the recipient is not an adult.
Compliant UK online vape site vs
non-compliant seller
Every compliant UK site shows the same visible signals. Every non-compliant site skips at least one of them. Here is the checklist.
Signals of a legal retailer
- ✓Age verification at checkout through Yoti, AgeChecked or a credit bureau.
- ✓All listings 2ml tank max and 20mg/ml max nicotine strength.
- ✓MHRA notification numbers referenced on product pages or confirmation emails.
- ✓UK business address plus company number in the footer.
- ✓Health warnings visible on every product image plus listing.
- ✓No disposable vapes listed after 1 June 2025.
Warning signs to avoid
- ✗Tickbox age gate only with no second verification step.
- ✗Big puff or mega puff products listed alongside compliant 2ml items.
- ✗No MHRA references on any listing or confirmation.
- ✗PO Box address only or no contact address at all.
- ✗Social media DM ordering with bank transfer payment.
- ✗Disposable vapes still being shipped after the 1 June 2025 ban.
Online vape regulation connects directly to every other UK vape compliance topic. For the complete set of FAQs covering MHRA rules, age verification, labelling plus tax visit our full vaping FAQs hub. Every major question an adult UK vaper or online buyer asks sits in there.
Back to the Vaping FAQs hub
This article sits inside our complete FAQs knowledge base. Head back to the hub for the full index covering MHRA notification, TPD, age of sale, the 2026 vape tax plus retailer compliance.
More on UK online vape compliance
Online regulation sits on top of several other UK vape compliance building blocks. For the full breakdown of how UK age checks work whether on a website or in a shop our guide on age verification laws for vaping in the UK walks through every accepted method. Retailers working through their full compliance programme can jump to our checklist of what retailers must do to stay vape law compliant. Labelling sits behind most listing-page queries plus our rundown on what labelling and packaging rules apply to vapes answers the most common questions.