Buying Cannabis in California: How to Spot a Licensed Shop

A shop or delivery service can look professional and still have no state license. The Department of Cannabis Control (DCC) warns that unlicensed stores may sell untested products that can contain mold, harmful chemicals, pesticides or mycotoxins.

This guide shows how to check a seller in under a minute, what legal delivery looks like, what a lawful receipt shows in 2026, and how to report a business you think is operating illegally. It is based on the DCC's regulations (revised July 1, 2026), state law and tax guidance checked in September 2026. For licensed businesses listed by Verdex, see our California hub.

California cannabis rules at a glance: age, limits, hours, tax

The table sums up the rules a buyer meets at the counter or the door, with the source for each.

Why a DCC license matters: testing, age checks, accurate labels

All cannabis retailers must hold a DCC license, whether they run a storefront or deliver only. The DCC notes that some stores that look legitimate are not licensed, and that untested cannabis can carry contaminants.

• Licensed retailers work under rules meant to prevent sales to minors.
• Every product must be tested, and THC and CBD figures on labels must be accurate.
• Retailers may only sell cannabis goods that have passed testing and quality assurance review, along with accessories such as pipes, rolling papers and vape batteries.

How to verify a California shop in five checks

Five checks, most of them doable from the sidewalk or your phone, separate a licensed retailer from a lookalike.

1. Search the license
   Look the business up in the DCC's license search. The legal business name, license number and address should match the shop in front of you.
2. Scan the QR code at the door
   Under 4 CCR §15039, a retailer open to the public must post its DCC-issued QR code certificate in the front window within 3 feet of a public entrance, or in a locked case on the outside wall. The certificate must be at least 8.5 by 11 inches, the code at least 3.75 by 3.75 inches, and readable by a phone from 3 feet away. Scanning it lets you check the license status.
3. Match the license number in ads and menus
   State law requires every cannabis advertisement to identify the licensee by at least its license number, and a technology platform may not display a licensee's online ad without it (Business and Professions Code §26151). On ordering apps, each product must show the licensed retailer's legal name and license number before you order.
4. Check the clock
   Licensed retailers may sell only between 6 a.m. and 10 p.m., and delivery drivers must be back at the premises by 10 p.m. A seller offering 2 a.m. drop-offs is not following state rules.
5. Read the receipt
   Licensed retailers must list the cannabis excise tax separately on your receipt, and orders placed through a technology platform must show the retailer's legal business name and license number on the invoice or receipt.

Is cannabis delivery legal in California? Yes, from a licensed retailer's own driver

Delivery is legal in California, but only on terms set out in the DCC regulations. A lawful delivery:

• Comes from a licensed retailer's own employee — the driver must be directly employed by the retailer and at least 21. A retailer may not sell through an unlicensed third party, broker or intermediary.
• Is backed by paperwork — the driver carries a copy of the retailer's license, a copy of the QR code certificate, a government ID and an employer badge, and must show the license, QR certificate and badge if you ask.
• Starts with an ID check — the driver must confirm your identity and age before handing anything over.
• Goes to a physical address in California — not to publicly owned land or buildings leased by a public agency, and not to schools, day care centers or youth centers. Drivers may not leave the state with cannabis on board.
• Arrives in an unmarked, enclosed vehicle — delivery vehicles may not carry markings suggesting cannabis is on board.
• Happens during legal hours — deliveries are received only during the 6 a.m. to 10 p.m. window.

Apps and marketplaces can facilitate orders, but under 4 CCR §15415.1 the technology platform itself may not deliver, may not take a share of the sale, and must show which licensed retailer each product comes from. State rules also allow licensed delivery into any California jurisdiction as long as all delivery provisions are met.

Taxes in 2026: 15% excise, sales tax and local tax on a legal receipt

A legal receipt shows three tax layers, according to the California Department of Tax and Fee Administration (CDTFA).

Medical patients who show a valid Medical Marijuana Identification Card issued by the California Department of Public Health, together with government ID, are exempt from sales tax but still pay the excise tax. The state's cultivation tax was eliminated on July 1, 2022. Since January 2018, cannabis sales have generated more than $7.87 billion in tax revenue, the CDTFA reported in early 2026.

Local bans: 56% of cities and counties allow no legal store

State legalization does not guarantee a store nearby. Cities and counties can prohibit cannabis businesses, and county rules apply only to unincorporated areas, not to cities within the county. According to DCC data updated in February 2026:

• 256 of California's 540 cities and counties (47%) allow at least one type of cannabis business;
• 284 (53%) allow none;
• 302 (56%) allow no retail at all;
• the state counted 4.27 retail licenses per 100,000 people.

The DCC itself argues that local bans cannot remove demand, and that when residents are denied access to licensed retailers, the illicit market fills the gap. For a shopper in a no-retail town, a licensed delivery service is the legal alternative to an unlicensed storefront.

Where can you use cannabis in California? Private property and licensed lounges

Under the DCC's summary of state law, you can use cannabis on private property but not in public places such as restaurants or bars.

Officers can stop you for a sobriety test if they suspect you are driving under the influence. The legal exception to the public-use ban is a consumption lounge: under Business and Professions Code §26200, a city or county may let a licensed retailer allow on-site consumption, provided the area is restricted to people 21 and over, consumption is not visible from public places, and no alcohol or tobacco is sold or consumed there.

How to report an unlicensed seller to the DCC

The DCC accepts complaints about any cannabis business, licensed or not, and has a dedicated form for unlicensed activity. You have to give contact details, but you can ask to remain anonymous, and the DCC says it will not publicly disclose them to the extent the law allows. The more specific the report, the better:

• Who — the business name, phone number, address and any license number it displays.
• What and when — dates and a short description of what you saw.
• Evidence — photos, receipts, screenshots of ads or messages.

Analysts decide whether the case falls under DCC jurisdiction or should be referred to another agency. The DCC will not tell you the outcome or discuss open investigations. Businesses that regulators have acted against are tracked on the Verdex Red List.