Before you pay, or if you're setting up your own shop, ask these:

• "Do you use a high-risk payment processor?" If they don't know, that's a red flag. They should be able to name their provider.
• "How do you handle age verification online?" For online shops, there should be a clear process. If they just have a checkbox saying "I'm 21", that's not enough.
• "What's your chargeback policy?" This matters if you ever need to dispute a charge. A compliant shop will have a clear process.
• "Are you registered with the state?" New York requires vape retailers to be registered. If they're not, they're operating illegally.