The 2026 Kratom Vendor Landscape: How the Market Sorted Itself Into Tiers

Two years of regulatory shock — state bans, the DEA's 7-OH move, KCPA expansion, and payment processor crackdowns — split the vendor market into three distinct tiers. Here is the map of where each tier sits, what put it there, and what buyers need to know to navigate the result.

The Market Before the Sort

For most of kratom's American commercial history, the vendor market operated as a flat landscape. Online sellers ranged from meticulous small-batch operations to anonymous dropshippers, and the buyer's only navigation tool was word of mouth, Reddit threads, and the occasional lab report of uncertain provenance. A buyer who cared about quality could find it, but the market itself imposed no structural separation between documented and undocumented operations.

What changed in 2024–2026 was not one event but a convergence: the American Kratom Association's GMP audit program matured from aspiration to operational infrastructure; the KCPA legislative model spread to enough states that compliance became a genuine market-access requirement rather than a voluntary signal; the DEA drew the 7-OH line that forced every vendor to decide how its products related to a controlled-substance threshold; and payment processors — always kratom's infrastructure bottleneck — began discriminating between documented and undocumented sellers in ways they had not before. The result was a market that sorted itself, unevenly but visibly, into three tiers.

Tier One: The GMP-Certified Operations

The top tier is defined not by marketing claims but by infrastructure: these are vendors that have submitted to the AKA's Good Manufacturing Practice audit program, maintain lot-level third-party testing with current, publicly accessible Certificates of Analysis, operate destination-screening systems that block shipments to ban states, carry product liability insurance, and process payments through conventional merchant accounts.

The GMP audit itself is the anchor credential. It requires documented standard operating procedures for receiving, testing, processing, packaging, and releasing product; third-party facility inspections; a recall capability; adverse-event reporting; and labeling that meets the program's content standards. The program is modeled on FDA supplement GMP requirements, though kratom is not FDA-regulated and the audit is industry self-regulation, not government oversight. That distinction matters — GMP certification is a voluntary standard, not a legal requirement except where a state KCPA incorporates it — but the practical significance is that operations which submit to the audit have invited external scrutiny of their processes and maintain the infrastructure to support it.

The vendors that anchor this tier — operations like Top Extracts, MIT45, Just Kratom, and Kratom Country — share structural traits that distinguish them from the field. Their COAs are lot-matched, current, and in some cases (Top Extracts notably) linked via QR code to the testing laboratory's own hosted report, which eliminates the recycled-COA problem. Their product labeling includes lot numbers, manufacture dates, and content disclosures consistent with KCPA frameworks. Their shipping systems screen by destination, blocking orders to ban states (Alabama, Arkansas, Connecticut, Indiana, Kansas, Louisiana, Tennessee, Vermont, Wisconsin, and D.C.) and, in the stronger implementations, flagging local-level restrictions. Their customer-service infrastructure handles lot-specific COA requests, return processing, and compliance questions through documented channels.

This tier is small. The AKA's public vendor directory lists a finite roster of GMP-qualified operations, and the practical barrier to entry is not the audit fee but the infrastructure the audit measures — facility standards, testing contracts, documentation systems, insurance, and legal compliance review. These are fixed costs that scale with the program's requirements, not with sales volume, which means the GMP tier selects for operations that are either large enough to amortize those costs or committed enough to absorb them as the price of market positioning. Both types exist, and the tier's operational heterogeneity (extract specialists alongside broad-catalog retailers, legacy brands alongside newer entrants) reflects the fact that the selection mechanism is infrastructure commitment, not business model.

Tier Two: The Mid-Market Operators

Below the GMP tier sits a broader population of vendors who test and document selectively but have not completed the full GMP audit process. This is not a pejorative designation — many mid-market operators produce quality product and maintain genuine testing programs — but the tier's defining characteristic is incomplete infrastructure rather than absent quality.

A typical mid-market operation tests its product, but the testing may not be lot-level (a representative sample rather than every batch), the COAs may live on the vendor's own server rather than the laboratory's, and the documentation may lag inventory turns. It ships to legal states, but destination screening may rely on manual checkout review rather than automated geo-blocking, which means ban-state orders can slip through. It accepts returns, but the process may be informal rather than documented. It carries some products with clear labeling and others with minimal disclosure. The pattern is not absence of diligence but inconsistency of diligence, and inconsistency is exactly what the GMP audit is designed to detect and remedy.

The mid-market tier is also where the KCPA's practical effects are most visible. In states that have enacted the Kratom Consumer Protection Act — which mandates registration, testing, labeling, age gates, and in some versions 7-OH content limits — mid-market vendors face a direct compliance cost that the GMP tier has already internalized and that the undocumented tier ignores. The vendor that tests but does not test every lot now needs to test every lot. The vendor that ships everywhere now needs a state-by-state compliance matrix. The vendor that labels loosely now needs specific content disclosures. These are not existential costs, but they are real costs, and they push mid-market operators in one of two directions: up into GMP compliance, or laterally into states where the KCPA has not reached.

Buyers navigating this tier need a vendor-specific evaluation rather than a tier-level trust judgment. The mid-market includes operations that are functionally at GMP level and simply have not completed the audit, and it includes operations whose documentation practices would not survive one. The buyer's tool for distinguishing them is the same verification stack that works everywhere: lot-matched COAs, lab accreditation checks, shipping-restriction compliance, and the vendor's response to pointed questions about its testing program.

Tier Three: The Undocumented Market

The bottom tier is the easiest to describe and the hardest to quantify. These are sellers — predominantly gas stations, convenience stores, smoke shops, and fly-by-night web operations — that offer kratom products without meaningful testing documentation, GMP compliance, lot tracking, or destination screening. Product labeling ranges from minimal to misleading. COAs, when they exist, are often outdated, borrowed from other lots, or fabricated. Payment processing, where it exists online, runs through high-risk processors with minimal consumer protections.

This tier is where the synthetic 7-OH problem concentrates. The DEA's July 2026 intent to temporarily schedule concentrated 7-hydroxymitragynine above the 0.050% dry-weight threshold drew a line that documented operations had already prepared for — the compounds targeted are synthetic concentrates, not the natural alkaloid at levels present in unprocessed leaf — but the undocumented tier had produced the products that prompted the regulatory attention. Enhanced shots and extracts with undisclosed alkaloid concentrations, sold without COAs or with COAs that described only the base material, were the specific products the DEA cited. The scheduling action targets the concentrated synthetic compounds, but its market effect is broader: it forces every extract and shot product to demonstrate, via lab documentation, that its 7-OH content falls within the natural range. Documented operations have that documentation; undocumented operations do not.

The undocumented tier is also where state bans produce the starkest effects. A gas station in a ban state that continues to sell kratom — and reports from Tennessee and Kansas after their July 2026 bans suggest some do — is not operating in a regulatory gray area but in straightforward violation, with criminal penalties in both states. The documented tiers respond to new bans by adding states to their shipping-block lists; the undocumented tier often does not know about the ban, does not have the infrastructure to screen for it, or does not care.

Buyers encountering this tier are not always aware they are in it. A branded packet in a gas station display looks like a product from a company; it may or may not be. The buyer-side signals are absence-based: no lot number on the package, no scannable COA link, no vendor website with a testing page, no contact information beyond the distributor's name on the label. These absences are the negative image of the documentation stack the GMP tier maintains, and they are the fastest screen a buyer can run.

What Moved the Sort: The Four Forcing Functions

The three-tier structure is not a marketing taxonomy but a consequence of four forcing functions that all intensified between 2024 and 2026.

Forcing Function One: The KCPA Expansion

The Kratom Consumer Protection Act, first enacted in a handful of states and now the legislative model in a growing roster, imposes registration, testing, labeling, and age-gate requirements that function as a compliance floor. Vendors serving KCPA states must meet those requirements or exit those markets. The GMP tier's existing infrastructure satisfies KCPA requirements with minimal incremental cost. The mid-market tier faces the adaptation cost described above. The undocumented tier cannot meet the requirements and either ignores them (risking enforcement) or loses access to those state markets.

Forcing Function Two: The 7-OH Scheduling Action

The DEA's July 2026 intent to temporarily place three synthetic 7-OH compounds into Schedule I, with a threshold of 0.050% by dry weight or 1.00 mg per dosage unit, created a bright line that every extract and shot product must now be tested against. Products above the threshold become controlled substances with all the criminal and commercial consequences that entails. Documented vendors with lot-level COAs can demonstrate their products fall below the line; undocumented vendors cannot. The scheduling action did not ban natural kratom leaf, but it created a documentation requirement that functions as a de facto licensing barrier for concentrated products.

Forcing Function Three: State Bans

Nine states now fully ban kratom (Alabama, Arkansas, Connecticut, Indiana, Kansas, Louisiana, Tennessee, Vermont, and Wisconsin), plus D.C. Tennessee's and Kansas's bans, both effective July 1, 2026, are the most recent and carry felony penalties. California operates a de facto commercial ban through CDPH enforcement under the Sherman Food, Drug and Cosmetics Law's adulteration provisions, though possession remains legal. Each ban is a market-access event: documented vendors screen and block; mid-market vendors adapt with varying speed; undocumented vendors often do not respond until enforcement reaches them.

Forcing Function Four: Payment Infrastructure

The least visible but arguably most powerful forcing function is payment processing. Kratom is classified as a high-risk merchant category by most acquiring banks, which means vendors need specialized merchant accounts. These accounts are available but conditional — on compliance documentation, testing programs, and in some cases GMP certification. As payment processors tightened requirements through 2025–2026, the gap between vendors who could maintain conventional credit card processing and those who could not widened. A vendor that loses standard payment processing loses the frictionless checkout that online commerce depends on; the alternatives (cryptocurrency, money orders, ACH-only) work but impose conversion friction that documented competitors do not face.

The four forcing functions interact multiplicatively. A vendor that loses one KCPA state's market also loses that state's payment volume, which weakens its processor relationship, which raises its processing costs, which makes the next compliance investment harder to justify. The sort is self-reinforcing: compliance begets capability, and non-compliance begets erosion.

Where the Featured Vendors Sit — And Why

The vendors featured on KratomDeals occupy the GMP-certified tier, and listing them is a statement about infrastructure, not an endorsement of any product's effects. Each has specific structural attributes that place it in that tier.

Top Extracts operates under cGMP (current Good Manufacturing Practice) standards with certified copackers, maintains QR-code-linked lab reports hosted at the testing laboratory's domain, and has been an active participant in kratom industry advocacy including KCPA drafting support. Its product line emphasizes extracts with documented alkaloid content.

MIT45 is a founding member of the AKA GMP program, maintains lot-number COAs through a dedicated compliance infrastructure, and operates a triple-purified extraction process for its concentrated products. Its product line spans from raw leaf to concentrated extracts across multiple formats.

Just Kratom operates under GMP audit with published lot testing, maintains a broad retail distribution network alongside direct online sales, and offers traditional powder and capsule formats alongside a gummies line.

Kratom Country has operated since 2009, maintains small-batch testing with COA documentation, and offers a 30-day satisfaction guarantee — a policy that requires the return-processing infrastructure the undocumented tier lacks.

K-Tropix operates as a multi-botanical extract house spanning kratom, kanna, and kava, with a dedicated gummies format and extract tablet line. Its positioning bridges the kratom market and the broader botanical-extract category.

What the Sort Means for Buyers

The three-tier structure creates a navigation problem and solves it simultaneously. The problem: the market is not labeled. No vendor announces itself as "Tier Three" — even the most undocumented operation describes itself as premium, lab-tested, and trusted. The solution: the tiers differ in checkable infrastructure, not in claims, and the verification stack that identifies a vendor's actual tier takes minutes, not expertise.

The essential buyer protocol is a four-point infrastructure check. First, GMP status: is the vendor listed in the AKA's public vendor directory? Second, COA currency: does the vendor maintain lot-matched, current lab reports from an independent, accredited laboratory? Third, destination compliance: does the vendor screen shipments against the current ban-state list, and will its checkout actually block an order to a banned jurisdiction? Fourth, payment normality: does the vendor accept standard credit card payments through a conventional checkout, or does it route through unusual payment mechanisms?

No single check is dispositive — a vendor might accept credit cards and still sell untested product — but the checks compound. A vendor that passes all four has the infrastructure of the GMP tier whether or not it has completed the formal audit. A vendor that fails all four is structurally undocumented regardless of what its website claims. The gray zone between those poles is the mid-market, and mid-market vendors deserve — and can withstand — pointed questions about their testing program, lot documentation, and compliance practices.

The Sort Is Not Over

The forcing functions that produced the current three-tier structure are still operating, and their trajectory suggests continued compression. The KCPA is expanding into additional states, each adoption raising the compliance floor. The DEA's 7-OH scheduling, once finalized, will make concentrated-extract documentation a legal requirement rather than a market signal. Payment processors are unlikely to relax their requirements in a category that is becoming more regulated, not less. And the AKA GMP program itself continues to develop its audit standards.

The practical implication for buyers is that the GMP-certified tier is becoming the default documented market, the mid-market is being pushed toward that standard by regulatory and commercial pressure, and the undocumented tier is losing the access points — payment processing, shipping carriers, retail shelf space in compliant jurisdictions — that kept it viable. The sort is not a snapshot but a process, and the direction of that process is toward documentation as a market-access requirement rather than a marketing differentiator.

For buyers, that direction is unambiguously positive. A market that sorts by documentation is a market where quality signals are checkable, where compliance is observable, and where the buyer's verification effort is rewarded with genuine information rather than marketing noise. The three-tier structure is the market's own quality infrastructure, built by regulatory pressure and commercial incentive rather than by any central authority — and the buyer's job is simply to navigate it with open eyes.