Where you buy CBD oil shapes what you can check before you pay. Some channels hand you a batch-matched lab report. Others hand you a bottle and a receipt.
The five below cover almost everywhere Americans actually shop for it. I’ve compared them on one question: how much can you verify about what’s inside?
1. Direct from the producer online
This is the channel with the most paperwork attached. A brand that grows and extracts its own hemp can tell you where the plant material came from and which lab tested the batch you’re holding.
But a website alone proves nothing. When researchers bought 84 CBD extracts from 31 companies online for a 2017 study in JAMA, only 26 contained an amount of CBD within 10% of the label. Of the rest, 22 held less CBD than claimed and 36 held more. THC turned up in 18 of them.
So the real advantage of buying CBD oil direct from the producer is that you can check before you order. Look up the report for the product’s batch number before you pay. Then confirm that its CBD figure matches the label, and that there’s a THC row with an actual result in it rather than a blank.
The honest downside? You pay for shipping and wait for delivery. You also can’t pick the bottle up and read the box before you commit. If that bothers you, the next channels are quicker, though you’ll usually get less paperwork.
2. Pharmacies and big-box chains
Don’t expect much oil here. When CVS began selling CBD in 2019, it limited the range to topicals like creams and roll-ons in eight states, and told CNBC it was “not selling any CBD-containing supplements or food additives.”
Ingestible oils still look scarce. I couldn’t load CVS’s current CBD pages, but when I searched Walgreens’ online store for “cbd” in October 2026, the only result was a cocoa butter body oil with no CBD in it, and its older CBD cream pages now say the products are no longer available. Stock in a physical store can differ by state, so it’s worth asking at the counter. Just don’t expect a pharmacist to hand you a lab report.
So a pharmacy is a reasonable place to look for a CBD lotion. For an oil you’d take by mouth, it’s usually a dead end.
3. Licensed dispensaries in adult-use states
A dispensary is a different market altogether. In states with legal adult-use cannabis, licensed stores sell products made under that state’s cannabis rules rather than the federal hemp definition. Those rules allow far more THC, so a dispensary oil labeled for CBD can still carry a meaningful amount of it. Read the CBD to THC ratio on the label before anything else.
Ask whether the product was tested and whether you can see the results. A good budtender won’t mind the question.
The upside of a dispensary is a regulated supply chain and staff who can show you the packaging. The catch is that the rules and testing standards differ from one state to the next. And a dispensary oil you buy legally in one state isn’t automatically legal once you cross a state line.
4. Gas stations and convenience stores
This is where I’d be most careful. Products near the register are often impulse buys with no lab report in sight and no easy way to trace the batch.
Testing of retail products shows why that matters. Researchers in Mississippi analyzed 25 hemp oil products bought from commercial outlets across the state and published their results in 2020. The study didn’t single out gas stations, but it’s a fair picture of what an untraceable shelf product can look like. Only three contained CBD within 20% of the label claim. Fifteen were well below it. Three exceeded the 0.3% THC limit. And four, mostly sold for vaping, contained synthetic cannabinoids.
That doesn’t make every corner-store bottle bad. It means the label is the only evidence you’ve got, and in this channel the label is often the least reliable part. If there’s no batch number, or no way to look up a report from the packaging, put it back.
5. Amazon and other online marketplaces
Search Amazon for “CBD oil” and you’ll get pages of results, but under Amazon’s own rules none of them should be CBD oil. Amazon’s drugs and drug paraphernalia policy, as it read in October 2026, puts CBD on its list of products you can’t sell. It names full spectrum and broad spectrum hemp oil specifically. The only carve-out it mentions is for certain topical CBD products through Amazon Fresh and Whole Foods Market.
So the “hemp oil” listings you’ll find are meant to be hemp seed oil: a pressed seed oil, not a CBD extract. Check whether the label states milligrams of CBD at all. If it lists a total in milligrams of “hemp” or “hemp extract” with no CBD figure, you’re probably looking at seed oil.
Compare that with what a producer’s own category page should give you. A page such as endoca.com/shop/cbd-capsules/ states the milligrams of CBD per capsule and the THC figure, and it explains how each batch is tested before release. A marketplace listing that can’t match that level of detail isn’t worth the convenience.
Before you buy anywhere
Federal rules are about to change. Under the new hemp definition signed in November 2025, total THC (including THCA) counts toward the 0.3% limit, and final products with more than 0.4 mg of combined total THC per container fall outside the definition of hemp. The Congressional Research Service reports that most of this takes effect on December 11, 2026. Bills to delay it further have been introduced, but none had passed when CRS reported in late September, and FDA hadn’t yet published the cannabinoid lists the law requires. How the per-container cap will apply to full spectrum oils is still unclear, so treat any seller’s confident prediction about it with some suspicion.
State rules vary too, and some are already stricter than federal law. Before you order, look up your state agriculture or health department’s hemp page, since that’s usually where the rules for consumable hemp products are published. Then pick the channel that lets you see the most paperwork. In my view that’s still the producer’s own site, as long as the lab report is one click away.
