Ordering vapes online in Germany is legal — but the age check is not a formality. German youth-protection law requires a working age verification system, and a "confirm you are 18" checkbox does not count. Here is what a compliant shop does, what happens at your door, and why good sellers ask for proof before they ask for payment.
The legal basis, in plain terms
Section 10 of the Youth Protection Act (JuSchG) forbids supplying tobacco and nicotine products to minors — and explicitly extends to nicotine-free e-cigarettes and e-shishas. Crucially, the law covers mail order as well as shop sales. Alongside it, the Tobacco Products Act (§22 TabakerzG) requires cross-border distance sellers to register with authorities and to operate an age-verification system that actually confirms the buyer meets the minimum age in the destination country. The practical translation: online vape retail in Germany needs identity-backed verification, not self-declaration.
What compliant sellers do
1. Verify identity at checkout
Certified systems — SCHUFA Age Check, PostIdent, or equivalent bank- and database-based methods — check the buyer's name and date of birth against official records. Some shops ask for the date of birth plus an identity check for first orders, then allow repeat orders once verified. What none of them can legitimately do is rely on a tick-box.
2. Verify age at delivery
Since the parcel still has to reach a person, compliant logistics add a second gate: DHL's Alterssichtprüfung (visual age check), where the courier physically inspects the recipient's government ID before handing over. This is why vape parcels are sometimes not left with a neighbour and cannot simply be dropped at a locker.
3. Keep records
Verification logs are part of the compliance documentation authorities expect, and they are the seller's defence in an inspection. It is also why a serious shop does not take shortcuts when a customer asks them to "skip the check".
In physical shops
Retail staff must request photo ID from anyone who appears under 25, regardless of how old the customer looks. That "appears under 25" threshold is deliberately conservative — it removes judgment calls and it is what regulators check during spot inspections. The same logic drives online delivery: our parcels use an age-controlled service, and the rules that apply once you leave the shop floor are set out in our guide to where you can vape in Germany.
What the penalties look like
Selling to a minor can trigger fines up to €50,000 and, for repeat or deliberate breaches, loss of the business licence. Untaxed goods carry separate criminal exposure under tobacco duty law, which is covered in the Germany vape tax guide. For buyers, the practical consequence is simple: shops that skip verification are also the shops most likely to be selling stock of uncertain origin — the overlap between "will not check ID" and "will not show you a tax stamp" is almost total, as the fake vape checklist shows.
Why this matters for buyers
- Be ready to verify. Have your name and date of birth consistent across payment and delivery details; mismatches are the usual reason an order stalls.
- Expect the door check. If you are not home, the courier may not hand the parcel to someone else. Plan for a delivery window or a branch pickup.
- Prefer shops that state their system. A seller that names its verification method is demonstrating that it has one. Ours is integrated at checkout, with age-verified delivery — the shipping details spell out what to expect.
- Do not try to buy for someone under 18. Beyond the legal exposure, it is the single fastest way to get an account permanently closed.
- Check the seller's delivery coverage. Age-controlled delivery is not available everywhere, which is why cross-border orders have different timelines — see the EU delivery times guide.
For retailers and resellers
If you sell vapes in Germany — online or in a shop — verification is your responsibility, not your supplier's. You need a certified online system, a delivery method with age control, documented staff training, and ID-check discipline at the counter — and the counter itself has rules of its own, covered in our shop-refusal guide. Wholesale customers regularly ask us how to implement this; the short version is that the compliance burden sits with whoever hands the product to the consumer. Our wholesale guide covers the rest of the retailer obligations, including tax stamps, LUCID packaging registration and the ElektroG take-back duties.
FAQ
Is age verification really required for zero-nicotine vapes?
Yes. German youth-protection rules cover nicotine-free e-cigarettes and e-shishas exactly the same way.
Why do some shops ask for a copy of my ID?
For identity-based verification (PostIdent-style) or for first-order checks. A reputable shop should tell you what it does with that data and delete it once verification is complete.
Can I order from another EU country to avoid the check?
Cross-border sellers targeting Germany are themselves required to register and run age verification for German customers. There is no legitimate route around the check.
Does a "click to confirm" pop-up satisfy the law?
No. German authorities have been explicit that self-declaration pop-ups are legally void.
