The Maryland Cannabis Administration has levied a $100,000 civil fine against MESHOW, LLC, operator of the RISE Joppa dispensary in Harford County, after a series of inspections spanning October 2024 through November 2025 exposed inventory falsification, repeated adult-use oversales, and the sale of high-potency products to unqualified consumers. The enforcement action, finalized in a Consent Order dated February 2, 2026, represents one of the more detailed compliance failures to reach public record under Maryland's adult-use regulatory framework - and it carries lessons that extend well beyond one dispensary's front counter.
When Inventory Problems Become a Fraud Problem
The most serious finding in the Consent Order isn't the oversales or the high-potency violations - it's what regulators say happened inside the seed-to-sale tracking system. During an October 2024 inspection, investigators found products recorded in METRC that did not exist in physical inventory. Rather than flagging those discrepancies through required reporting protocols, the dispensary's general manager at the time allegedly directed staff to run what regulators characterized as "fake purchases" - processing transactions in the point-of-sale system without product present and without any exchange of payment, solely to zero out inventory lots.
Video footage reviewed by regulators confirmed the pattern. The Consent Order notes no evidence of theft or diversion - meaning product wasn't walking out the door - but that framing doesn't soften the finding much. What regulators identified is a deliberate workaround: staff were coached to manipulate METRC records rather than report discrepancies accurately. That's a compliance failure of a different category than a miscounted batch or a POS integration glitch.
For operators running multi-location retail, the personnel dimension here matters. Both the general manager and a separate assistant manager linked to the questionable transactions had been terminated before and during the investigations. The dispensary also failed to notify the MCA of the general manager's departure within the timeframe required under Maryland's cannabis agent regulations. That notification requirement exists precisely so regulators can assess risk when personnel with system access leave under irregular circumstances. Missing that window - whatever the reason - created an additional violation and, more practically, left regulators without a signal that something may have needed immediate attention.
Oversales, Expired Certifications, and the High-Potency Boundary
Separate from the METRC falsification, regulators documented multiple instances where the dispensary sold concentrated cannabis products in excess of Maryland's daily personal use limits - specifically, more than 12 grams of concentrate in a single transaction day. Oversales of concentrates and infused edibles appeared not just in the October 2024 inspection but in follow-up reviews conducted in April, August, and November 2025. A corrective action plan had been approved by the MCA after the initial findings. Violations kept occurring anyway.
The high-potency product issue is a distinct compliance category worth understanding clearly. Maryland restricts edible cannabis products exceeding 10 milligrams of THC per serving or 100 milligrams per package to registered medical patients and caregivers. Those products cannot be sold to adult-use consumers. Regulators found RISE Joppa had made such sales. The restriction exists as a consumer safety control - not a technicality - and enforcement of that line is straightforward: either the customer is a registered medical patient or the product shouldn't be sold to them.
Investigators also found sales to patients who held valid medical identification cards but whose provider certifications had lapsed. That's a different wrinkle. The card was real; the underlying authorization had expired. For a dispensary's compliance team, this is a POS verification issue - systems and staff both need to confirm not just that a medical card exists, but that the certification behind it remains current. In practice, that check can be easy to miss under transaction volume pressure. But regulators documented it repeatedly.
The dispensary attributed some of the sales-limit violations to third-party POS software integration problems with METRC - a complaint that surfaces fairly regularly in regulated cannabis retail. When POS and seed-to-sale systems don't communicate cleanly in real time, purchase limit enforcement can break down. The MCA acknowledged that corrective software measures were reportedly implemented, including allocation checks and warning prompts for high-potency products. The fact that oversales continued across multiple inspection cycles after the initial corrective action plan suggests the fixes either came too slowly or didn't hold.
Green Waste Documentation and the Broader Recordkeeping Gap
Green waste adjustments - the removal or destruction of cannabis material from inventory - require clear, detailed documentation under Maryland regulations. Regulators found package adjustments at RISE Joppa that lacked required explanations, deviating from the dispensary's own approved standard operating procedures. That's a narrower finding than the METRC falsification, but it points to a systemic pattern: inventory movement, in multiple forms, wasn't being documented as required.
Taken together, the violations across inventory falsification, green waste recordkeeping, and seed-to-sale accuracy paint a picture of a compliance infrastructure under strain - understaffed, inadequately trained, or insufficiently supervised, or some combination of all three. Regulators don't generally expect perfect operations; they do expect consistent documentation and honest reporting when something goes wrong.
What the Consent Order Requires - and What It Signals
Beyond the $100,000 fine, the Consent Order imposes a structured remediation framework that amounts to an extended period of enhanced regulatory oversight:
- Mandatory METRC training for all dispensary agents within 45 days of the order
- Engagement of an independent third-party auditor to conduct monthly compliance audits over an 18-month period
- Implementation of compliance self-assessment software within 30 days
- Completion of a state-approved METRC inventory reconciliation process
- Submission of revised standard operating procedures to the MCA for approval
The MCA also warned explicitly that any repeat violations of the same regulatory provisions within 18 months could trigger additional enforcement, including probation or license suspension. That's not boilerplate language in this context - the MCA already approved one corrective action plan that didn't hold. A second cycle of repeat violations would be difficult for any operator to defend against a suspension argument.
For dispensary operators and compliance officers across Maryland, the more important signal is structural. The MCA demonstrated here that it will investigate through video review, cross-reference physical inventory against METRC records, and treat improper system manipulation as a distinct violation category - not just a bookkeeping error. The third-party audit requirement is telling: the agency isn't relying on the operator's self-reported remediation this time. An independent set of eyes, monthly, for a year and a half.
Multi-state operators in particular should read this as a reminder that brand recognition and operational scale don't create compliance insulation. The obligations at the dispensary floor level - accurate METRC entries, real-time purchase limit enforcement, current certification checks, documented green waste adjustments - are the same regardless of how many locations a parent company operates. The failure here wasn't regulatory complexity. It was execution.
