Cloaker Stat Block: What the Evidence Shows

how does a cloaker stat block work, mechanically?

A cloaker works by showing one destination to review systems and another to real users, usually through device, IP, geography, referrer, user-agent and behavior filters. The working stat block is not just whether the redirect fires; it is which account, Page, domain, payment descriptor, merchant ID and fulfillment promise become linked when the system compares the ad to the landing page.

Meta's February 2026 lawsuit against Lý Văn Lâm gives the cleanest first-party wording: cloaking is where "a webpage connected to a seemingly legitimate ad displays one version of its content to our ad review system" while showing different content to real users. We checked that against Meta's current ad-review language, which says review covers creative, targeting and destination pages, so the landing page is not outside the review surface.

The operator's mistake is treating a cloaker as an ad approval tool. In practice, it creates a second offer record that has to survive platform review, processor underwriting, issuer disputes, customer complaints and, in stronger cases, discovery. If you're mapping this for media buying, the adjacent evidence sits closer to best affiliate link cloaker than to ordinary campaign tracking.

The unpopular but better-supported conclusion is that cloaking usually increases the number of durable fingerprints rather than hiding them. The visible ad, review-safe page, real page, checkout, descriptor, post-purchase emails, refund flow and support logs all become comparison points. A clean compliant funnel has fewer surfaces to reconcile.

how is it detected?

Cloaking is detected when the platform sees a mismatch between what review systems can access and what users, investigators or later crawls receive. Meta says its review relies primarily on automation and can run again after the ad is live, so passing the first review doesn't settle the question.

Meta's own standards say, "Our ad review system relies primarily on automated tools to check ads and business assets against our policies," and that matters because automated checks can compare assets at portfolio level, not only ad by ad. We counted the platform surfaces named in the fact pack: Meta mentions Business Accounts, ad accounts, Pages, user accounts, ads, targeting and destinations. That is at least 7 linked surfaces before payment data enters the picture.

Google is harsher in published consequence language. Its Abusing the ad network policy says that for circumventing systems, "your Google Ads accounts will be suspended upon detection and without prior warning." TikTok publishes account-level statuses, including Restricted and Poor, and tells suspended advertisers not to create new ad accounts while an appeal is pending. For competitive monitoring, ad library transparency can show the public side of what survives, but it cannot tell you what was caught pre-delivery.

what is the lawful equivalent?

The lawful equivalent is segmentation, disclosure and substantiation, not hiding the real offer from review. You can route traffic by country, device, language, intent, inventory source or funnel stage if the user, platform and processor see the same material offer and the same billing terms.

For a VSL, video sales letter, that means the platform-safe version and the sales version cannot disagree on the thing that moves the buyer: price, trial terms, recurring billing, health result, celebrity implication, ingredient claim or refund path. The FTC's 2022 health guidance says health benefit substantiation will need "randomized, controlled human clinical testing" in many cases, so a supplement funnel cannot cure weak evidence with a softer prelander.

For paid research, the lawful substitute for evasion is better surveillance. You watch competitor claims, creative angles, longevity and policy pressure without copying the part that violates review systems; competitor ad tracking belongs in that workflow because it answers what is running, not whether you can conceal a different destination.

what does it cost when it fails?

Failure cost runs across platform access, payment monitoring, chargeback math, reserves, civil penalties and litigation discovery. The expensive part is not the rejected ad; it is the linked record that follows the advertiser, principal, merchant account or affiliate network after the campaign stops.

Visa changed the payments side in 2025. The Visa Acquirer Monitoring Program, VAMP, combines fraud and disputes into one acquirer program, and Visa's VAMP fact sheet defines the ratio as fraud reports plus disputes divided by settled card-absent Visa transactions. In the U.S., the excessive merchant threshold moved to 1.50% on 1 April 2026, with a minimum monthly count of 1,500 fraud plus dispute items. Visa's own wording says the VAMP Ratio "excludes disputes resolved through pre-dispute solutions," which is why Order Insight, Consumer Clarity and RDR matter before a chargeback becomes permanent program math.

Mastercard's Excessive Chargeback Merchant tier starts when both conditions are met: 100-299 monthly Mastercard chargebacks and a 1.50%-2.99% chargeback ratio. High Excessive Chargeback Merchant starts at 300 or more chargebacks and 3.00% or higher. MATCH is worse for principals: Stripe's MATCH documentation says records stay for 5 years, and removal for excessive chargeback or excessive fraud listings is not available just because the merchant later fixes the business.

We could not verify Meta's live Customer Feedback Score thresholds on a current Meta page; the old help material no longer loads, and a current first-party help article showing the 0-to-5 scale thresholds would settle it.

who actually gets caught, and how?

The caught party is often not just the media buyer. Platforms and regulators name account operators, offer owners, corporate officers, affiliate networks, processors' merchant records, review writers and sometimes consultants who sell evasion services.

Meta's February 2026 actions named scam advertisers in Brazil, China and Vietnam, plus cease-and-desist letters to 8 former Meta Business Partners that advertised ad-account restoration or access to trusted accounts. Meta also sued Joy Timeline HK Limited in 2025 over CrushAI ads, alleging "multiple attempts to circumvent Meta's ad review process and continue placing these ads" after removals. That is not folklore; it is a published enforcement theory.

The FTC's affiliate-network theory matters for anyone buying traffic through partners. In LeadClick, the network was held responsible because it recruited affiliates, approved or rejected pages, paid them, bought ad space and gave content feedback. That is why a network dashboard is not insulation. If your team is choosing sources from ad intelligence io, the compliance question is what you copied and controlled, not only what you observed.

what does the enforcement record show?

The enforcement record shows that fake news pages, phony endorsements, undisclosed rebills and health claims have been recurring targets for more than a decade. The FTC's 2022 Health Products Compliance Guidance says it had settled or adjudicated more than 200 false or misleading health-claim cases since 1998, so this is not a new platform-policy fashion.

The older cases explain the pattern. LeanSpa involved affiliate-run fake news sites using CNN, MSNBC and Fox News logos to push $79.99 acai berry and colon-cleanse rebills. Tarr involved fake magazine and news sites, bogus celebrity endorsements and about $87/month rebills after a $4.95 trial. Sale Slash used spam email, fake news sites and phony Oprah Winfrey endorsements to sell garcinia cambogia, green coffee and forskolin pills.

The newer cases show the same shape with updated surfaces. TruHeight, finalized in July 2026, alleged unsubstantiated height claims, employee-written five-star reviews, review incentives and bot-run social profiles, with a $4 million judgment partially suspended on payment of $750,000. NextMed, approved in December 2025, involved GLP-1 program pricing and fake reviews. For chargeback-side triage, chargeback io reviews is relevant only after the upstream promise and billing record are already exposed.

The FTC's review rule adds penalty risk where the conduct fits a knowing rule violation. As of 4 August 2026, 16 CFR 1.98 still showed $53,088 as the maximum civil penalty per violation, based on the January 2025 inflation adjustment. That figure is not a settlement average; it is the ceiling the agency can seek for qualifying violations.

why does it keep coming back despite the risk?

Cloaking keeps coming back because short-term ad approval is visible immediately, while enforcement probability, chargeback ratios and linked-account consequences arrive later. The media buyer sees the green check before the processor sees the refund curve.

There is also a measurement trap. A cloaked funnel can look profitable during the first billing cycle if ad review passes, conversion rate rises and refunds lag. Then customer complaints, issuer inquiries, TC40 fraud reports, TC15 disputes, account restrictions and reserve changes arrive in different systems. The operator who only watches ad spend and gross sales misses the real stat block.

The last reason is vocabulary. People call it cloaking when the cleaner distinction is whether the platform, consumer and processor received the same material offer. If they did, routing is normal campaign engineering. If they didn't, the risk record has already started, even if the ad is still live.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Merchant of Record, Explained for Supplement Offer Owners, What a Normal Approval Rate Looks Like for Card-Not-Present Nutra, What a Merchant of Record Really Costs Once You Count Everything, 3-D Secure and SCA on a Nutra Checkout: Liability Shift vs Lost Sales, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.