Does Cloaking Still Work in 2026? The Math After Meta's Crackdown

Does cloaking still work on Facebook in 2026?

Technically, yes, for a single ad on a single day. As a repeatable business, no: the harder problem isn't getting a split page live, it's staying live long enough to recoup the setup cost. Meta's ad review "relies primarily on automated tools to check ads and business assets against our policies," and that review explicitly covers "the ad's associated landing page or other destinations," per Meta's Advertising Standards. The cloak has to fool a system built to look past the creative itself.

Meta also folded circumvention into a broader standard rather than a narrow one. The old standalone "Circumventing Systems" ad policy no longer exists as its own page; the conduct now sits inside Account Integrity, which bans accounts "created or repurposed to evade a previous account or entity removal, including those assessed to have common ownership and content as previously removed accounts." That phrasing is the legal basis for killing a fresh Business Manager the moment its assets or payment method match a dead one.

A restricted personal profile doesn't necessarily take the whole operation down with it, though. Meta's own standards note that when a single user account is restricted, other members of the associated Business Account or Page may still be able to advertise, which is why serious cloaking shops compartmentalize logins rather than run one operator profile across every asset. It slows the bleed. It does not stop the underlying math from running negative once setup and burn costs are counted honestly.

How fast do cloaked campaigns get flagged now compared to 2022?

Faster, by every operator account available, though no platform publishes a 2022-to-2026 detection-speed metric that would size the gap precisely. What is published: Meta's standard review window is typically complete within 24 hours, although it may take longer, and the part that changes the calculus is that ads may be reviewed again after they are live. A cloak that clears initial review no longer buys the campaign a free run, because the destination stays exposed to a second look weeks into a flight.

TikTok publishes a similar structure without a similar guarantee. Its review SLA states most ads clear within 24 hours, and re-review triggers automatically whenever the creative or the ad group's targeting location is edited, which happens to be the exact edit an operator makes to rotate a burned landing page. Google skips review-speed language for its worst violations entirely: "circumventing systems" and "evasive ad content" get an account suspended upon detection and without prior warning, with no grace window at all.

None of the three platforms publishes a numeric strike count telling an advertiser how many violations a portfolio can absorb before the account dies. Meta's Account Integrity language is proportionality-based, TikTok's is "persistent violations," and Google skips the concept for egregious categories entirely. What that means for a burn-and-rotate plan is covered in more detail in Meta's strike math for rejected ads: asset-level history follows the account past any single takedown.

What does a cloaked operation cost to run per month?

The real monthly bill runs five line items, and most of the public math on cloaking counts only one: ad spend. Domains, cloaking software, redirect infrastructure, agency or rented Business Manager access, and the payment stack all carry recurring cost whether or not a single sale closes, and the payment stack is the one operators consistently underprice.

Add these against a trial-offer funnel's margin and the reserve line alone often exceeds what the funnel nets in its first 90 days, because the reserve is calculated on gross processing volume, not net profit. A shop running $50,000 a month through a fresh high-risk MID at a 10% rolling reserve has $5,000 sitting untouchable for a full quarter, capital that a compliant offer running through a stable account never has to set aside.

• Infrastructure: cloaking script or SaaS license, rotating domains, hosting and residential proxies, a few hundred to low thousands of dollars a month depending on domain-burn rate.
• Ad account access: agency or rented Business Manager accounts, often from the same consultant tier Meta sent cease-and-desist letters to in February 2026 for offering phony ad-account restoration services and renting out trusted accounts.
• Payment processing: high-risk gateway and MID setup fees plus a rolling reserve, commonly 5% to 15% of processing volume held 90 to 180 days, per Corepay's high-risk merchant guidance, before any of it is liquid.
• Dispute-program fees: under Visa's Acquirer Monitoring Program, a merchant flagged Above Standard pays $4 per fraud-or-dispute transaction and $8 at the Excessive tier, with no warning step once thresholds tighten.
• Legal and burn buffer: money set aside for the account, MID and domain that will eventually die, since none of the above spend is refunded when it does.

What do you lose when it burns — pixels, pages, domains, payment methods?

Everything tied to the burned identifier, and because of how the networks link assets, often more than the one campaign that got caught. A Meta pixel accumulates conversion history against a Business Account; when Account Integrity restricts that account, the Business Account or its assets may be restricted, which can take the pixel, the Page and every other ad account under the same Business Manager down together, not just the flagged ad.

The payment-stack row is the one operators most often miss. A Meta or Google ban ends a campaign; a MATCH listing under the excessive-chargeback or excessive-fraud reason codes ends the operator's ability to open a new merchant account anywhere, under any brand, for five years, because Mastercard's rules require the reporting acquirer to include the principal owner's name, address, phone number and tax ID where available. A new LLC with the same signer on the bank application gets matched on the next underwriting inquiry.

Why did AI-driven review change the survival curve?

Because the model doesn't get tired, and it doesn't reward patience. The forum wisdom that "warming up" an account, starting small and ramping spend slowly before running the real creative, buys lighter scrutiny has no support in any platform's published review documentation. Meta's own description of the process states review relies primarily on automated tools applied to every ad, with re-review possible after they are live regardless of how much history or spend sits on the account. Age is not a credential the system checks.

Cross-platform verification is compounding against slow-burn strategies specifically. Meta is expanding its verified-advertiser program so verified accounts carry 90% of ad revenue by the end of 2026, up from 70%, concentrating checks on the highest-risk categories, health and weight-loss squarely among them. Google's advertiser verification program treats submitting false information during that process as a circumventing systems violation in its own right, meaning the identity check now carries the same penalty as the cloak it's meant to catch. For a page-by-page look at how the detection side actually flags a split page, see how cloaking gets detected on Facebook ads.

Do cloakers get sued now or just banned?

Both, and the lawsuits are no longer rare. Meta sued Basant Gajjar, the operator behind the cloaking tool "LeadCloak," in April 2020 for selling software built to hide diet-pill, crypto and fake-news landing pages from ad review; that case ended in a permanent injunction in 2023. On February 26, 2026, Meta sued a Vietnam-based advertiser, Lý Văn Lâm, specifically over cloaking used to run subscription-fraud funnels, one of four scam-advertising suits it filed that week.

Meta didn't stop at the advertisers themselves. It also sent cease-and-desist letters to eight former Meta Business Partners accused of selling phony ad-account restoration services and renting out access to trusted accounts so clients could dodge enforcement, no lawsuit against that tier yet, just a formal warning. Meta states it has filed more than 60 lawsuits total against platform abusers and removed over 134 million scam ads in 2025 alone, a pattern documented in what the 2026 cloaking lawsuits change.

The closest financial-scale precedent isn't a cloaking case at all, it's fake-news-site advertising, the tactic cloaking descended from. The FTC's case against affiliate network LeadClick Media forced it to turn over $11.9 million for the fake-news pages its affiliates ran, with the Second Circuit rejecting a Section 230 defense on appeal; FTC v. Tarr Inc. settled for a $179 million judgment, suspended to roughly $6.4 million paid, over fake celebrity endorsements and phony testimonial sites. No DOJ criminal case in this specific fake-news-affiliate or negative-option lane currently exists. The exposure runs civil, not criminal, and it runs large.

What is the expected value once you price in how these runs end?

Negative, on these numbers, for most cloaked trial-offer funnels once the full cost stack is counted rather than just ad spend. A funnel processing enough volume to matter also processes enough volume to trip a monitoring program: Visa's Excessive VAMP tier tightened to a 1.50% fraud-plus-dispute ratio in the U.S. as of April 1, 2026, and Mastercard's chargeback fines escalate from $1,000 a month early in a program to $100,000 a month by month 19, which cloaked negative-option billing rarely survives to see.

Layer the reserve, the MID-replacement cost, the domain and BM burn rate, and the multi-year MATCH exposure to the operator personally, and the breakeven point moves later than most cloaked campaigns' actual survival window. The run gets killed before it pays back its own setup cost, not after. Bankruptcy doesn't erase the hole either: fraud-based debt is excepted from discharge under 11 U.S.C. 523(a)(2)(A), and the Supreme Court confirmed in Bartenwerfer v. Buckley that this exception can reach a partner or principal regardless of her own culpability. The debt follows the person, not just the entity that folded.

Price all of that against a funnel that also has to survive faster AI-driven review, and the honest answer to what this page is asking is that cloaking's expected value went negative well before Meta's 2026 lawsuits made headlines. The lawsuits are downstream of a cost structure that already stopped paying.

What do teams that quit cloaking run instead?

Compliant claim structures built around what the ad platforms actually permit, not around what they used to miss. That starts with targeting: Meta's health and wellness rules require dietary, weight-loss and weight-gain ads to reach only adults 18 and older, and a category reference like "depression counseling" is compliant where second-person copy implying a viewer's own condition is not, which pushes teams back toward broad targeting instead of narrow interest stacks that used to imply exactly that kind of personal-attribute inference.

Creative shifts too, not just targeting. Meta permits before-and-after transformation imagery for general cosmetic products when the audience is 18 and older, so the fix for a lot of banned creative isn't abandoning the format, it's fixing the disclosure and the age gate around it, a distinction laid out in the 2026 policy shift on before-and-after photos. Paired with substantiation built on the FTC's own bar for randomized, controlled human clinical testing rather than animal studies, the same offer often survives review it used to need a cloak to pass.

Telehealth and pharma teams route through certification instead of concealment. Meta requires online pharmacies and telehealth advertisers to hold active LegitScript certification, and Google requires the equivalent LegitScript Healthcare Merchant Certification in the U.S., Canada and Australia. That paperwork is slower than a cloaked launch, but it doesn't carry a MATCH listing, a five-year payment-industry ban or a lawsuit at the end of it.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Meta Ad Library. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Trial Rebill After Click-to-Cancel: What ROSCA Still Punishes in 2026, The Ban-Evasion Economy: Account Farms, Unban Services, and Who Meta Sues, Fake News Site Funnels: A Decade of FTC Judgments, From Acai to $179M, Aggressive Claims That Still Pass: The Substantiation Line in Supplement Ads, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.