How Does Cloaking Work?

how does cloaking work, mechanically?

Cloaking works by splitting traffic into at least two versions of the same campaign: one page for the ad platform’s reviewer or automated crawler, and another page for the real prospect. In direct-response media buying, that usually means a clean bridge page, advertorial or product page faces review, while the user who passes the filter sees the VSL, video sales letter, checkout, upsell path or subscription offer the platform would reject if it reviewed it directly.

The filter can use IP ranges, user agent strings, referrers, cookies, click IDs, device type, account age, language, time zone, geolocation, VPN signals, headless-browser behavior and repeat-visit patterns. A basic setup simply blocks known data centers. A more aggressive setup scores each visitor and decides whether to show the review-safe page, delay the redirect, or send the user to the money page. If you’re asking what cloaking means in paid traffic, that split is the core fact: the ad destination is no longer the same destination for everyone.

Meta described the same mechanism in its February 2026 lawsuit announcement: "a webpage connected to a seemingly legitimate ad displays one version of its content to our ad review system, but shows different content to real users." That sentence matters because it removes the folklore. Cloaking is not just a tracker, CDN rule, landing-page test or geo redirect. It is differential presentation to defeat review, and that is why platforms treat it as an account-level integrity problem rather than a normal ad-disapproval issue.

• Clean path: ad reviewer, crawler or low-trust visitor sees a compliant page.
• Money path: qualified human visitor sees the real VSL, order form or offer.
• Decision layer: the cloaker uses signals such as IP, browser, referrer and behavior.
• Failure point: the two paths create evidence once a platform, regulator or card network compares them.

how is it detected?

Detection happens when the platform compares what its systems saw with what users, reviewers, investigators or payment partners later see. Meta says ad review covers images, video, text, targeting and the associated landing page, so the destination is in scope from the first review. Its review page says, "Our ad review system relies primarily on automated tools to check ads and business assets against our policies," and it also says ads can be reviewed again after going live.

The claim most operators resist is this: spend history does not make cloaking safe. We checked the supplied Meta, Google and TikTok policy facts, and none of them support the warm-up theory that gradually increasing spend earns lighter review. Meta’s published process says automated review applies to ads and business assets, Google treats circumventing systems as a suspension-level violation, and TikTok rolls repeated ad problems into Ad Account Health.

The reviewer is not the only observer.

Detection also comes from chargebacks, refund complaints, customer-feedback surveys, platform subpoenas, scraped landing-page captures, affiliate-network records, payment descriptors, pixel events, account-linkage signals and whistleblower material. In the LeadCloak case, Meta alleged software was sold to hide landing pages for diet-pill, crypto, pharmaceutical and fake-news scams from automated ad review; in 2026, Meta also sent cease-and-desist letters to eight marketing consultants who advertised enforcement evasion. We counted those as platform-side enforcement signals, not ordinary policy rejections.

what is the lawful equivalent?

The lawful equivalent is segmentation that tells the truth: different pages for different audiences, without hiding the real offer from the reviewer, the buyer, the card issuer or the regulator. Geo-routing, language localization, age gating, certified prescription-drug flows and A/B testing can be legitimate when the ad, landing page, checkout and fulfillment path remain consistent with the claim submitted for review.

A supplement advertiser can run a compliant education page, target adults 18+ where required, avoid personal-attribute copy such as direct claims about the reader’s medical condition, and keep the checkout terms visible before billing. Meta’s health policy permits some health and wellness ads under restrictions; it does not require every supplement page to be bland. If your question is whether cloaking is real, the lawful comparison is useful because normal routing is also real, but it lacks the concealment element.

The safer operating pattern is boring: one public claim set, one billing story, one support story and one refund story. A VSL can make attributed claims only if the evidence and disclosures support them; the FTC’s 2022 Health Products Compliance Guidance says "substantiation of health-related benefits will need to be in the form of randomized, controlled human clinical testing." That is a high bar, especially for weight-loss, GLP-1-adjacent, nootropic and children’s-growth offers.

We could not verify a live, platform-published Meta numeric strike threshold for advertising assets; a current Meta page with the strike count, threshold and effective date would settle it.

• Legitimate localization: same offer, different language or jurisdictional disclosures.
• Legitimate age gating: restricted product shown only to eligible users.
• Legitimate testing: variant pages that remain reviewable and policy-consistent.
• Not equivalent: showing Meta, Google or TikTok a compliant page while buyers see a prohibited one.

what does it cost when it fails?

When cloaking fails, the cost can move from ad rejection to asset loss, payment monitoring, reserve pressure, MATCH listing, civil penalties and litigation. Meta states that when a violation is found, "the ad will be rejected, and the Business Account or its assets may be restricted," which means the blast radius can include the Business Account, ad accounts, Pages and user accounts, not just one creative.

The payment side is where many cloaked direct-response offers lose their margin before a regulator appears. Visa’s VAMP, Visa Acquirer Monitoring Program, combines fraud reports and disputes into one ratio for card-not-present VisaNet transactions. Per Visa’s VAMP fact sheet, the merchant excessive threshold in the U.S. moved to 150 bps, or 1.50%, on 1 April 2026, with a minimum monthly count of fraud plus disputes also required.

Mastercard risk is different because ECM, Excessive Chargeback Merchant monitoring, uses chargebacks in the current month divided by sales from the prior month. The Braintree/PayPal Mastercard program documentation gives ECM as 100-299 chargebacks plus a 1.50%-2.99% ratio, and HECM as 300 or more chargebacks plus 3.00% or higher. That lag matters when a rebill funnel spikes: your June chargebacks can punish May’s sales volume.

MATCH is the hard stop operators talk about for good reason. Stripe’s MATCH documentation says acquirers report terminated merchants, records remain for 5 years, and a principal owner’s name, address, phone number and tax ID can be included. That means a new entity does not necessarily create a clean payment identity. We would treat that as more durable than a banned ad account.

who actually gets caught, and how?

The people caught are usually not anonymous button-pushers; they are advertisers, software vendors, affiliate networks, company principals, consultants and payment actors whose records connect the clean page to the real funnel. Meta sued Basant Gajjar, doing business as LeadCloak, in 2020 for selling cloaking software, and that case ended in 2023 with a permanent injunction. That is the cloaking device version of the story: the tool itself becomes evidence.

Platforms also sue the buyer-side operator when the ad conduct is tied to fraud. On February 26, 2026, Meta announced lawsuits against scam advertisers in Brazil, China and Vietnam, including a Vietnam-based advertiser alleged to have used cloaking for subscription-fraud funnels. Meta also said it sent cease-and-desist letters to eight former Meta Business Partners that offered account-restoration services and rented access to trusted accounts.

Regulators catch a different slice of the market. The FTC and state cases in the fact pack show fake news sites, celebrity endorsements, hidden rebills, bogus reviews and unsupported health claims turning into asset freezes, redress judgments and orders binding individuals. FTC v. LeadClick matters because the affiliate network lost after affiliates ran fake-news marketing for LeanSpa, and the Second Circuit affirmed liability. We changed our mind on one point after reviewing that record: the network layer is not peripheral when it recruits, approves, pays and edits affiliates.

• Ad platform case: differential page delivery, account evasion or scam advertising.
• FTC case: deceptive claims, fake endorsements, hidden billing or review manipulation.
• Payment case: chargeback ratios, fraud reports, MATCH criteria or transaction laundering.
• Criminal case: usually wire fraud, bank fraud, money laundering or product-safety conduct, not ordinary ad disapproval.

what does the enforcement record show?

The enforcement record shows that cloaking usually travels with older direct-response problems: fake news pages, celebrity bait, hidden negative-option billing, unsupported health claims, fake reviews and account evasion. The FTC’s Health Products Compliance Guidance says it replaced the 1998 supplement ad guide and notes more than 200 false-or-misleading health-claim cases since 1998. That is not a cloaking statistic, but it is the compliance neighborhood these funnels keep entering.

FTC v. Tarr, announced in 2017, involved more than 40 supplement and skincare products, fake magazine and news sites, bogus celebrity endorsements and about $87/month rebills after a $4.95 trial. FTC v. Sale Slash involved spam email, fake news websites and phony Oprah Winfrey endorsements for garcinia cambogia, green coffee and forskolin diet pills. FTC and Connecticut v. LeanSpa involved affiliate-run fake news sites using CNN, MSNBC and Fox News logos to drive $79.99 acai berry and colon-cleanse rebills.

Review manipulation is now its own rulebook. The FTC announced the final Reviews and Testimonials Rule on August 14, 2024, effective October 21, 2024, and codified it at 16 CFR Part 465. Per the Federal Register final rule, it prohibits fake or AI-generated reviews and celebrity testimonials, undisclosed insider reviews, review suppression through intimidation, and fake social media indicators. As of 4 August 2026, the listed maximum civil penalty for a knowing rule violation was $53,088.

The criminal record is narrower but harsher. Aleksandr Zhukov received 10 years in prison for Methbot ad fraud; Kevin Trudeau received 10 years for criminal contempt after violating an FTC order; USPlabs and Blackstone Labs executives received prison terms in supplement-related prosecutions. We checked the supplied DOJ and FTC facts and did not see criminal prosecutions for ordinary negative-option rebill funnels or fake-news affiliate advertising; DOJ’s negative-option work in this window is described as civil ROSCA litigation.

why does it keep coming back despite the risk?

Cloaking keeps coming back because it appears to solve a real media-buying constraint: the offer converts better than the version a platform will approve. A hard-sell supplement VSL, fake celebrity advertorial, hidden trial-to-subscription flow or prohibited prescription-drug claim can beat a compliant page on short-term click-to-sale economics, especially before refunds, chargebacks and account loss arrive.

The arithmetic seduces operators because early data is incomplete. Day 1 shows cheaper clicks and higher conversion rate. Day 30 adds refunds, support tickets, chargebacks, delayed disputes and customer-feedback penalties. Month 2 adds VAMP, Mastercard monitoring, processor reserves and platform account review. By the time your spreadsheet includes the full tail, the buyer who judged only front-end ROAS, return on ad spend, has already scaled the wrong signal.

It also comes back because the vendor pitch shifts the risk away from the buyer. A seller can call it compliance filtering, bot filtering, account protection or cloaking film, but the test is still simple: does the reviewer see the same material offer a normal user sees? If the answer is no, the label will not help you in Account Quality, a Google suspension appeal, a TikTok account-health review, a processor file or an FTC subpoena.

For 2026 operators, the practical question is not does cloaking still work. It sometimes routes reviewers away from a page. The better question is whether the margin survives detection across ad accounts, payment descriptors, refund behavior, reviews, customer complaints and principal identity. In most direct-response health funnels, the hidden page is only one witness against you.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Personal Attributes Policy: The 'You' Rule in Meta Ads, Documenting a Cloaked Funnel for a Compliance Report, How Cloaking Distorts What Ad Spy Tools Report to You, Banned Words in Health Ads: 60 Compliant Replacements, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.