What Does Cloaker Wear?

how does it work, mechanically?

A cloaker works by showing one destination to the ad-review system and another to the person who clicks the ad. Meta described the mechanism in its 2026 Lam case as a webpage that “displays one version of its content to our ad review system, but shows different content to real users.” That is the literal answer to what does cloaker wear: a compliant-looking page on the outside and the actual VSL, checkout or subscription funnel underneath.

Mechanically, the split can use IP ranges, user agents, referrers, device signals, geography, timing rules, allowlists or redirect chains. The ad platform sees a bland advertorial or policy-safe bridge page; your buyer sees the direct-response offer. A VSL, meaning a video sales letter, is not illegal by itself. The problem starts when the routing hides health claims, fake scarcity, subscription terms, prescription-drug promotion or another destination the platform would have reviewed differently.

We counted the useful risk points in the supplied record and the pattern is not subtle: cloaking is rarely the whole business model, but it sits beside fake endorsements, rebills, celebrity bait, account rentals, altered health creatives and transaction laundering. If you are looking for how to spell cloaker, the working definition matters more than the spelling: it is a review-evasion system, not merely a redirect tool.

how is it detected?

It is detected by comparing what the platform, the reviewer, the crawler, the user, the payment processor and the complainant each saw. Meta says ad review covers “images, video, text and targeting information” plus the landing page or other destinations, so the destination is in scope from the first review, not only after a complaint.

The detection stack is broader than most buyers admit. Meta says, in its own wording, “Our ad review system relies primarily on automated tools to check ads and business assets against our policies.” That means creative, destination, Page, Business Account, ad account and user account can all become evidence. Google names the same class of conduct “circumventing systems” and says accounts can be suspended without warning when it detects interference with its ad systems.

The uncomfortable claim is that account warm-up is mostly folklore. No published Meta, Google or TikTok policy in the supplied record says gradually increasing spend earns lighter review, and Meta says ads can be reviewed again after they are live. We checked the fact pack for a numeric Meta or TikTok strike count and found none; a live platform page giving an exact advertising-asset strike threshold would settle it.

what is the lawful equivalent?

The lawful equivalent is a compliant pre-sell page, not a hidden second page. You can segment visitors, run A/B tests, localize claims and use a bridge page, but the reviewer and the buyer need to encounter the same material terms, claim type and destination logic. If you need a cleaner route, how to counter cloaker starts with removing the split rather than improving it.

For health and weight-loss offers, the lawful path is narrower than many funnels assume. The FTC's 2022 Health Products Compliance Guidance says “substantiation of health-related benefits will need to be in the form of randomized, controlled human clinical testing.” That does not mean every sentence needs a clinical trial, but the sales claim that moves the buyer needs evidence that fits the claim.

For recurring billing, the lawful equivalent is disclosure before billing information, express informed consent before charging and a simple way to stop recurring charges under ROSCA, 15 U.S.C. 8403. California, New York and Colorado add state rules in the supplied record, but the federal floor is already enough to make hidden trial-to-subscription routing a payments problem, not just a copywriting problem.

what does it cost when it fails?

When cloaking fails, the cost lands in four places: the ad account, the merchant account, the owner record and the enforcement file. The ad-platform penalty can be immediate loss of traffic. The payments penalty can be reserves, monitoring fees, MATCH listing or termination. The legal penalty can be civil money, injunctions and individual liability.

Visa's VAMP, Visa's monitoring programme for fraud and disputes, changed the math because fraud reports and disputes now sit in one ratio. Per Visa's acquirer monitoring fact sheet, the U.S. excessive merchant threshold moved to 150bps, or 1.50%, on 1 April 2026 with a monthly fraud-plus-dispute count threshold of 1,500. Visa's own wording says the VAMP Ratio “excludes disputes resolved through pre-dispute solutions,” which is why prevention matters more than winning representments later.

Mastercard risk is separate. Per Braintree's Mastercard monitoring documentation, ECM starts at 100-299 Mastercard chargebacks and a 1.50%-2.99% ratio, while HECM starts at 300 or more chargebacks and a 3.00% or higher ratio. MATCH code 04 for excessive chargebacks can follow a merchant after termination; Stripe's MATCH documentation says records remain for five years.

A $47 offer can survive a rejected ad. It may not survive a processor deciding the principal is the risk.

who actually gets caught, and how?

The operators who get caught are usually not caught only by the cloaker; they are caught by the surrounding record. Meta's 2026 lawsuits named scam advertisers using celebrity-bait ads, healthcare-product fraud and cloaking. Its 2025 CrushAI case alleged repeated attempts to evade ad review after ads were removed. The platform action follows the same pattern as payments and FTC cases: evasion plus consumer harm.

Affiliate networks and service providers can get pulled in when they approve, recruit, pay or steer the traffic. In LeadClick, the network was held responsible for affiliate fake-news pages because it recruited affiliates, approved or rejected pages, paid them, bought ad space and gave feedback. If you are trying to understand how to break cloaker, the practical answer is evidence preservation: capture the ad, review path, real user path, checkout and account connections.

Individual owners do not disappear behind the LLC. The FTC's Health Products Compliance Guidance says parties with authority to control marketing can be liable, and the TruHeight complaint used the formula that executives “formulated, directed, controlled, had the authority to control, or participated in” the acts. We changed our mind on one point after reading the record: the strongest case file is often not the redirect code, but the combined proof of claims, reviews, billing and control.

what does the enforcement record show?

The enforcement record shows a long-running pattern: fake authority, fake news, undisclosed billing and health claims draw cases even when the technology changes. FTC v. Tarr involved more than 40 supplement and skincare products, bogus celebrity endorsements and about $87/month rebills after a $4.95 trial. FTC v. Sale Slash involved spam email, fake news websites and phony Oprah Winfrey endorsements.

The FTC's health-claim standard also tightened in public guidance. The agency's December 2022 guidance says it was prepared to “update and replace Dietary Supplements: An Advertising Guide for Industry, issued in 1998.” It also notes more than 200 false or misleading health-claim cases since 1998. That is a record, not a mood.

The newer review rule closes another common cloaked-funnel escape hatch. Per the FTC's final rule on consumer reviews and testimonials, 16 CFR Part 465 became effective 21 October 2024 and prohibits fake or AI-generated reviews, certain bought reviews, undisclosed insider reviews, fake independent review sites, review suppression and fake social media indicators. As of 4 August 2026, the maximum FTC civil penalty listed in the supplied record was $53,088 per knowing rule violation.

why does it keep coming back despite the risk?

It keeps coming back because cloaking appears to turn a rejected offer into a spendable offer, and direct-response buyers feel the upside before they feel the record. A health VSL can look profitable for a few days while refunds, disputes, review complaints and account links lag behind the spend. That delay is the product's sales pitch.

The second reason is language drift. Operators call it routing, compliance filtering, pre-sell segmentation or bot protection, and some of those things can be lawful. Cloaking is the version where the platform is intentionally shown a materially different page. The distinction is simple enough to say in one sentence: if the reviewer would make a different decision after seeing what the buyer sees, you are in evasion territory.

The third reason is that platforms publish less than operators want to know. Meta does not publish a numeric advertising-asset strike threshold, Google does not publish all related-account linkage signals in the supplied record, and TikTok uses qualitative account-health language such as persistent violations. That uncertainty creates a market for account sellers, restoration consultants and cloaker vendors, even though Meta has sent cease-and-desist letters to consultants advertising enforcement evasion.

A cloaker survives in the gap between review delay and complaint arrival.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Is Cloaker a Word?, Is Justin the Cloaker?, What Does Cloaker Mean?, What Game is Cloaker from?, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.