Cloaking shows ad reviewers a different page than real users. It is an explicit policy violation on both Meta and Google, it eventually breaks your merchant account too, and the brand — not the agency — carries the exposure. Here is the escalation path, and what compliant scaling looks like instead.
Cloaking means serving ad reviewers a different page than real users see. Several agencies sell it openly to peptide brands because it appears to work: ads get approved, spend flows, and early results look excellent. What it actually does is trade an operational problem for an existential one. Cloaking is an explicit violation of both Meta and Google advertising policy, not an unsettled grey area, and detection escalates past the ad account. Enforcement can reach the business portfolio and attach to the people and payment instruments behind it, which follows the founders into every future entity. The exposure sits with the brand, not the agency that recommended it. The damage also crosses into payments, because a processor that eventually views the real site sees a business that does not match what it underwrote. Rebuilding pixel history, account age and processor standing from zero costs more than compliant scaling ever would.
Cloaking is serving one version of a page to an ad platform's reviewers and crawlers and a different version to real users, usually by detecting IP ranges, user agents, or referrer patterns. The reviewer sees a bland, compliant page; the visitor sees the page the advertiser actually wants to run. It is deliberate misrepresentation of the destination, not an aggressive-but-legal optimization.
Yes, explicitly. Both platforms name cloaking as a prohibited business practice rather than a restricted or grey-area tactic, and both treat it as an integrity violation rather than a normal ad disapproval. That distinction matters because integrity violations carry heavier, faster, and less appealable enforcement than ordinary policy rejections.
Detection is probabilistic and lagging, so a cloaked funnel can spend for weeks before anything happens. That window creates the impression that the tactic is stable, right up until enforcement lands on an account that is now carrying real daily spend, real pixel history, and real revenue dependency.
Enforcement typically escalates past the individual ad: ad account disablement, business manager termination, and flags attached to the people and payment instruments involved, which follow them into new accounts. Rebuilding means new entities, new pixels with no learning history, and a re-warmed account — months of lost compounding, on top of the paused revenue.
It usually does eventually. Underwriters approve a merchant against a specific site and offer, and acquirers re-review live sites periodically and after chargeback spikes. When the page real customers land on does not match what was underwritten, that is a material misrepresentation of the merchant account — which is a faster way to lose processing than any ad ban.