Cloaking

Cloaking serves one page to ad-network reviewers or crawlers and a different page to real visitors, typically to sneak non-compliant offers past moderation. It is prohibited by virtually all major ad platforms and networks and can result in permanent bans.

Cloaking is the practice of detecting who or what is requesting a page and serving different content depending on the answer. An affiliate might show a compliant, benign landing page to an ad-network reviewer, a search crawler, or a known moderation IP address, while sending real users to an aggressive sales page, a redirect chain, or an offer that violates policy. The technique relies on signals such as IP ranges, user agents, referrer data, or device fingerprints to sort visitors into groups.

The mechanics usually involve a script or redirect service that branches traffic in real time. Reviewers and bots land on the "safe" version so the campaign passes approval, and everyone else is routed to the "money" version that would have been rejected. Because the deception happens after approval, cloaking is specifically designed to defeat the review process rather than merely bend a rule.

Platforms treat cloaking as a serious, often zero-tolerance violation. Google Ads, Meta, and major affiliate networks can suspend accounts permanently, claw back earnings, and blacklist associated domains and payment identities. Since cloaking frequently accompanies scams, malware, or prohibited verticals, discovery can also trigger fraud investigations and legal exposure well beyond a simple ban.

Enforcement teams fight cloaking by crawling from residential and rotating IPs, using undisclosed reviewer devices, comparing crawler-seen content against real-user experiences, and analyzing user complaints and redirect patterns. Honest affiliates avoid the risk entirely by showing every visitor and every reviewer the same page, keeping redirects transparent, and making sure the approved creative matches what real customers actually see.