What is cloaking?

Cloaking is a spam technique in which a web server delivers different content to search engine crawlers than to human visitors in order to manipulate rankings. Google’s spam policies define cloaking as presenting different content to users than to search engines, and the violation is punished with ranking losses up to complete removal from the index. Cloaking belongs to the black hat SEO techniques.

How does cloaking work technically?

The web server decides on every request which version of the page to serve. To do so, it checks two attributes of the visitor: the user agent (does the request identify itself as “Googlebot”?) and the IP address (does the request come from the known address ranges of search engine crawlers?). If the server detects a crawler, it serves a specially prepared, keyword-optimized version; real visitors see different content.

Google’s spam policies give the example of a page showing travel content to the crawler while users see offers for pharmaceuticals. Inserting text or keywords only when a search engine requests the page is cloaking as well.

Why does Google penalize cloaking?

Cloaking deceives users: they click a search result and land on content Google never evaluated in that form. That is why Google lists cloaking explicitly in its spam policies and reacts in two ways. Algorithmically, spam systems such as SpamBrain detect the deception and demote the page. Manually, the webspam team can issue a manual action; the affected website then loses rankings or is removed from the index entirely. Google reports a manual action in Search Console, and lifting it requires a reconsideration request. Like other black hat SEO techniques, cloaking trades a short-term effect for the risk of losing your entire visibility.

What does not count as cloaking?

Google itself names 3 cases that are not cloaking:

• Paywalls: Payment barriers are permitted as long as Google sees the same content as paying subscribers and the flexible sampling rules are followed.
• JavaScript and images: Content that only renders via JavaScript or lives inside images makes crawling harder, but without intent to deceive it does not count as cloaking.
• Personalization and geo adaptation: Different languages or regional content are allowed as long as the crawler is treated like a regular visitor from the same region.

How do you detect cloaking on your website?

Cloaking does not only concern offenders: hacked websites frequently serve spam content to crawlers while the owner sees a normal page in the browser. The most reliable test is the URL inspection in Google Search Console: it shows the HTML Googlebot actually receives. If that HTML visibly differs from what the browser shows, there is a problem. A systematic comparison of all important pages therefore belongs in every SEO audit.

Frequently asked questions about cloaking

Is cloaking illegal?
Cloaking is not a criminal offense, but a violation of Google’s spam policies. The consequences hit your visibility: demotion, a manual action, or removal from the index.

Is a geo redirect cloaking?
No, as long as all visitors from the same region are treated equally, the crawler included. It only becomes a problem when crawlers deliberately receive different content than humans.

What distinguishes cloaking from doorway pages?
Doorway pages are separate bridge pages built for search engines that forward visitors immediately. Cloaking, by contrast, serves two different contents under the same URL. Both violate Google’s spam policies.