Meta Ad Targeting Restrictions for Restricted Brands: What You Can and Cannot Target

By Joseph Coello, Founder · Updated August 2026 · 9 min read

Meta restricts how restricted-vertical advertisers can build audiences, not just what they can say in an ad. You cannot target or exclude an audience based on an inferred personal attribute such as a health condition, weight, or financial hardship. Cannabis ads require age-gating in the ad set itself and must geo-fence to markets where cannabis is legal. Custom and lookalike audiences built from health-condition-tagged customer lists carry real account risk. Fix: target broad demographics and general product interests instead of inferred conditions, geo-fence hard to your legal footprint, and keep every audience source policy-clean before a campaign ever launches.

What does Meta's Personal Attributes policy restrict for targeting

Meta's Personal Attributes policy prohibits ads that assert or imply knowledge of a person's private characteristics, including health conditions, financial status, sexual orientation, or criminal history. Most advertisers know this as a creative rule about ad copy. It is also a targeting rule, and it gets enforced separately. You cannot build or exclude an audience based on an inferred personal attribute, which means audience-level enforcement can trigger even when your ad text is completely clean.

This matters most for peptide, nutraceutical, and med spa brands. Broad, Meta-defined interest categories like general wellness or fitness are fine on their own. The risk shows up when that interest targeting gets paired with a retargeting pixel fired from a landing page that names a specific condition, or when a custom audience gets built from a customer list carrying diagnosis or treatment tags. Meta's health data prohibition bars uploading customer lists that contain health information as a matching field, and this has been enforced consistently across the campaigns we run for peptide and nutraceutical clients. Our Prime Peptides case study covers how we scrub audience sourcing before any list goes near Ads Manager.

How does age-gating work for cannabis ads on Meta

Cannabis ads need age-gating in two places: the landing page and the ad set itself. Most advertisers handle the landing page gate and skip the second one. Meta's Detailed Targeting age slider has to be set to match or exceed the legal cannabis purchase age of every state or market included in that ad set. If you run one ad set spanning several states with different legal ages, the floor has to match the strictest state, not the loosest.

  • Wrong: a single ad set targeting five states, age floor set to 18, when three of those states require 21.
  • Fixed: age floor set to 21 across the whole ad set, or separate ad sets per legal age tier.

This is one of the first things we check on every new cannabis account. Our MetroBud case study runs entirely on New York's legal age floor with no exceptions, which is a large part of why the account has stayed clean.

Can restricted brands use lookalike and custom audiences

Yes, with real limits on where the seed audience comes from. Lookalike audiences and Special Ad Audiences built from website visitors, ad engagement, or a clean email list are generally fine. The problem starts when the seed list itself carries personal-attribute data: a CRM export with diagnosis fields, a patient list tagged by treatment type, or a customer list segmented by a condition rather than a purchase.

The tell: if your seed audience file has a column for condition, diagnosis, symptom, or anything health-adjacent, strip it before upload. Meta's matching only needs name, email, or phone. Everything else is extra risk with no targeting benefit, since Meta won't let you build audience logic off those fields anyway.

Finance and crypto brands face a separate wrinkle. Ads that touch credit, lending, or certain financial products can get automatically classified into Meta's Special Ad Category, which removes age, gender, and detailed zip-level targeting entirely regardless of what your campaign actually sells. Check your ad's classification before you build the audience, not after, because a Special Ad Category flag rebuilds your whole targeting strategy.

What geo-targeting rules matter most for cannabis and finance or crypto brands

For cannabis, geo-fencing is not optional. Meta enforces its cannabis policy at the platform level regardless of state legality, so running an ad set with loose or nationwide geo settings raises rejection and account-risk odds even in markets where cannabis is fully legal. Hard-exclude every jurisdiction outside your licensed markets, and if you run campaigns across NYC and Dubai like we do, remember cannabis advertising is flatly prohibited in the UAE with no exceptions.

For finance and crypto, certain regions require written authorization from Meta before crypto or financial-services ads can target that geo, and a handful of countries prohibit these ads outright. Confirm current authorization status for every target region before the ad set goes live, not after the first rejection.

Compliant versus non-compliant targeting patterns

Targeting practiceNon-compliant patternCompliant pattern
Health-adjacent interestsWellness interest layered with a condition-based retargeting pixelBroad demographic plus general product interest only
Cannabis age targetingOne ad set at 18+ covering multiple 21+ statesAge floor set to the highest legal age across the whole geo
Custom audience sourcingCustomer list exported with diagnosis or condition tagsList scrubbed to name, email, and phone only
Cannabis geo-targetingNationwide targeting with no state exclusionsHard geo-fence to licensed legal-market states only
Crypto or finance geoTargeting a region that requires authorization, unfiledAuthorization confirmed before the geo is added
What we do differently: every audience we build gets checked against Meta's Personal Attributes and health data rules before it's uploaded, which is a large part of why RAP has run 300+ compliant campaigns across client and owned brands in restricted verticals at about 100% approval with 0 account bans. Book a free 15-minute audit and we'll tell you which targeting setting is actually adding risk to your account.

FAQ

Does Meta's Personal Attributes policy apply to audience targeting or just ad copy?
It applies to audience targeting specifically, on top of the separate creative-level Personal Health rejection category applied during ad review. You cannot target or exclude an audience based on an inferred personal attribute such as a health condition, even when the ad copy itself is fully compliant.
Can I target cannabis ads to an 18 plus audience?
Only if every state or market included in that ad set has a legal cannabis purchase age of 18 or lower, which is rare in the United States. Set the age floor in Detailed Targeting to match the highest legal purchase age across every geo in the ad set, not the lowest.
Are lookalike audiences banned for cannabis, peptide, or med spa brands?
No, lookalike and Special Ad Audiences are allowed as long as the seed audience itself is policy-clean, meaning no health-condition tags, diagnosis fields, or other personal-attribute data anywhere in the source list.
Do finance and crypto ads need special targeting authorization?
In some regions yes. Certain jurisdictions require written authorization from Meta before crypto or financial services ads can target that geo, and a small number of countries prohibit these ads outright regardless of authorization status.
Does turning off Advantage Plus audience expansion fix targeting compliance issues?
It removes one risk factor, since expansion can pull impressions into geos or segments outside your compliant footprint, but it does not fix an underlying violation like health-based audience sourcing. Turn it off as a safeguard, not a substitute for clean audience sourcing. Our Meta advertising policy guide covers the broader policy layer this sits inside.

Sources: Meta Advertising Standards, Meta Business Help Center, FTC Advertising and Marketing Guidance.

Reading Is Free. So Is the Audit.

Get a live screen-share review of your ads, profile or site, and the fix on the spot.

Free audit · 15 minutes · reply within 12 hours · zero obligation. Every brand in our case studies started with this exact call, and we only onboard a handful of new brands each month.

Book a Free 15-Min Audit → Questions? Chat now, we're online