Creative Disapproval Reasons in Google Ad Manager
A creative is rejected and the reason is four words long. This is what each of those reasons actually means, the exact threshold where Google publishes one, the API value behind it, and what to change — all checked against Google's own documentation on 30 July 2026.
Read the reason before you touch the creative. Several of these are not creative faults at all: an abusive experience is assessed on the destination site, destination not crawlable is a robots.txt line, and too many cookies is usually spent by a vendor rather than by the advertiser.
Weight & build
- Maximum download size exceededLimit: 5 MB total downloadGoogle's stated rule is that the ad's download size exceeds the 5 MB limit.
- Maximum number of HTTP calls exceededLimit: 100 HTTP/HTTPS fourth-party callsGoogle's stated rule is that the ad makes more than 100 HTTP/HTTPS (fourth-party) calls.
- Maximum number of cookies exceededLimit: 25 cookiesGoogle's stated rule is that the ad sets more than 25 cookies.
- Creative is not secureGoogle's rule reads: all creatives served outside of China must be 100% SSL-compliant across all calls contained within the creative, including assets, fourth parties, and other trackers.
- Unacceptable HTML5 adThe Ad Manager API defines UNACCEPTABLE_HTML_AD with a single line: "Unacceptable HTML5 ad." That is the whole documented definition..
- Creative animates longer than 30 secondsLimit: 30 seconds of animationGoogle's stated rule is that the ad animates longer than the maximum duration of 30 seconds, and that animation cannot loop beyond that timeframe..
- Unacceptable visual effectsLimit: 5 frames per second, animated GIFGoogle's stated rule is that the ad uses an animated GIF with a frame rate higher than 5 frames per second.
- Creative does not match declared sizeGoogle's stated rule is that the creative's dimensions do not match the ad slot size returned by the ad server.
- Use of raw IPGoogle's rule reads: ad calls must be made to domains — not IP addresses — to fetch creative, tracking pixels, and other ad serving or ad tracking elements.
Click & destination
- Missing or invalid use of click macroGoogle's stated rule is that the ad does not include, or is incorrectly using, a Google click macro.
- Destination not crawlableGoogle's stated rule is that the declared click-through URL leads to a landing page that could not be crawled.
- Destination not workingGoogle's stated rule is that the click-through URL does not work properly.
- Destination URL not declaredGoogle's stated rule is that the ad's declared click-through URL does not match the actual landing page URL.
- Automated ad clickingAuthorized Buyers states that the ad automatically redirects the user to a landing page without a click, or reports a click when one was not made.
- Abusive experienceThe Ad Manager API defines ABUSIVE_EXPERIENCE as the landing page containing an abusive experience.
- Dynamic DNSThe Ad Manager API defines DYNAMIC_DNS as the landing page for the creative using a dynamic DNS.
Vendors & measurement
- Invalid fourth-party callAuthorized Buyers states that the ad is disapproved because of a detected fourth-party call to an unapproved technology vendor.
- Ad technology vendor not declaredGoogle's stated rule is that the ad does not declare the use of a declarable, approved technology vendor.
- Use of non-allowlisted OMID verification scriptThe Ad Manager API records this as a non-allowlisted OMID verification script.
- Misuse of OMID APIThe Ad Manager API defines MISUSE_OF_OMID_API with the line "OMID sdk injected by creative." The objection is to the creative bringing its own Open Measurement SDK rather than using the one the host environment provides..
- Unauthorized cookies on Google domainsAuthorized Buyers states that the ad sets an unauthorized cookie on a Google domain such as googlesyndication.com or doubleclick.net.
Malware & deception
- Malware in creative or landing pageThe Ad Manager API carries two separate values here: MALWARE_IN_CREATIVE, malware was found in the creative, and MALWARE_IN_LANDING_PAGE, malware was found in the landing page.
- PhishingThe Ad Manager API defines PHISHING as phishing found in the creative or the landing page — one value covering both locations, unlike malware, which is split into two..
- Trick to clickThe Ad Manager API defines TRICK_TO_CLICK as a creative designed to mislead or trick the user into interacting with it.
- Circumventing systemsAuthorized Buyers states that the ad attempts to circumvent or interfere with Google's advertising systems and processes.
- Gaming the Google networkThe Ad Manager API defines GAMING_GOOGLE_NETWORK as the creative having been determined as attempting to game the Google network.
- Download prompt in creativeThe Ad Manager API defines DOWNLOAD_PROMPT_IN_CREATIVE as the creative prompting the user to download a file.
Video
- Video VAST is malformedAuthorized Buyers states that the ad is disapproved because a VAST creative is not as expected.
- Video length not supportedLimit: 60 seconds, in-streamGoogle's stated rule is that the in-stream video ad maximum allowed length is 60 seconds.
- Media not fully functionalAuthorized Buyers states that the ad is disapproved because the creative is not functional or contains broken assets.
The three states a flagged creative can be in
Ad Manager reports a policy-violated creative in one of three states, and the difference between them decides whether there is anything worth doing.
- Disabled for policy violation
- Google has permanently disabled the creative. There is no path back for that creative — fix the violation and traffic a new one.
- Paused for policy violation; re-scanning
- The creative is not serving while Google re-scans it. If the violation is gone it clears automatically. Google states that re-scan frequency depends on several factors and cannot be expedited.
- Cleared; eligible for serving
- Google has determined the violation no longer exists. The creative still has to be reactivated by hand — clearing does not resume delivery on its own.
The first state is the one that changes how a team should work. Disabled is permanent for that creative — there is no edit that revives it, so the fix always ends in trafficking a new one. That makes the order of operations matter: correct the underlying problem first, then build the replacement, because a replacement trafficked before the cause is understood is simply the next creative to be disabled.
Why the same reason has three different names
One rejection can reach you worded three ways, and the wording depends on which door it came through rather than on what happened. The Ad Manager interface shows a human-readable reason. The Ad Manager SOAP API returns a CreativePolicyViolation enum value — v202602 publishes eighteen of them, and 13 of the reasons below map onto one. Programmatic demand reports it in the Authorized Buyers vocabulary, which is different again.
This is worth knowing because the three vocabularies do not line up one to one. Malware is a single idea in the interface but two distinct enum values, one for the creative and one for the landing page — a distinction that tells you which team owns the fix and is lost the moment someone retypes it as “malware” in a ticket. In the other direction, several reasons that get thrown around daily have no enum value at all, so an integration polling the API will never see them. Each page below records the enum value where one exists and says nothing where one does not.
What this covers
This covers the technical and trafficking reasons — the ones you fix by changing a tag, a URL or an asset. Google's full policy catalogue also includes content categories (weapons, tobacco, gambling, adult, healthcare, elections and more), which are decided on what the ad says rather than how it is built, and some of that documentation sits behind an Authorized Buyers partner login. Those are deliberately out of scope here rather than paraphrased from memory.
Every reason name, threshold and enum value on these pages carries the Google source it was verified from, with the date. The causes and fixes are practitioner guidance and are marked as such.