Cloaking with PayPal is always risky, they track more than just what’s visible on the front. Signals like referrers, user flow, payment descriptions, and account behavior all factor into their risk checks.
You need to align all visible and backend signals in a way that doesn't raise any red flags. The more your flow mimics a low-risk, everyday business - the better your odds.