Spoofing And Layering

Imagine a trader wants to sell a stock at a good price. Instead of just selling, they first stack several large buy orders on the bid side of the book — orders that look like real demand — to convince other participants the price is about to rise. Once other traders react by buying or lifting their offers, the spoofer sells into that new demand, then cancels the fake buy orders before any of them are ever filled. That's spoofing: entering orders with no intention of executing them, purely to distort the appearance of supply or demand.

Layering is the same idea scaled up. Rather than one large fake order, the trader stacks several smaller orders at different price levels on one side of the book, building a staircase that looks like deepening interest. Layering is harder to spot at a glance because no single order looks abnormal — it's the pattern across price levels, appearing and vanishing together, that gives it away.

Why it works, and why it's illegal

Both tactics exploit the fact that other participants — especially algorithms that read order book depth as a signal — treat resting orders as genuine trading intent. A spoofer never wants those orders filled; the entire strategy collapses if someone actually trades against the fake side, because then the spoofer is stuck holding a position they didn't want. The tell is the pattern: fake-side orders appear right before a real order on the other side, and get cancelled within milliseconds of that real order filling or the market moving.

In the US, spoofing was made explicitly illegal under the Dodd-Frank Act (2010) and is prosecuted under both the Commodity Exchange Act and securities fraud statutes. The best-known case is CFTC v. Coscia (2016), the first criminal conviction under the new anti-spoofing law: a futures trader used algorithms that placed large orders, cancelled them within a fraction of a second of a small real order filling, and repeated this thousands of times.

Catching it

Exchanges and regulators run pattern-based surveillance that flags orders with unusually short lifetimes, a high cancel-to-fill ratio concentrated on one side of the book, and a consistent timing relationship between the fake-side cancellations and profitable trades on the real side. A trader who genuinely changes their mind occasionally looks similar to a spoofer occasionally — the case is built on the pattern repeating at a scale and consistency that innocent order management doesn't produce.