In today’s financial markets — increasingly rapid and fragmented — certain forms of manipulation operate in an almost invisible manner, insinuating themselves at the most delicate point in the system: the order book. Among these, spoofing and layering stand out as the most widespread, insidious and, at the same time, the most difficult to detect. They do not alter fundamentals, they do not generate conspicuous transactions, and they leave no obvious trace. Yet they affect price formation, the perception of liquidity, and the behaviour of the algorithms that today govern a very significant share of all trading activity.
Understanding them means entering the microstructure of the market and observing what happens a few milliseconds before a price is formed. It is there that the equilibrium between supply and demand is either established — or distorted.
Spoofing: the power of an instantaneous illusion
Spoofing is an apparently simple form of manipulation: it consists in placing highly visible buy or sell orders close to the current price, with the predetermined intention of cancelling them before they are executed. The order is not placed to be filled, but to produce a psychological and mechanical effect on the market. The book tilts abruptly, displaying a pressure that does not in fact exist. Participants react, algorithms adjust their quotes, and the price moves in the direction sought by the manipulator. An instant before being hit, the order disappears, leaving the market in an artificially unbalanced state.
In the United States this conduct is defined with great precision by the Dodd-Frank Act, which qualifies spoofing as “bidding or offering with the intent to cancel the bid or offer before execution.” The CFTC has further developed this framework, emphasising how the practice aims to create “a false impression of liquidity or depth,” thereby inducing other market participants to make decisions based on signals devoid of any real substance.
Layering: manipulation by design
Where spoofing relies on a single sharp and immediate strike, layering represents its more sophisticated evolution. Rather than one large order, the manipulator builds a stratification of smaller orders distributed across multiple price levels. The effect is more credible, less abrupt, and above all more difficult to distinguish from the legitimate activity of an aggressive market maker. The pressure on the market does not stem from the impact of a single order, but from the gradual perception that a growing interest exists across a particular band of the book. Here too, cancellation always precedes execution, but it is progressive — orchestrated so as to accompany the movement of the market. The CFTC describes this strategy as a pattern of “non-bona fide” orders designed to push prices without any genuine intention of trading.
A clear but complex regulatory framework
At the regulatory level, the United States and Europe converge in characterising these conducts as forms of market manipulation. In Europe, the primary reference is Regulation (EU) 596/2014 — the MAR — which considers manipulative any order capable of providing “false or misleading indications” as to the supply, demand or price of a financial instrument. The MAR’s technical annex is even more explicit when it lists among typical examples the entry of orders that “give a false impression of the depth of the market.” This is, in substance, the European definition of spoofing.
The MiFID II Directive completes the picture by requiring intermediaries — and algorithmic operators in particular — to adopt surveillance systems that prevent strategies liable to generate disorderly market conditions. In other words, it is not only prohibited to manipulate: it is also prohibited to create the conditions under which a manipulative strategy may insinuate itself into the order flow.
In the United States, the regulatory corpus is equally precise. The Dodd-Frank Act, the SEC and the CFTC have over the years built a regulatory framework in which manipulation of the order book — whether through individual orders or recurring patterns — is treated as conduct capable of undermining confidence in the market. It is no coincidence that the most significant enforcement proceedings of recent years have concerned precisely these practices.
The cases that changed the history of market surveillance
The best-known case is undoubtedly that of Navinder Singh Sarao, the British trader accused of having contributed to the Flash Crash of 6 May 2010 through complex spoofing and layering strategies on the E-mini S&P 500 futures contract. That sudden collapse — which sent the index plummeting before a rapid recovery, all within a matter of minutes — served for years as the most dramatic illustration of the market’s fragility when visible liquidity is manipulated.
In the mid-2010s came the case of Michael Coscia, the first trader to be convicted on criminal charges in the United States for spoofing. His scheme, based on fictitious orders in energy and metals futures, became a jurisprudential landmark. Investigations followed that implicated trading desks at major international banks: Deutsche Bank and UBS were subject to CFTC enforcement actions for manipulation in the Treasury market, whilst in 2020 JPMorgan accepted a record sanction of USD 920 million for long-standing manipulative practices in the precious metals market. With this last case, the scale of the manipulation ceased once and for all to be perceived as the isolated behaviour of a lone trader.
Where the real impact originates: price microstructure
Spoofing and layering do not alter fundamental valuations, but they intervene at the most sensitive layer of the market: its microstructure. Their effectiveness derives from the ability to artificially alter the perception of liquidity, inducing rapid movements that other participants — human or algorithmic — interpret as genuine signals.
A sudden “wall” of buy orders can prompt market makers to narrow their spreads or raise their quotes. A stratification of sell orders can induce trend-following algorithms to intensify downward pressure. And when the fictitious orders vanish, the resulting liquidity gaps produce sharp movements — sometimes sufficient to trigger stop-loss orders or generate technical breaks that find no support whatsoever in the fundamentals.
This is a phenomenon that is amplified in high-frequency markets, where the behaviour of an algorithm influenced by distorted information can propagate instantaneously to dozens of other algorithms, multiplying the initial effect.
How authorities identify manipulation
To identify these conducts, regulators do not focus on the individual order but on overall behaviour. They analyse the order flow, the sequence of cancellations, the interaction with genuine orders, and the effects on price over fractions of a second. Patterns of excessively repeated cancellations, large orders consistently placed away from the executable price, stratifications that disappear as soon as a genuine order approaches execution: all of these elements contribute to building the picture of a manipulation.
It is demanding work, requiring advanced temporal reconstruction techniques, behavioural models and tools developed specifically to analyse high-frequency market data. It is precisely this integrated approach — statistical, temporal and behavioural — that allows authorities to distinguish an aggressive but legitimate order from a manipulative strategy.
Conclusion
Spoofing and layering today represent some of the most studied, regulated and prosecuted forms of manipulation — not because they alter market fundamentals, but because they affect the very architecture of price formation. They operate in the silence of a few milliseconds, creating signals that do not exist and pushing the market towards movements that have no real underlying support. In an environment dominated by algorithmic flows and instantaneous liquidity, these strategies reveal that the most vulnerable element of the market is not information, but the perception of liquidity.
Understanding these dynamics means understanding how the modern market functions: knowing where its fragilities lie, how they manifest themselves, and how they can translate into movements capable of influencing other participants. It is in this awareness — and in the ability to read its signals — that a significant part of the work of those who analyse, interpret and explain the financial markets is conducted today.