CM010 · Capital Markets

Suspicious Order Patterns

Suspicious order patterns are the family's purely order-flow-behavioural typology: quote stuffing, momentum ignition, and abnormal cancel/amend rates. There is no single rule that condemns a trading account here — the finding is a convergence finding: it lives in how abnormal the cancel/amend rate is, how intense the peak order-submission rate is, how far price moves after an order burst relative to the instrument's normal move, and how far the average order size departs from the account's normal size.

Article 16 of the EU Market Abuse Regulation (MAR) requires trading venues and firms to maintain effective arrangements, systems and procedures to detect and report suspicious orders and transactions. MAR Annex II and the accompanying ESMA Guidelines on indicators of manipulative behaviour name quote stuffing and momentum ignition explicitly as indicators of manipulative order-flow behaviour. CM010 operationalises both.

Risk indicators

Cancel/Amend Rate

• Cancel/amend rate far beyond what genuine trading activity produces
• Cancellations clustered in short bursts rather than spread across the session
• Orders entered and withdrawn before any realistic chance of execution

Quote Stuffing Intensity

• Peak order-submission rate well beyond the account's normal cadence
• Submission bursts timed around key price levels or reference points
• Order-book depth distorted by high-frequency, low-intent order flow

Momentum Ignition Signal

• Price move after the order burst well beyond the instrument's normal move
• Directional move immediately following a cancel/amend or submission spike
• Move not corroborated by underlying news, fundamentals or genuine volume

Order Size Anomaly

• Average order size well beyond the account's normal size
• Size anomaly concentrated in the same window as the order burst
• Order sizing inconsistent with the account's declared trading mandate

Investigation actions

1. Resolve the trader, the instrument and the venue operator.
2. Compute the cancel/amend rate (cancelled orders / total orders).
3. Compute the quote stuffing intensity (peak orders per second observed).
4. Compute the momentum ignition ratio (price move after the burst / instrument's normal move).
5. Compute the order size anomaly ratio (average order size / account's normal order size).
6. Score each of the four components against its band cut-lines.
7. Aggregate the weighted exposure score; escalate at or above the threshold.

Related typologies

Curated from fc-07-capital-markets-analytics-toolkit/typologies/CM010_Suspicious_Order_Patterns.md