What is Spoofing? Definition, Formula, and Example
Spoofing is placing large orders with no intent to execute them in order to fake supply or demand and move the price, then canceling before they fill — a federal crime under the Dodd-Frank Act.
What is Spoofing?
Spoofing is the practice of entering large buy or sell orders on an exchange with the intent to cancel them before execution, in order to create a false impression of supply or demand and move the price in a direction that benefits a separate, genuine order the spoofer actually wants filled. A trader might stack the offer side of the order book with large sell orders to make the market look heavy, wait for other participants (including algorithms reading order-book depth) to sell into that pressure, buy the dip cheaply through a smaller resting order, then cancel the large sell orders before they're ever executed. The defining element is intent: placing and canceling orders is completely normal market activity, but placing them specifically to deceive other participants about real supply and demand is illegal.
How It's Identified
Regulators and exchange surveillance systems flag spoofing using pattern-based criteria, not any single formula, but the recurring fingerprints are:
1. Order-to-trade ratio — a large volume of orders placed relative to how many actually execute.
2. Cancellation timing — orders canceled within milliseconds to a few seconds of being placed, often right before they'd be reached in the queue.
3. Layering — multiple orders stacked at successive price levels on one side of the book to exaggerate depth.
4. Correlated fills — a genuine order on the opposite side of the book that fills favorably right as the spoofed orders are pulled.
Spoofing was explicitly criminalized in the U.S. under Section 747 of the 2010 Dodd-Frank Act, codified at CEA Section 4c(a)(5)(C), which defines it as "bidding or offering with the intent to cancel the bid or offer before execution."
Worked Example
The best-documented case is Navinder Singh Sarao, a London-based futures trader whose spoofing algorithm placed and canceled huge numbers of E-mini S&P 500 futures orders and was found by the CFTC and DOJ to have contributed to the May 6, 2010 "Flash Crash," during which the Dow dropped roughly 1,000 points intraday before recovering. Sarao pleaded guilty to one count of spoofing and one count of wire fraud. A federal court ordered him to pay $25,743,174.52 in civil monetary penalties plus $12,871,587.26 in disgorgement, and in January 2020 he was sentenced to one year of home confinement — a lenient outcome the judge attributed to his cooperation with prosecutors and an Asperger's diagnosis, not to any doubt about whether the conduct occurred.
When Traders Use It (and Why Retail Traders Should Care)
Spoofing itself is illegal — no legitimate trader should attempt it, and this entry describes it for identification and defensive purposes, not as a technique to deploy. Where it matters to retail and prop traders is defensive: recognizing that a sudden wall of size on the bid or offer in a thinly traded name may be a spoof rather than genuine resting interest helps explain otherwise-confusing price action, particularly in level 2 data and order flow reads. Traders who see size appear and vanish repeatedly at the same level without ever trading through it are watching a pattern consistent with spoofing or layering, and should treat that displayed liquidity as unreliable for gauging real supply and demand.
Limitations and Common Misconceptions
Not every canceled order is spoofing — the vast majority of order cancellations in modern markets come from market makers and algorithms legitimately updating quotes as prices move, which is why intent is the legal threshold, not cancellation alone. Spoofing is also frequently confused with legal-but-aggressive tactics like iceberg orders or normal quote adjustment; the distinguishing factor regulators look for is a documented pattern of orders that were never meant to fill, corroborated by trader communications or algorithmic design, not just a high cancel rate. Finally, spoofing prosecutions require proving subjective intent, which is why enforcement cases are relatively rare relative to how often the pattern shows up in raw order-book data — surveillance systems flag far more candidate patterns than result in charges.