Coordinated Market Abuse: Five Patterns Surveillance Misses

The matched-order loop. Two accounts enter buy and sell orders at the same price and size, timed within milliseconds. The trades print as legitimate volume. The purpose is to manufacture a closing price, trigger a stop-loss, or meet a volume threshold for a listing requirement. The SEC's enforcement division has cited this pattern in cases involving penny stocks and exchange-traded products.

The information cascade. A group of traders shares non-public material information through encrypted messaging apps. One trader acts on the information first. The others follow in sequence, staggered to avoid detection. The pattern shows up as a cluster of accounts entering the same position within a narrow time window, with no public catalyst. The DOJ has prosecuted this as insider trading even when no single trader held a large enough position to trigger a filing.

The cross-product squeeze. A group accumulates a large position in a derivative or cash instrument, then coordinates buying in a related market to force a price dislocation. The profit comes from the derivative leg. The pattern has appeared in commodity markets, where a group buys physical supply while shorting futures, then squeezes the delivery mechanism. The FCA has flagged this in metals and energy trading.

Surveillance teams that map account relationships, chat-room membership, and order-timing correlations catch these patterns. Teams that only flag individual position limits do not. The difference is the network view.