What Is Spoofing in Futures Trading, and Where Is the Line?

Spoofing is entering a bid or an offer that you already mean to cancel before anybody can trade against it. Paragraph (5) of 7 U.S.C. 6c(a) makes that unlawful for any person, wherever the trading sits inside a registered entity's market or its rulebook, and its spoofing prong turns on your intent at the instant the order left your hands.

Pulling an order is ordinary market behaviour, which is why the subject confuses traders who cancel all day. The offence is placing one you already meant to pull before it could fill: the order itself looks like any other, and the intent behind it is what the statute reaches. That intent sits in your head, which is why the regulator and the exchange have both written at length on how they read it.

What is spoofing in futures trading?

Spoofing is the placing of a bid or offer that the trader means to pull before anyone can fill it. The statute supplies the definition: 7 U.S.C. 6c(a)(5)(C) reaches spoofing, along with conduct of the same character or known by that name in the trade, and then defines the word in a parenthetical — "bidding or offering with the intent to cancel the bid or offer before execution".

Paragraph (5) covers three practices, and spoofing is the third. The first is violating bids or offers. The second is disregarding the orderly execution of transactions in the closing period, either deliberately or recklessly. The CFTC's guidance on the paragraph reads the spoofing prong as reaching bids and offers in every product at every registered entity, designated contract markets and swap execution facilities alike.

Section 747 of the Dodd-Frank Act, enacted 21 July 2010, inserted paragraphs (5) through (7) into section 6c(a); paragraph (6) gives the CFTC authority to write rules against those practices and against other practices disruptive of fair and equitable trading.

Is cancelling an order spoofing?

Cancelling an order is not spoofing when you entered it meaning to trade. The CFTC addressed this in its interpretive guidance and policy statement on the disruptive practices provision, published at 78 FR 31890 and effective 28 May 2013: a spoofing violation requires intent above the level of recklessness, and the Commission said it does not read reckless conduct as a violation of the spoofing prohibition at all. A footnote extends that to accidental and negligent order activity.

The guidance then draws the line. Where the cancel is part of a good-faith effort to get a trade done, there is no violation, and the Commission named two everyday examples: a partly filled order, and a properly placed stop-loss order. CME's own FAQ on Rule 575 makes the matching point about a protective stop: hoping the trigger never arrives is fine, so long as the order carries a real willingness to trade if it does.

Two warnings attach. A partial fill is not an automatic exemption: the guidance says conduct may still violate the prohibition where the intent at placement was to pull the whole order, whatever happened to it afterwards. And no pattern is required: the Commission reads the statute so that a single instance can violate it, provided the prohibited intent was there.

How does a spoof order differ from an order you cancel in good faith?

A spoof order and a good-faith order you later cancel are separated by the intent held at entry, and everything else follows from that. The intent and single-instance lines below come from the CFTC's 2013 guidance; the change-of-circumstances cancel, exposure time, partial fills and mistaken entries come from the FAQ CME published with Rule 575.

What does CME's Rule 575 add to the federal rule?

Rule 575 is the exchange-level version of the prohibition, and the rule CME Group's Market Regulation Department assesses order activity against. CME filed it with the CFTC on 28 August 2014 as a Regulation 40.6(a) certification, adopted across CME, CBOT, NYMEX and COMEX with an effective date of 15 September 2014, alongside Market Regulation Advisory Notice RA1405-5, which carries the rule text, a FAQ and worked examples. The advisory notes that before 575 the exchanges pursued the same conduct under their general conduct rules.

The rule opens with a positive requirement: an order has to be placed with a bona fide transaction in view, and a non-actionable message has to have a legitimate purpose behind it. Four lettered prohibitions follow. The first carries the statutory offence and goes further: the intent has to be present at the time of order entry, and it reaches an intent to modify the order to dodge execution as well as to cancel it outright. The second covers messages sent to mislead other participants. The third covers messages meant to overload, delay or disrupt exchange or participant systems. The fourth reaches an intent to disrupt orderly trading or fair execution, and is the only one that also catches reckless disregard for that harm.

Two scope lines matter. The rule governs open outcry and electronic activity alike, and it is in force in every market state — before the open, into the close, and through all sessions. The federal guidance says much the same about the statute, extending it to any bid or offer entered in a pre-open period or another halt the exchange controls.

What does an exchange look at when it reviews your order activity?

Market Regulation weighs an explicitly non-exhaustive set of factors, listed in the FAQ published with Rule 575; grouped, they come to four kinds of evidence. The first is the shape of the order: its size against market conditions when it was placed and against your own position and capitalisation, whether you could have handled the risk had the whole thing filled, how long it sat exposed, and where it stood in the queue.

The second is your own history — your pattern of activity over time, your entry and cancellation behaviour, and what you were doing in related markets. The third is market effect: the effect on other participants, conditions in the affected market and in related ones, the prices of the bids, offers and trades that came before and after yours, and any movement in the best bid, best offer, last sale or Indicative Opening Price your entry caused.

The fourth is the inference about intent, which the FAQ frames as three questions: whether you set out to make others trade when they would have stayed out, whether you were after a price move rather than a change in your position, and whether you meant to create misleading conditions. On "misleading", it says the test is an intent to create a false impression of depth or interest, generally found where the purpose was to induce another participant to act. For the trader's side of that picture, see how the DOM displays resting depth.

Which ordinary order tactics are explicitly allowed?

Several tactics that look suspicious in the abstract are addressed in the Rule 575 FAQ and permitted. There is no minimum time an order must rest to be safe: the FAQ prescribes no safe harbour for the duration and treats it as one factor among many.

An order entered for a bona fide trade, then modified or cancelled because circumstances changed, is not a violation. Nor is parking orders at several price levels to earn queue position and pulling them as the market moves, absent other indicia of a disruptive purpose. A two-sided quote in unequal size is fine where both orders are bona fide, and prohibited intent on either side, recklessness included, turns it into a violation. All of those tactics run on resting limit orders, and in each one the FAQ applies the same test: did the trader enter the order to execute a bona fide transaction.

Iceberg orders get the same treatment — permissible in themselves, with the FAQ supplying a counter-example in which one becomes part of a scheme: an iceberg pre-positioned on the bid while larger size is layered on the offer to push price down into it. The fat-finger case is carved out of Rule 575 specifically, though the FAQ notes other exchange rules may still reach an accidental order.

What does a real spoofing case look like?

Release 9118-25, a settled CFTC action announced on 9 September 2025, shows the pattern at an individual's scale: a Colorado trader and the Illinois firm he traded for, E-mini S&P 500 and E-mini Nasdaq 100 futures at the Chicago Mercantile Exchange, May to December 2022.

He worked both sides of the book. The orders he wanted done often paid the spread and filled on entry; the orders he never meant to keep rested on the far side and came out once the first side had filled. The Commission found that second set was entered to mislead other participants, and his order flow showed it: counted in contracts, the orders he pulled outnumbered the ones he traded five to one across the period, and at the top price levels they usually made up a large share of the resting orders. Other traders came to meet his genuine orders, and the order finds his own fills came faster, or on better terms, as a result.

The penalty was $200,000 on the two respondents jointly and severally, with a twelve-month commodity-interest trading ban for the trader and a cease-and-desist order against both.

What are the penalties for spoofing futures?

Spoofing carries civil and criminal exposure separately. The $200,000 above is a civil penalty with a trading ban attached, imposed in the Commission's own settled order. The criminal ceiling sits in 7 U.S.C. 13(a), where the conduct listed in that subsection is a felony carrying a fine of up to $1,000,000 or up to ten years' imprisonment, or both, plus the costs of prosecution. Paragraph (a)(2) of that subsection covers, among other conduct, knowingly violating subsections (a) through (e) of section 6c — and the spoofing prohibition sits inside subsection (a). An amendment note on the section records that the ten-year term replaced five years in 2008.

Section 13(b) adds a consequence that outlasts a sentence. Anyone convicted of a felony under the section is suspended from registration, refused registration and reregistration for five years or longer at the Commission's determination, and barred for the same minimum from any market the Commission regulates. The Commission may decide a bar is not needed to protect the public interest, and may shorten the period on petition for good cause.

What do spoofing rules mean on a funded simulated account?

The prohibition is a house rule as well as a federal one. Lumen Futures lists spoofing and disruptive practices among its prohibited conduct: entering bids or offers you intend to cancel before they fill, whether to create the appearance of depth, to overload the quote system, or to delay somebody else's execution. High-frequency and mass order entry aimed at the platform instead of the market sits in the same list, and breaking any of those rules may end the account.

Accounts here are simulated and run on live market data, in evaluation and after funding alike, which changes the consequence of a breach without changing the standard applied. The federal prohibition and our house rule both turn on intent at the moment of entry, and the factors the exchange lists for reading it are the trail your order flow leaves: size against your own position, your history of entries and cancellations, the prices your entry moved.

Frequently asked questions

Is it spoofing if I cancel a limit order?

No, where you entered it meaning to trade. The CFTC's 2013 interpretive guidance says a cancellation made as part of a good-faith effort to consummate a trade does not violate the spoofing prohibition, and names partly filled orders and properly placed stop-loss orders as examples. CME's Rule 575 FAQ says the same for an order modified or cancelled because circumstances changed after entry. The offence needs the intent to cancel present at the moment of entry.

How long does an order have to sit in the book to be safe?

There is no such period. The Rule 575 FAQ states that no safe harbour is prescribed for how long an order sits exposed, and treats that duration as one factor among many that Market Regulation considers. It sits alongside factors such as order size relative to market conditions and to your own capitalisation, and your historical cancellation activity.

Does spoofing law apply before the market opens?

Yes. The CFTC's interpretive guidance reads the statutory prohibition as reaching any bid or offer entered in a pre-open period, and in other trading halts the exchange controls. CME's Rule 575 is explicit on the same point: it is in force in every market state, taking in the period before the open, the closing period and every trading session, and it covers open outcry as well as electronic activity.

How much trouble can one trader actually get into?

The exposure runs on two separate tracks. Civilly, the settled action the CFTC announced on 9 September 2025 carried a $200,000 penalty, imposed jointly and severally on an individual trader and the firm he traded for, plus a twelve-month commodity-interest trading ban for the trader. Criminally, 7 U.S.C. 13(a) treats a knowing violation of section 6c(a) as a felony reaching $1,000,000 or ten years' imprisonment, or both, with the costs of prosecution on top. Conviction also brings a bar of at least five years from any CFTC-regulated market under section 13(b), unless the Commission finds the public interest does not require it.