Exchange and Market Infrastructure Cases: The Trade Is Only Part of the Story

In exchange and market infrastructure cases, insiders can connect the trading record to the systems, controls and decisions behind it. An order reaches the market, a trade appears on a screen and an account records the result. If you work in trading technology, market surveillance or clearing operations, you may know what those finished records leave out: the canceled orders, the changed settings or the warning that reached someone who could act.

This page follows that operational trail, from market access to customer assets and the people responsible for checking them. Our broader page on auditors and securities fraud gatekeepers follows the work behind an audit opinion and the representations investors rely on.

The Market Function Determines the Evidence

The firm executing an order, the firm holding customer assets and the transfer agent moving securities control different parts of the transaction. The same business can act in more than one capacity, so we start with what it actually controlled.

For a trading employee, the useful record may be the order history behind an execution. For someone in customer-asset operations, it may be a reserve calculation, a clearing agreement or instructions authorizing a transfer. An account statement, a trading log and a confirmation answer different questions about the same money. We connect those records to the responsibility of the firm that produced them.

Orders, Cancellations and the Trade in Between

An executed trade can be only part of a manipulation. The orders entered around it, including orders later canceled, can show how someone created the price at which the trade occurred.

In testimony at the Senate’s December 2010 hearing on U.S. capital markets, the Financial Industry Regulatory Authority described its action against Trillium Brokerage Services. The regulator said the firm’s traders entered layered orders that created a false appearance of buying or selling pressure. That pressure induced other market participants to trade against limit orders Trillium had already placed. FINRA said the firm was fined over $1 million and its traders reaped nearly $575,000 in improper profits. Other market participants traded without knowing the pressure was false.

The execution alone leaves out the orders that created the pressure. The Financial Industry Regulatory Authority described what happened to those orders:

A surveillance insider may recognize that sequence in order timestamps, cancellations and executions. A developer may know which code version or parameter change produced it. The evidence behind the trading pattern connects those records with communications about what the strategy was intended to do.

Market Data Has to Preserve the Sequence

A trading pattern can cross venues, while the records needed to explain it sit in separate systems. In its testimony at the same hearing, the Securities and Exchange Commission described differences in data formats, compatibility and clock synchronization that complicated reconstruction of a trader’s activity. It also described tracing orders through layers of intermediaries to identify the original trader.

The Financial Industry Regulatory Authority argued in that hearing for uniform, reliable data and timely access to it. A trading-firm witness explained why investigators needed direct exchange feeds and synchronized data to rebuild order books. For an insider, the comparison starts with which feed a system used and how it assigned timestamps.

We examine the sequence with the person who understands those records. The useful connection may be between an order seen by one venue, a cancellation recorded elsewhere and the account that benefited from the execution. Knowing how the systems label and time those events can make a scattered set of records intelligible.

Market Access Controls Before an Order Arrives

Market access puts a broker between the customer sending orders and the market receiving them. In its 2010 testimony, the Securities and Exchange Commission described its newly adopted market-access rule as requiring pretrade risk controls and supervisory procedures, including restrictions on unfiltered access to exchanges and alternative trading systems. The agency tied those controls to the financial condition of other market participants and clearing organizations.

The Financial Industry Regulatory Authority’s testimony described screens intended to prevent erroneous orders and enforce credit or capital thresholds. It also described examining the ownership of firms receiving access and what their algorithms did. For an insider who knows how a customer entered the market, we examine the access arrangement, the settings in use and the records showing what happened to the orders. Those details connect a control described on paper to its operation in the trading system.

Clearing and Custody Records Follow the Money

Customer-asset protection reaches cash reserves and the firm’s possession or control of customer securities. The useful comparison runs from the customer statement to the reserve workpapers, clearing agreements, confirmations and any liens over the assets. Someone preparing the calculation may see a problem that the balance printed on the statement does not reveal.

The Securities and Exchange Commission’s 2016 Merrill Lynch proceeding concerned allegations that reserve and custody practices exposed customer assets. The order required a $358 million civil penalty for mixed violations. It described a transaction that bought shares and simultaneously sold them back with delayed settlement, accompanied by a purchased put option and a sold call option. The delayed settlement kept the margin loan and the customer debit in the reserve formula open. In the SEC’s account, we see a one-day trade doing months of work in the reserve calculation.

A trade’s settlement terms can affect the number used to protect customer cash, and the workpapers show how the transaction entered that calculation. The broader custody and customer-asset cases follow who held the assets, who could move them and what customers were told.

Who Saw the Alert and What Happened Next

Surveillance records and management’s response belong in the same account. Order histories can show a pattern, while communications, committee minutes and responses to audit questions show what reached people inside the firm. A controls disclosure and the internal response to a warning may tell different parts of that story.

The Significance of Whistleblowing as an Anti-Fraud Measure, published in the Journal of Forensic & Investigative Accounting in 2018, examined occupational-fraud survey data. The study found that whistleblower detection became more likely as more people participated in a fraud, and also as organizations used more anti-fraud measures.

For someone in market operations, we work through what the system was designed to do, what the records show it did and who understood the difference. Your explanation of a setting, an exception or a response to an alert can connect the trading activity to decisions inside the business. We connect that account to the conduct described in the complaint or order.

The Whistleblower Route Follows the Conduct

The Securities and Exchange Commission brings civil enforcement actions, while the Justice Department prosecutes criminal cases. The Financial Industry Regulatory Authority supervises and disciplines its member firms and associated people. Our page on the authorities that can address securities misconduct covers that broader division of responsibility. We assess the route with you against the conduct and evidence you know.

The Securities and Exchange Commission whistleblower award program can pay eligible whistleblowers a combined 10% to 30% of the money collected in a qualifying enforcement action. The action must impose more than $1 million in monetary sanctions. Where evidence concerns false claims for government money, that raises a separate question for us to assess. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When You Know What the Trading Records Leave Out

If you know how orders, access controls or customer-asset calculations differed from the account given outside your team, speak with our whistleblower experts about the system you know. We stay with you from the first call through the whole process, build your strongest securities fraud whistleblower case and bring in securities fraud whistleblower lawyers who know exchange and clearing systems.