The first time I got faked out by a wall I did not even know it had happened. There was a huge bid sitting a little below price, big enough that I assumed it would hold, so I bought expecting the wall to catch any pullback. Price drifted down toward it, the wall thinned, then it just was not there anymore, and I was long into a move that kept going. I spent a while afterward convinced someone had eaten through it. They had not. The order was never meant to trade. It was meant to be looked at, by me, and it worked.
That is the whole game with spoofing and layering. Somebody places size they have no intention of filling, you read that size as real interest, and you make a decision based on liquidity that evaporates the moment it might actually get hit. Once you have been on the wrong side of it a couple of times you start reading depth very differently.
What spoofing and layering actually are
Spoofing, in the plain sense, is placing an order you intend to cancel before it fills, specifically to move other people. You want to sell, so you post a large fake bid to create the impression of demand, let the buying pressure lift price, sell your real position into that strength, and pull the fake bid before anyone can trade against it. The order was a signal, not a trade.
Layering is the same idea with better production values. Instead of one conspicuous order you stack several smaller ones at successive price levels on one side of the book. It looks less like a single suspicious wall and more like organic, tiered interest, which is exactly the point. The stack pushes the visible imbalance in the direction you want, you fill your real order on the other side, then you cancel the whole ladder. Regulators in most major markets treat both as market manipulation because the intent is to deceive, and intent is usually inferred from the pattern of placing and cancelling rather than from anything the person says.
The honest caveat here is that not every order that gets cancelled is a spoof. Real traders cancel constantly. Market makers reprice, arbitrage bots chase moving references, someone changes their mind. Cancellation by itself proves nothing. What you are looking for is a specific shape of behavior, and the shape is more telling than any single event.
The signatures in the book
Quotes that are meant to be seen rather than filled tend to behave in ways that real resting liquidity does not. A few things I actually watch for.
- Walls that flicker away as price approaches. Genuine liquidity gets more valuable the closer price comes, so it usually stays or even grows. A fake wall does the opposite. It sits there confidently while price is far away and thins out or vanishes right as the trade would happen. If a big level keeps retreating from you, it was never going to trade.
- Size that lives on one side only. Layering typically stacks depth on the side the operator does not actually want to trade, to push the imbalance. If one side of the book is suspiciously deep and the other is thin, and the deep side never seems to absorb anything, be careful about reading it as support or resistance.
- Round, oversized, and lonely. Fake orders are often placed to be noticed, so they skew toward big round numbers and sit well above the typical resting size for that instrument. Something roughly ten times the normal order that appears at a clean level and does nothing but sit is worth a second look.
- Placement and cancellation that tracks price, not fills. Watch whether large orders appear and disappear in time with price movement rather than in response to actual trades. Liquidity that blinks in and out synchronized with the tape, and almost never gets filled, is doing something other than trying to trade.
- A wall that reappears after the move. Sometimes the same size shows up again once the danger of getting filled has passed. Real orders that got pulled for a real reason rarely come back looking identical a minute later.
None of these is conclusive on its own. Together, on the same level, over a few minutes, they start to tell you the level is theater.
A quick way to check before you lean on a level
When I see depth I want to trade around, I run a rough mental checklist rather than trusting the number.
- Is this size normal for the instrument, or is it an outlier? Outliers earn suspicion.
- Does the level hold when price actually reaches it, or does it thin out on approach? Watching one approach is worth more than staring at the resting size.
- Is there real trade printing into it, or is it all placement and cancellation with no fills? Liquidity that never trades is not liquidity.
- Is the imbalance one-sided and persistent in a way that conveniently favors a move? Convenient imbalances are often manufactured.
The practical rule I follow is simple. Do not treat a visible wall as a reason to enter until I have seen it absorb something. Support that has taken real sells and held is information. Support that is only a big number on a screen is a suggestion, and sometimes it is a trap set by someone who wants me to buy so they can sell to me.
How venues police it, and why that matters to you
Regulated venues, meaning most listed futures and equities markets, treat spoofing and layering as prohibited manipulation, and enforcement has historically leaned on the cancellation pattern and the timing of the trader's real fills. Exchanges run surveillance that flags high placement-to-fill ratios and orders that consistently cancel just before they would trade. It still happens, because catching it after the fact is easier than preventing it in real time, but there is a real cost when someone gets caught, and that changes behavior at the margin.
Unregulated and lightly regulated venues are a different story. On a lot of crypto order books there is no meaningful surveillance regime, and in some cases the venue itself has little incentive to clean up displayed depth that makes the market look more liquid than it is. Spoofing is cheaper and safer there, so you should assume more of the depth you see is decorative. The reasonable adjustment is to weight displayed liquidity by where it lives. On a regulated venue a big resting order is more likely to mean what it says. On a thin, unpoliced venue, treat the far reaches of the book as roughly fictional until price proves otherwise.
The takeaway I keep coming back to is that depth is a claim, not a fact. Most of the book is honest, but the parts that would matter most to your trade are exactly the parts most worth faking. So read walls as things that have to earn your trust by trading, watch how a level behaves on approach instead of trusting its size at rest, and size your entries against liquidity you have actually seen change hands. You will get faked out less, and the times you do, you will notice faster.