Unlike footprint, which records completed transactions that cannot be altered, the DOM shows orders that exist only until cancelled. That cancellability is the root of every manipulation tactic in the order book. A large order sitting on the bid is a statement of intent, not a commitment. Understanding how that fact is exploited changes how you read everything on the DOM.
Fake orders to move real participants
Spoofing is placing a large, visible order on one side of the DOM with no intention of letting it execute. The goal is to create the impression of supply or demand that does not exist. Other participants see the large order, adjust their behavior, and the spoofer benefits from the resulting price movement. Then the spoofer cancels the order before it can be tested.
A classic example: a trader wants to buy. They place a large ask (sell order) above the current market to create the impression of supply. Sellers see the large ask and lower their prices to get ahead of the apparent supply. The buyer lifts the now-lower asks, fills their position, then cancels the large fake ask. The fake supply signal caused sellers to undercut each other, giving the buyer a better fill.
Spoofing is illegal in regulated US futures markets under the Dodd-Frank Act (2010) and equivalent regulation globally. Enforcement exists but is difficult and slow. Practically: spoofing happens in liquid markets every session. Assume some portion of the DOM at any moment contains orders that will not execute. Never treat large DOM orders as guaranteed support or resistance until they are tested.
Spreading the fake orders thin
Layering is spoofing across multiple price levels simultaneously. Instead of one large fake order, a layerer places multiple moderate-sized fake orders at five or ten consecutive price levels on one side. From a distance, the DOM looks like a deep, thick wall of supply or demand. The effect is the same as a single spoof order but is harder to identify and harder to prove.
Layering is particularly effective at creating the impression of structural levels. A DOM that shows 300 contracts at ten consecutive ask levels above the market looks like a genuine ceiling. If all ten levels are fake orders from the same participant, the entire wall disappears simultaneously when the layerer cancels. What looked like strong resistance was nothing.
Real vs FakeHow to distinguish genuine orders
No method is foolproof. But these patterns suggest real orders versus fake ones:
| Bid | Price | Ask |
|---|---|---|
| 5248.75 | 145 | |
| 5248.50 | 180 | |
| 88 | 5248.25 | 92 |
| 2,600 | 5248.00 | |
| 310 | 5247.75 |
| Bid | Price | Ask |
|---|---|---|
| 5248.75 | 145 | |
| 5248.50 | 180 | |
| 88 | 5248.25 | 92 |
| 2,600 | 5248.00 | |
| 310 | 5247.75 |
Patterns that indicate real orders:
- The order holds and does not move as price approaches
- When price reaches it, tape activity confirms contracts executing at that price
- The order is at a known structural level (VP/MP reference) with independent reason to exist
- Footprint shows absorption at the level concurrent with the DOM bid holding
Patterns that suggest spoofing:
- Large order disappears the moment price gets within one or two ticks
- Order appears repeatedly at the same level but never actually fills
- DOM shows large size but the tape shows no executions at that price
- Multiple levels refresh simultaneously (a layering wall dropping all at once)
How to reduce spoofing risk
You cannot eliminate the risk of being misled by fake orders. You can reduce it:
Test before trusting. Do not act on a DOM order until price actually reaches it. An order that has not been tested has not proven itself. An order that holds when tested carries more weight.
Require tape confirmation. If a large DOM bid is at a VP level and price tests it, the tape should show bid-side transactions executing. Tape activity confirms execution. No tape activity means no execution, regardless of what the DOM shows.
Confirm with footprint. Footprint at a level cannot be faked. It shows completed transactions. If the DOM shows a large bid and the footprint simultaneously shows absorption (high bid volume, price not moving), you have two independent sources. If the DOM shows a bid but footprint shows no absorption, be cautious.
Weight structural context heavily. A large DOM order at a VP composite POC has a plausible independent structural reason to be there. A large DOM order at a random price has no independent justification. Structural confluence makes fake orders less likely, not impossible.
Useful but not trustworthy alone
DOM is the most manipulable data source in your toolkit. That is not a reason to abandon it. It is a reason to use it correctly: as additional context layered on top of VP structure and footprint confirmation, not as a standalone signal. The traders who use DOM most effectively have enough screen time to recognize what real orders look and behave like. They are still wrong sometimes. Go in with that expectation.
Knowledge Check