· Alessandro Ruggieri

What Moves Price Before the Chart: Iceberg Orders, Absorption, and the Footprints You're Not Seeing

Order FlowInstitutional TradingBook DepthIceberg OrdersSpoofingFutures

What happens before the candle forms

Every candlestick on your chart is a summary. It tells you what happened after the fact: open, high, low, close. What it does not tell you is why the price moved, who moved it, and what was happening in the order book in the seconds before the move started.

For most retail traders, the chart is the primary source of truth. For the participants who actually move the market — institutional desks, algorithmic funds, professional market makers — the chart is irrelevant. They operate on a different layer of information: the order book, the tape, and the patterns that form in the flow of orders before price reacts.

This article explains what those patterns are, why they matter, and why they are invisible on any chart.

The order book: what the chart doesn't show you

The order book (also called Depth of Market or DOM) is a real-time list of all resting buy and sell orders at every price level. On the E-mini S&P 500, this means thousands of contracts lined up across dozens of price levels, constantly being added, modified, and canceled.

The chart shows you the result of this activity. The order book shows you the activity itself.

When a large buyer wants to accumulate a position without moving the price, they don't place a single large order visible to everyone. They use techniques specifically designed to hide their intentions. Understanding these techniques is the difference between seeing the market and understanding it.

Iceberg orders: the hidden size

An iceberg order is a large order broken into small visible pieces. Only a fraction is displayed in the order book at any time. When the visible portion gets filled, the next piece automatically appears.

For example: an institution wants to buy 500 contracts at 5,600.00. Instead of showing 500 on the bid (which would immediately signal their intention to every algorithm watching the book), they show 10. When those 10 get filled, another 10 appear. And another. And another.

From the chart's perspective, nothing unusual happens. Price stays at 5,600.00 while sellers hit the bid. But from the tape's perspective, something very specific is happening: the bid at 5,600.00 keeps getting hit and keeps refilling. The volume at that level accumulates far beyond what the visible book size would suggest.

This is absorption — genuine, hidden demand that only becomes visible through order flow analysis.

Why it matters for trading: an iceberg on the bid at a key level (VWAP, POC, standard deviation band) is one of the strongest signals that institutional money is defending that price. A trader who only sees the chart sees nothing. A trader who reads the order flow sees a wall.

Absorption: when the book refuses to move

Absorption happens when aggressive selling (market orders hitting the bid) is met by equally aggressive passive buying (limit orders constantly refilling at the same price). Price doesn't drop despite heavy selling volume.

On a chart, this looks like a quiet consolidation — a few small candles going nowhere. On the tape, it looks like a war: hundreds or thousands of contracts being sold into a bid that refuses to give way.

The distinction is critical. A chart-based trader might see "low volatility" and ignore the level. An order flow trader sees massive institutional activity and recognizes that the level is being defended.

When absorption ends and the sellers exhaust themselves, price typically moves sharply in the direction of the absorber. The chart shows a "breakout from consolidation." The order book showed the breakout was inevitable — the buyers had already won the battle before price moved.

Spoofing: the manufactured illusion

Spoofing is the practice of placing large orders with no intention of executing them. The goal is to manipulate the perception of supply and demand.

A common spoofing pattern on futures:

  1. A trader places 2,000 contracts on the ask (sell side), creating the appearance of massive supply
  2. Other participants see the large sell wall and hesitate to buy, or start selling
  3. While the fake sell pressure pushes price down, the spoofer quietly buys on the bid at lower prices
  4. Once filled, the spoofer cancels the 2,000-contract order — the supply was never real

On a chart, this sequence might show as a brief dip followed by a reversal. The chart gives you no information about why. The order book shows exactly what happened: fake orders manipulated sentiment, and real money moved in the opposite direction.

How to detect spoofing: large orders that appear on the book and disappear within seconds, especially at key price levels, are a strong indicator of manipulation. When you see a large bid or ask appear and then vanish, the operative question is: was that real liquidity, or was someone trying to move the market?

VWAP, POC, and standard deviations: the levels that matter

Not all price levels are equal. Institutional participants pay close attention to specific reference points that represent fair value and statistical boundaries:

  • VWAP (Volume Weighted Average Price): the average price weighted by volume for the session. Institutional algorithms frequently use VWAP as a benchmark — buying below VWAP and selling above it.
  • POC (Point of Control): the price level where the most volume has traded. It represents the market's consensus of fair value.
  • Standard deviation bands: statistical boundaries around VWAP. Price reaching +1 or +2 standard deviations signals overextension relative to the session's average.

When iceberg orders, absorption, or spoofing occur at one of these levels, the signal is amplified. An iceberg on the bid at VWAP is far more significant than an iceberg at a random price. The confluence of order flow activity with structural levels is what separates noise from actionable information.

The information gap

The core problem for retail traders is not skill or discipline. It is access to information. The patterns described above — iceberg detection, absorption analysis, spoofing identification, and their confluence with volumetric levels — require infrastructure that most retail setups don't provide:

  • Real-time processing of every tick
  • Statistical classification of order types
  • Level tracking with state memory (is this the first time price tests this level, or the third?)
  • Cross-referencing order flow activity with structural levels in real time

This is why most retail traders rely on charts: the alternative requires infrastructure that has historically been available only to professional desks.

That gap is closing. Tools like EchoTape Live now make it possible to see book depth, institutional flow detection, volumetric levels, and order flow analysis directly in a browser — without installing platforms, subscribing to data feeds, or configuring indicators. The same information that institutional desks use to make decisions, streamed live to your screen.

What changes when you see the order book

When you start reading the order book instead of the chart, three things change:

1. You stop being late. The chart tells you what happened. The order book tells you what is happening. Every candle you see already contains information that order book participants acted on seconds ago.

2. You understand why price moves. Instead of patterns and candles, you see actual supply and demand. You see who is aggressive and who is passive. You see whether a level is defended or abandoned.

3. You recognize manipulation. Spoofing, layering, and fake liquidity become visible. Instead of being the trader who reacts to manufactured moves, you become the trader who recognizes them.

The chart is not wrong. It is just late. And in markets where milliseconds matter, late is expensive.


If you want to see these patterns in real time without any platform to install, EchoTape Live streams order flow analysis, book depth, and institutional detection directly to your browser. See how it works.

Disclaimer.Legal Notice and Risk Warning

The software offered on this website is a computer product developed and distributed under a usage license. It does not constitute financial advice, investment recommendation, solicitation to invest, or asset management in any way. The software operates automatically exclusively on the user's trading platform and account, over which the user maintains full control and total responsibility. The developer has no access to the user's accounts, funds, or credentials. Trading financial instruments involves a high level of risk and may result in the partial or total loss of invested capital. Past results, including backtests or historical performance, do not constitute a guarantee or reliable indication of future results. By installing and activating the software, the user declares awareness of the risks associated with automated trading, confirms operating based on their own autonomous and informed decision, and acknowledges being solely responsible for the operations executed by the software on their account. The developer shall not be held liable for losses, direct or indirect damages, lost profits, or any other consequences arising from the use of the software. It is recommended to consult an independent financial advisor before operating in financial markets.

© 2026 Alessandro Ruggieri. All rights reserved.

Privacy Policy Cookie Policy info@alessandroruggieri.dev