Wash trading, smurfing and layering live in the shape of the flow: in what was cancelled, how fast, and by whom. Monitoring reads your own order feed and comes back with a finding per client, per book, per pattern.
Your export goes in as it is. Five stages later an alert names a client, a book and the pattern that fired, with the source row still attached.
Re-posting a batch is safe: event ids are derived from content, so a replay converges instead of double-counting.
Order-book abuse is not on-chain abuse with different words. It shows up in the shape of the flow: in what was cancelled, how fast, and by whom.
Buying and selling against yourself to manufacture volume. Amounts are compared exactly, because drift there is a false negative nobody would notice.
One order split into many small ones to stay under every bar. Splitting across venues is only visible to a run that reads several books at once.
Orders placed to move the price and pulled before they fill. Measured from cancel timing and origin, which is why those fields matter in your export.
A detector whose feed lacks the field it needs reports the signal as not evaluable and names what is missing, instead of returning a negative built on absent data.
An on-chain scan returns one verdict on one wallet. An order-book run reads a whole slice of flow and comes back with a finding per client, per book, per pattern.
Narrowing a run to a single book loses the cross-venue signal outright. Leaving venue and instrument empty is the normal case.
Thresholds are set per organisation, and the bar that judged is written into the alert so a verdict can be re-read rather than re-argued.
A pattern still running across daily scans does not re-raise. Once it is resolved and recurs, it fires again.
The wrong timezone or the wrong decimal separator is removed on its own. The record that the import happened is kept and marked.
Every event keeps the line it came from. Months later that is the only thing that settles a dispute over an alert.
One venue export is enough to get the first findings back.
Schedule a demo, access technical documentation, or receive a customized compliance assessment.