Market manipulation, decoded.
Crypto markets are smaller, more leveraged, and less regulated than equities. They get gamed constantly. The good news: the games leave fingerprints. Five patterns show up over and over — once you can name them, you stop falling for them.
The mental model
Big players need liquidity to enter and exit positions. Liquidity sits where retail puts their stop-losses and breakout orders — just above resistance, just below support, around obvious round numbers. When you see price spike through one of those levels and immediately reverse, that's not random. That's engineered.
The patterns below all describe variations of the same idea: induce retail to act in one direction so smart money can do the opposite, more cheaply, with their orders absorbed.
Bull trap (failed breakout)
High severityPrice closed above the range high — then immediately closed back inside. Buyers got trapped.
A real breakout sees follow-through: the next bars hold above the broken level. When price pops above resistance, sucks in buyers, then collapses back into the range, that's a textbook bull trap. The buyers above the high now have losing positions and have to sell to get out — that selling fuels the move down.
Lower lows in the next few bars. Volume spike on the trap bar followed by absorption. The trap level often becomes the new ceiling.
Engineered to flush retail buy stops above the high before reversing. The bigger the volume on the trap, the more confident the reversal.
Bear trap (failed breakdown)
High severityPrice closed below the range low — then immediately closed back inside. Sellers got trapped.
Mirror image of a bull trap. A real breakdown holds below the level. When price slices the support, triggers a wave of stop-loss selling and short entries, then closes back inside the range, the sellers below the low are now underwater. They have to cover (buy back), and that buying drives the move up.
Higher highs in the next few bars. Volume spike on the trap bar. The trap level often becomes the new floor.
Engineered to flush retail sell stops and harvest fresh shorts before reversing. This is exactly the "Spring" pattern Wyckoff named a century ago.
Move on weak volume (divergence)
Medium severityPrice made a notable move but volume didn't show up to confirm it.
Real moves are powered by participation. When price ticks up 2%+ but volume is well below average, it means few traders are actually committing to that direction — the price is drifting on thin liquidity. These moves often retrace because there's no real demand or supply behind them.
A reversal back through the move within the next 1–3 bars is common. Wait for volume to confirm before trusting the direction.
Often happens when institutions step away. The market makers are the only liquidity, so price moves easily but doesn't stick.
Spring — stop hunt below range low
Medium severityPrice dipped below the range floor, hit retail stop-losses, then sprung back inside.
The Spring is one of Wyckoff's most reliable bullish setups. After a long accumulation range, price violates the support level briefly — just enough to trigger the stop orders sitting below it. Smart money buys aggressively into that selling pressure (cheap supply, forced sellers), then price snaps back up. This is the textbook "shake out the weak hands" move before a markup.
A strong bullish bar with high volume right after the dip is the confirmation. The Spring low becomes the key support — losing it again invalidates the setup.
Best entry zones in the entire Wyckoff playbook. Smart money advertises its hand here — they need volume to fill positions, so springs are usually visible.
Upthrust — stop hunt above range high
Medium severityPrice popped above the range top, hit short-stops and breakout buyers, then dropped back in.
The bearish mirror of the Spring. After a distribution range, price spikes above the resistance level just enough to trigger buy stops sitting above it (short-covering, breakout traders entering long). Smart money sells aggressively into that buying pressure, then price drops back inside. The classic "shake out the weak shorts and trap fresh longs" move before a markdown.
A strong bearish bar with high volume right after the spike confirms the upthrust. The upthrust high becomes the key resistance — reclaiming it invalidates the setup.
Like Springs in reverse: smart money distributing positions to retail breakout buyers. Common at the end of a multi-month rally.
Breakout on weak volume
Medium severityPrice closed outside the range, but volume didn't show up. This isn't real participation — it's likely to fade.
Real breakouts are powered by participation. When price slips above resistance (or below support) with volume well below the recent average, the move isn't being driven by aggressive buyers (or sellers) — it's drifting on thin liquidity. These breakouts have a high tendency to reverse back into the range within a few bars. Until volume confirms, treat the breakout as suspect rather than tradeable.
Wait for the next 1-2 bars. If volume doesn't expand and price slips back inside the range, you have a fake-out forming. If volume does expand on the next bar with a continuation close, the breakout becomes real.
Often happens during illiquid sessions (overnight US, weekend) when only retail and market-makers are active. Smart money waits for the proper session to confirm direction.
Long upper wick — stop hunt above
Medium severityA bar with a tall shadow that pierced the recent high, then closed back down. Buy stops above were swept.
When you see a candle with a tiny body but a shadow stretching well above the recent swing high, that wick wasn't an accident — price was driven up just far enough to trigger the stop-loss orders sitting above resistance, then the buying stopped and price collapsed back. The shadow is the trail of forced buying (stop orders firing) that smart money sold into.
A close back below the prior swing high is the confirmation. The peak of the wick becomes a tested level — reclaiming it on volume invalidates the read.
A common engineered fill technique: smart money needs willing buyers to absorb their sell orders. Triggering retail stop-buy orders provides exactly that.
Long lower wick — stop hunt below
Medium severityA bar with a tall lower shadow that pierced the recent low, then closed back up. Sell stops below were swept.
Mirror image of the upper-wick stop hunt. Price was driven down through support to trigger the stop-loss orders parked below it. Once those sells executed, the selling pressure ended and price snapped back up — leaving a long shadow as evidence of where forced supply was harvested. Smart money bought the dip into all those panic stops.
A close back above the prior swing low confirms the hunt. The bottom of the wick becomes the new floor — losing it on volume invalidates the read.
When you see this near the bottom of a range, it's the textbook accumulation move. The deeper the wick, the more committed the buyer.
Volume spike that faded
Medium severityAn unusually high-volume bar that didn't get any follow-through. Either fake activity or one-sided algo flow.
When you see a single bar with 2.5x the recent average volume but the next 1-2 bars retrace most of that move on declining volume, something fishy happened. On smaller pairs this can indicate wash trading (volume manufactured to attract attention). On majors, it more often reflects a one-sided algo or institutional flow that the market wasn't ready to follow. Either way, the volume wasn't a genuine signal of direction.
If the next bars continue the fade with normal volume, the spike was noise — discount it. If the price reclaims the spike level on a fresh volume expansion, that's the real move.
On low-cap pairs, treat as a possible pump-and-dump precursor. On majors, often the result of a large order being filled in a single block — interesting context, not directional information.
How the CryptoEdge engine surfaces these
The Manipulation Watch component on the market page scans BTC, ETH, SOL, and XRP across multiple timeframes and flags any of these patterns when they print. Each event is tappable — you get the same plain-English breakdown above, in real time, on the actual coin where it just happened.
Open Manipulation Watch →