Cluster Group View - Heat Map

The Heat Map shows you which traders or accounts are generating activity that has a high degree of similarity to regulatory cases. Each rectangle represents a group of clusters using color to indicate the level of risk, and size to indicate the number of clusters. These visual cues help you prioritize your cluster group review based on activity that generates the most risk.

Heat Map display

The Heat Map display is organized into the following sections:

1. Heat Map: Displays the Heat Map view of the selected data as well as filtering and navigation tools.
2. Data Selection Panel: Manages the dates available to TT Score and specifies the criteria to use when populating the list.

Interpreting the Heat Map

The Heat Map groups clusters by trader, instrument, or account, and displays these groups as a collection of blocks. TT Score calculates a risk score for each block based on the clusters in the group represented by that block.

• The color of a block indicates the severity of the score. Low scores are represented as light green and high scores are represented as red.
• The size of a block indicates the number of clusters.


• Metrics for the clusters in each groups are displayed within the block:
• Trader, Account, or Instrument ID: Shows the ID based on the "Group By" setting
• Max: Highest cluster score
• Avg: Average score of clusters within the group
• Clusters: Total number of clusters within the group

Heat Map navigation and filters

1. Select View: Switch between Individual Clusters, Heat Map, Outlier Chart, and Daily Cluster Groups views.
2. Group By: Sort the view by trader, account, and instrument.
3. Cluster Filters: Filter the view by trader, account, and instrument.
4. Export: Exports filtered data into a .csv spreadsheet file.

Data Selection Panel

On the left of the screen, the Data Selection Panel shows the daily activity logs that have been selected using the date picker and are available for data visualization. It also includes filters to apply to the data view.

The panel includes the following:

1. Score Range: Sets the maximum score of the clusters to include in each view.
2. Date Range: Date-based selector to add daily activity data to analyze.
3. MODELS: Sets which types of suspect trading patterns to analyze in the data. Check this checkbox to apply all problematic trading models.
   TT Score uses the following models to analyze data for problematic trading patterns:
   • Abusive Messaging: Quote stuffing schemes designed to introduce predictable latency into an exchange's quoting engine or malfunctioning algorithms that might cause market disruptions.
   • Automated Collusive Spoofing: Patterns of manipulative or disruptive trading activity by multiple traders working together to automatically submit a number of orders for which they have no intention of executing in an attempt to move the market.
   • Automated Spoofing: Patterns of manipulative or disruptive trading activity that involve the automated placement of a number of orders for which a trader has no intention of executing in an attempt to move the market.
   • Collusive Spoofing: Patterns of manipulative or disruptive trading activity by multiple traders working together to place a number of orders for which they have no intention of executing in an attempt to move the market.
   • Cross Trading: A cross trade occurs when a buy order and a sell order for the same instrument are entered for different accounts under the same management, such as a broker or portfolio manager.
   • Exchange Messaging Rate Limits: Instances where traders exceeded the exchange message rate limit for a set period of time during a trading session.
   • Influencing the Open: Instances where indirect wash trades occurred at the open of trading in violation of exchange rules.
   • Marking the Close: Trading activity intended to manipulate the settlement price of an instrument during its settlement period.
   • Momentum Ignition: Behaviors that indicate an attempt to create an artificial price movement with aggressive orders followed by an attempt to capitalize on such movement.
   • Pinging: The entry of multiple small orders intended to discover hidden book depth followed by a series of order actions designed to force the large order to trade at less desirable prices.
   • Price Ramping: Behavior that may be an attempt to create artificial price movement with aggressive orders.
   • Spoofing: Patterns of manipulative or disruptive trading activity that involve the placement of a number of orders for which a trader has no intention of executing in an attempt to move the market.
   • Wash Account: The same account ID is both the buyer and seller in the same transaction.
   • Wash Trader: The same trader ID is both the buyer and seller in the same transaction.
   • Dominance at Open: A single trader's orders make up the majority of the disclosed market volume of an instrument during the first 15 minutes of the current trading session.
   • Order Book Dominance: A single trader's working orders make up the majority of the disclosed market volume of an instrument at any time during a trading session.
4. Products: Sets one or more of the following product types to include in each view:
   • Futures
   • Spreads-Strategies
   • Equity-Index Options
5. ORDER ID — Allows you to search for clusters using an order ID.
6. Apply Filters: Applies the selected dates and filters.

Visible models in the Data Selection Panel

The TT Score Dashboard settings in the Preferences | Models Defaults - Visibility & Range section determine which models are visible in the panel and what range of cluster scores are included in the cluster data views.

When you click the Surveillance tab to show the Data Selection Panel, the MODELS section is filtered based on your visibility preferences. By default, all checkboxes are checked for the visible models and the SCORE RANGE is 1-100.

As you check each visible model, the SCORE RANGE displays the range preference set for the selected model (e.g., 60-100).