6 trade surveillance challenges and program considerations

KEY TAKEAWAYS

• Trade surveillance is becoming more complex, with growing pressure on firms to expand coverage across asset classes, manage fragmented data environments and respond to evolving trading behaviors.
• Improving surveillance effectiveness requires focus on data quality, scenario calibration and efficient investigations.
• Bloomberg’s BTCA delivers a multi-asset trade surveillance solution that unifies data, detection and investigation workflows within a single analytical environment.

This article was written by Mike Googe and Yerson Arvelo, BTCA product managers at Bloomberg.

Introduction

Market surveillance expectations continue to grow as trading expands across new venues, products and jurisdictions. Firms are expected to monitor increasingly complex asset classes, manage rapidly rising data volumes and detect behavior that spans markets and instruments. At the same time, surveillance teams often face operational pressure created by high false positive rates, data quality constraints and evolving manipulation tactics.

This article explores the challenges that shape surveillance programs today and outlines some of the key stages of the surveillance workflow that enable effective oversight of trading activity.

Catch up on parts one and two for an overview of trade surveillance, regulatory expectations and key market abuse risks.

Market surveillance challenges

1. Expanding surveillance to complex and illiquid asset classes
   As regulatory expectations increase, firms are under pressure to expand surveillance into markets that are operationally complex and data-constrained. Growing data volumes from electronic trading further increase the complexity of maintaining coverage across all relevant assets. Many firms struggle to access the data or technology needed for surveillance of less transparent or less traded instruments, such as fixed income and OTC derivatives, where monitoring has historically been limited.
2. Managing false positives
   Reducing unnecessary alerts while maintaining regulatory coverage remains one of the core operational challenges in surveillance. Compliance teams must balance the risk of missing meaningful activity with the operational burden of reviewing high alert volumes, where a heightened alert volume can slow investigation times and limit the ability to focus on higher-impact cases.
3. Ensuring data quality at scale
   Surveillance effectiveness is fundamentally constrained by the quality of underlying data. The challenge for firms is establishing complete, accurate and timely data inputs across venues, asset classes and trading systems, particularly as data sources proliferate and architectures become more fragmented. Without a strong data foundation, even advanced analytics and AI-driven surveillance tools fail to deliver reliable or defensible outcomes.
4. Detecting cross-market and cross-product activity
   Market abuse increasingly spans multiple instruments, venues and markets. Effective monitoring depends on understanding relationships across instruments and identifying patterns that reflect indirect or coordinated activity. Many surveillance systems struggle to achieve the data linkage and analytical context required for this type of detection.
5. Keeping pace with evolving behaviors
   Manipulation tactics continue to evolve. Maintaining agility is an ongoing challenge and surveillance functions must balance operational workload with continuous tuning and updates.
6. Linking trade and communications data
   Regulatory expectations increasingly require firms to assess trading activity in the context of related communications. However, integrating communications surveillance with trade surveillance remains operationally challenging.

Meeting challenges across the surveillance workflow

Effective market abuse surveillance requires technology that performs reliably at each stage of the surveillance workflow. Key stages include:

1. Data capture, mapping and validationSurveillance begins with the collection and consolidation of complete and accurate datasets. Effective programs typically incorporate:
   • Orders and executions: Showing the full lifecycle of trading activity and forming the basis for understanding how, when and why certain behaviors occurred
   • Market data: Price, volume and liquidity information that provides context for evaluating whether behavior aligns with expected market conditions
   • Reference data: Instrument identifiers, product attributes, corporate actions and related information that support accurate interpretation of activity
   • News and event data: External information that may explain market movements or coincide with trading patterns under review
   • Communications data: Providing additional context around trading activity and support the assessment of intent or coordination where relevant

   Data must be mapped correctly across systems, validated for completeness and accuracy, and synchronized across the order lifecycle.

2. Detection logic and alert generation
   Once data is consolidated and validated, surveillance systems apply automated detection methods to identify behavior that may require further review. These methods often include rules, statistical models and expected patterns of normal behavior.Because asset classes differ in liquidity, execution mechanics and market structure, detection approaches must reflect those differences. A scenario that works well in equities may not be appropriate for fixed income or derivatives. Tailoring detection logic helps ensure alerts are meaningful and aligned with relevant risks.
3. Backtesting and scenario calibration
   Backtesting is a critical capability for validating surveillance scenarios and ensuring detection logic performs as intended. Regular backtesting supports ongoing calibration, false positive optimization, helps demonstrate the effectiveness of controls and enables surveillance teams to adjust thresholds or logic in response to changing trading behaviors or regulatory expectations.
4. Alert prioritization
   Effective surveillance systems help prioritize alerts based on relevant risk factors and contextual criteria. By organizing alerts according to risk, materiality or behavioral indicators, firms can manage workload more efficiently and improve overall review effectiveness.
5. Investigations and escalation workflows
   After an alert is generated, analysts review the activity to determine whether it requires escalation. Effective surveillance systems support this by providing:
   • Timelines of orders, trades and market events
   • Access to contextual and reference data
   • Audit trails that document review steps
   • Structured fields for recording findings and escalation decisions
   • Trend and aggregation views that highlight recurring behavior, concentration risks or patterns across traders, instruments or time periods

   This helps analysts determine whether behavior could indicate market abuse or if it aligns with market conditions, trading strategy, or other legitimate factors.

6. Reporting and documentation
   Effective surveillance systems help firms compile relevant data, document conclusions and prepare required reports. If an investigation concludes that an activity may be suspicious, regulatory frameworks often require a formal report. In the EU and UK, this is a Suspicious Transaction and Order Report (STOR). Other jurisdictions maintain similar reporting mechanisms.

Considerations when evaluating market abuse surveillance capabilities

As firms review surveillance platforms, they often assess how well a solution supports the key stages of the surveillance workflow described above. The following considerations reflect some of the functional, technical and operational capabilities that commonly shape evaluations of surveillance technology.

• Multi-asset and cross-asset coverage

  Surveillance platforms that can monitor across equities, fixed income, derivatives, commodities and other asset classes support expanding regulatory expectations. They can also enable consistent views of trading activity across related instruments and markets to detect cross-product or cross-market manipulation.

• Alert prioritization and noise reduction

  High alert volumes make prioritization essential, and surveillance systems that filter noise and highlight higher-risk activity can help analysts focus effort on the alerts that matter most.

• Strength of input data and data validation

  Solutions that support robust data validation, normalization and mapping across venues and sources provide a strong data foundation that helps ensure that detection models operate as intended.

• Alignment with front-office workflows

  Investigations often require coordination between surveillance teams and trading desks. Solutions that operate within the same environment or analytical framework used by front office teams can help streamline communication, reduce friction and support reviews.

• Agility and adaptability

  A surveillance solution that supports rapid updates, flexible scenario tuning and scalable analytics can help firms evolve to reflect new tactics, regulatory guidance or changes in market structure.

These considerations are not exhaustive but represent themes that frequently appear in evaluations and procurement processes for market surveillance technology.

How Bloomberg can help

Bloomberg’s BTCA is an end-to-end trading analytics, transaction cost analysis, and trade surveillance suite that operates on a unified analytical framework across the trade lifecycle. BTCA is natively integrated into the Bloomberg Terminal and supports extensive multi-asset coverage, providing trading, compliance and operational teams with a shared, contextual view of trading performance and market abuse risk.

BTCA delivers multi-asset and cross-asset surveillance designed to monitor a wide range of products, including complex and less liquid instruments. BTCA helps firms focus effort where it matters by prioritizing alerts, reducing noise and supporting efficient and confident investigations.

BTCA supports accurate event reconstruction and clear timelines of what happened, when and why. The shared workspace brings compliance and trading together on the same system and analytical language, helping streamline investigations and reduce friction across teams.

These capabilities support firms as surveillance demands expand across markets, instruments and jurisdictions, without increasing the complexity of their technology stack.

Conclusion

Market surveillance continues to evolve as firms expand coverage into new asset classes, manage large volumes of data and monitor behavior across increasingly interconnected markets. Understanding the challenges associated with complex products, data quality, false positives, cross-market activity and evolving manipulation tactics provides context for assessing how surveillance systems support supervisory responsibilities.

This article concludes part three of our trade surveillance series. Part one introduced the fundamentals of surveillance and part two examined common market abuse scenarios. Together, the series outlines core concepts and considerations that shape the design and operation of modern market abuse surveillance programs.