Iceberg Orders and Hidden Liquidity: What Traders Can Observe

Iceberg orders show only a slice of their size and refill as that slice is filled. You never see the whole order, but the tape and the ladder leave traces worth knowing, along with their limits.

Published 11 October 2026 · Updated 3 November 2026 · 6 min read

Key takeaways

An iceberg, or hidden-quantity order, displays only part of its size; as the visible part is filled, more becomes visible.
The order book feed carries the displayed quantity, never the hidden remainder, so the total size of an iceberg cannot be known in real time.
The classic trace is more volume trading at one price than the DOM ever showed there, with the displayed size returning after each fill.
New orders from other traders, quote refreshing and data aggregation leave the same trace, so iceberg detection is always an inference.
Hidden liquidity also includes stop orders and conditional orders, which stay out of the book until they are triggered or sent.

Iceberg orders in one paragraph

Iceberg orders are limit orders that show only part of their total size to the market. The CFTC glossary describes a hidden quantity order as one where only a portion is visible to other participants, with more becoming visible as the displayed part is filled, and lists iceberg and max show as other names for it. A trader who wants to buy a large quantity at one price can rest a small visible bid and let the rest refill behind it, instead of showing the full size and changing how everyone else behaves.

For anyone reading order flow, iceberg orders are the clearest example of hidden liquidity: real, executable size that the depth of market does not display. Knowing they exist changes how you read a ladder. Knowing how to spot their traces, and how often those traces mislead, matters even more.

What the exchange shows and what it hides

An exchange’s order book feed carries what each participant has chosen to display. For an iceberg, that is the visible slice; the remainder sits with the exchange or with the software that manages the order, and it is not published. Most retail DOMs then aggregate the feed by price, so an iceberg’s visible slice merges with every other order resting at that level.

Icebergs come in two broad kinds. Native icebergs are handled by the exchange’s matching engine, which refills the visible part automatically. Synthetic icebergs are managed outside the exchange, by a trading platform or an execution algorithm that sends a new small limit order each time the previous one fills. The two look alike on screen, although a synthetic refill can arrive a fraction of a second later.

Refills usually come at a price. Exchanges commonly treat each new visible slice as a fresh arrival in the queue at that price, behind the orders already waiting, so hiding size tends to cost time priority. The exact treatment is set by each exchange’s rules, which are worth reading for the contract you trade before relying on any assumption.

Displayed: the visible quantity of every resting limit order, aggregated by price on most ladders.
Not displayed: the hidden remainder of icebergs, stop orders waiting to trigger, and orders that algorithms have not sent yet.
Published after the fact: each trade, with its price and size, in Time & Sales.

What Time & Sales and the DOM can reveal about iceberg orders

Because trades are published even when the resting size is not, the clearest trace of an iceberg comes from comparing the two feeds. Suppose the best bid shows a modest size. Sellers hit it, Time & Sales prints volume at that price, the displayed size drops, then it returns to roughly the same amount. Repeat this several times and the volume traded at the bid ends up far larger than anything the ladder showed. Something kept refilling the bid.

A few patterns strengthen that reading:

Traded volume at one price several times larger than the largest size ever displayed there.
The displayed size returning to a similar amount after each fill, rather than to random sizes.
Price holding at the level while the aggressive side keeps trading into it, which is where iceberg orders meet absorption in order flow.
On a ladder that separates additions from fills, repeated additions at the same price right after trades. TEVO DOM’s BID Δ and ASK Δ columns count orders added or pulled and leave out size taken by trades, so refills show up as additions next to the prints in its Time & Sales panel.

On a footprint, the same event leaves an unusually large number at a single price, which the footprint chart guide teaches you to read in the context of the whole bar.

Why the inference stays uncertain

Every trace above has an innocent explanation. A level that keeps refilling may hold one iceberg, or many traders who each add a few contracts as price arrives. Market makers refresh quotes continuously, and arbitrage between related contracts can replenish a price whenever it trades. On an aggregated ladder, these cases cannot be told apart from a single hidden order.

Data adds its own noise. Platforms may bundle several book updates into one screen refresh, so a refill and an unrelated new order can appear as a single change. Feeds can split one aggressive order into several prints, and the order in which trades and book updates reach your screen does not always match the sequence at the exchange. Software that labels a level as an iceberg is applying a rule to this data, not reading the exchange’s hidden book.

Most important, an iceberg has no visible end. It can be cancelled at any moment, or simply finish. The size inferred from past refills says nothing certain about the size still waiting, which is why a level that held for ten minutes can give way in a second.

Other kinds of hidden liquidity

Icebergs are only one reason the book understates real liquidity. Stop orders are invisible until they trigger, and when they do they usually arrive as market orders that consume liquidity at once; the CFTC glossary describes cascades, in which stops triggered by other orders set off further stops. Execution algorithms hold size back and release it in pieces depending on price and volume. Large participants may also trade in related markets, such as the micro contract, ETFs or options, rather than on the screen you watch.

The opposite problem exists as well: displayed size that is not meant to trade. Bids or offers entered with the intent to cancel them before execution are prohibited as spoofing in US futures markets, yet size that is pulled before price reaches it remains a common sight. Between hidden size that is real and visible size that may not be, the ladder is best read as a rough, changing sketch of liquidity.

Comparing the book with the tape is a skill of its own; the guide on how to read Time and Sales in NinjaTrader 8 covers the columns, the size filters and the usual pitfalls of the prints.

Using iceberg observations without overreaching

A suspected iceberg is useful as a description: at this price, more size traded than was shown, and the level held while it did. That is worth knowing at a price you had already marked, and much less so in the middle of a range. It says nothing about why the order was placed; a large buyer may be hedging an options position or closing a short rather than expressing a view on direction.

Confirm with price: the reading matters only if the level holds and price then moves away from it.
Define the failure: if the level trades through, the hidden order is gone or finished, so the stop belongs beyond the level.
Keep scale in mind: compare traded volume with the usual size of the contract at that time of day.
Avoid chasing labels: a tool that flags icebergs makes an inference with its own rules and thresholds.
Keep risk separate from the reading: the position size comes from the stop distance, never from how large the hidden order seemed.

Put it into practice

Frequently asked questions

Can you see iceberg orders on the DOM?

Only their visible part. The hidden remainder is not published in the order book feed. Traders infer icebergs by comparing the trades printed at a price with the size displayed there.

Are iceberg orders legal?

Yes. Hidden-quantity orders are a recognised order type, described in the CFTC glossary. What is prohibited in US futures markets is spoofing: entering bids or offers with the intent to cancel them before execution.

How can I know the total size of an iceberg?

You cannot know it in real time. Past refills tell you how much traded, not how much is left, and the order can be cancelled at any moment.

Do iceberg orders mean institutions are buying?

Not necessarily. Anyone with access to the order type or a suitable platform can use one, and the purpose can be hedging, closing a position or simply not showing size. The order type says nothing about intent.

Sources

CFTC Glossary: limit order, market order, stop order, hidden quantity order, disruptive trading practice, cascade — U.S. Commodity Futures Trading Commission
Time & Sales (NinjaTrader 8) — NinjaTrader Help Guide
SuperDOM (NinjaTrader 8) — NinjaTrader Help Guide