# Iceberg Orders: How Hidden Liquidity Shows Up in Order Flow > Iceberg orders explained: how large hidden limit orders disguise size in the book, how to spot them on the tape and DOM, and why they matter. - Canonical: https://traderprofesional.com/en/iceberg-orders/ - Site: Trader Profesional (https://traderprofesional.com) — order flow trading - Language: en - Published: 2026-07-17 --- An iceberg order is a large limit order that shows the market only a small slice of its real size. The visible piece sits in the book like any ordinary order; the rest is hidden, refilling automatically as the visible portion gets filled. If you trade order flow long enough, you will run into one: a price level that keeps getting hit and simply will not break, no matter how much size gets thrown at it. ## What an iceberg order is Icebergs exist because big players have a problem. If a fund wants to buy 5,000 contracts at a level, resting all 5,000 in the [order book](/en/depth-of-market-dom/) tells everyone exactly what they are doing. Front-runners pile in ahead of the order and the price runs away before it fills. The solution is to slice the order. The trader submits a large limit order with a small **display size**, say 50 contracts visible out of a true 5,000. The exchange shows only 50. When those 50 fill, the engine automatically replenishes the display with another 50 from the hidden reserve, and again, and again, until the full 5,000 is done or the trader cancels. The name is the whole idea: what you see is the tip; the mass is underwater. Icebergs are a native order type on most futures and crypto exchanges, so they are a legitimate execution tool, not a trick. That matters, because unlike [spoofing](/en/spoofing-market-manipulation/), which shows fake orders it never intends to fill, an iceberg is fully committed. Every contract behind it is real and will trade. ## Why icebergs matter to an order flow trader Icebergs distort the two things order flow traders lean on most: the order book and the tape. The book lies to you by omission. You look at the DOM, see a thin 50 lots at a level, and assume it will break on the next push. Instead it absorbs 800 contracts of aggressive selling and holds. The displayed size never told you a serious buyer was standing there. This is why experienced readers trust the [executed flow](/en/order-flow-trading/) over resting book size: filled trades are commitment, displayed orders are only a promise, and an iceberg deliberately hides how big that promise is. Icebergs are also one of the cleanest forms of [absorption](/en/absorption-trading/). A passive iceberg buyer soaking up aggressive selling without letting price drop is a textbook absorption event, the difference being that here you know a single committed player is behind it rather than a crowd of scattered limits. ## How to spot an iceberg You cannot see the hidden size directly. You infer it from behavior. A few tells that stack up into a reasonable read: - **A level that eats far more than it shows.** The DOM displays 50 lots at 5,410, but the tape prints 60, 120, 90, 75 selling into it and the bid never gives way. When cumulative filled volume at a price dwarfs what was ever displayed there, size is being refilled from a reserve. - **A constant, resetting display.** Watch the DOM cell. If it keeps snapping back to the same number (50, 50, 50) after each hit rather than counting down, you are likely watching an iceberg replenish. A genuine 50-lot order counts down to zero and disappears. - **Rhythmic prints on the [tape](/en/tape-reading/).** The refills often come in a steady cadence, the same size trading over and over at one price while the opposing quote stays pinned. - **Price refusing to move on heavy one-sided aggression.** This is the outcome that matters most. On a [footprint](/en/footprint-chart/), you see a fat bid-side volume column at one price and no downside progress. Someone is buying everything. None of these is proof on its own. A resetting display could be a market maker requoting. Rhythmic prints could be an algo executing on the aggressive side. You build the case from several signals plus context: an iceberg at a level that already matters is far more meaningful than one in open space. ## A worked example ES is selling off into yesterday's value area low at 5,388. You mark the level pre-session. Price arrives and starts grinding against it. The DOM shows only 40 to 60 lots on the bid at 5,388, nothing dramatic. Then the tape starts working: 85 sold, 120 sold, 60 sold, 95 sold, all hitting the 5,388 bid. On the footprint the bid-side column at 5,388 swells past 1,400 contracts. But price does not print below 5,388. The bid keeps refilling to that same ~50-lot display after every hit. That is an iceberg buyer defending 5,388. The read is not "thin support, will break." It is "a committed buyer is absorbing aggressive sellers at a level that already mattered." You wait for the aggressive selling to dry up, watch [cumulative delta](/en/cumulative-delta/) stop making new lows while price holds, and look for the lift off 5,388 to go long, stop just under the level where the iceberg is defending. The trap is the opposite read. A trader who only watches displayed size sees 50 lots, expects a break, and shorts into the one buyer strong enough to turn the market. ## Icebergs, spoofing and stop hunting It helps to keep three related ideas separate, because they look similar on the surface but mean opposite things. - An **iceberg** hides *real* size. It is genuine liquidity you cannot fully see. When it holds, believe it. - **Spoofing** displays *fake* size that gets pulled before it fills. It is the reverse deception, showing you liquidity that is not there. Covered in [spoofing and market manipulation](/en/spoofing-market-manipulation/). - **Stop hunting** is a push engineered to trigger clustered stops, often into hidden iceberg liquidity waiting on the other side. See [stop hunting](/en/stop-hunting/). The three often appear together in the same sequence: a spoof to nudge price, a stop run to trigger orders, and an iceberg quietly filling against the panic. Learning to tell fake displayed size from hidden real size is one of the more valuable skills in reading a modern electronic book. ## Frequently Asked Questions ### What is an iceberg order? An iceberg order is a large limit order that displays only a small portion of its true size to the market. As the visible slice fills, the order automatically replenishes it from a hidden reserve until the full quantity is executed or cancelled. Institutions use icebergs to work large positions without revealing their full intent and triggering front-running. ### Are iceberg orders legal? Yes. Iceberg orders are a standard, exchange-supported order type on most futures and crypto venues, and they are a legitimate execution tool. They differ fundamentally from spoofing, which is illegal: an iceberg is fully committed to trading every contract it hides, whereas a spoof displays orders the trader never intends to fill. ### How can I detect an iceberg order? You detect an iceberg by behavior, not by seeing the hidden size directly. The main tells are a level absorbing far more volume than it ever displayed, a display size that keeps resetting to the same number after each hit, rhythmic same-size prints on the tape, and price refusing to move despite heavy one-sided aggression. Confirm with context, an iceberg at a meaningful level carries much more weight than one in open space. ### What is the difference between an iceberg and absorption? Absorption is the general phenomenon of passive orders soaking up aggression without price moving. An iceberg is one specific cause of it: a single large hidden order doing the absorbing. All icebergs that hold produce absorption, but not all absorption comes from an iceberg, it can also come from many separate limit orders stacked at a level.