How to Investigate Suspected Insider Trading

Unusual trading before a market announcement can be a legit­imate coinci­dence, planned trade or evidence of misuse of material nonpublic infor­mation. A financial inves­ti­gation must connect the infor­mation, the person who possessed it, any commu­ni­cation and the trade—without treating timing alone as proof.

Define the legal and factual question

Identify the security, market, juris­diction, relevant law and suspected trading period. Record the public announcement and the infor­mation believed to have existed earlier. Materi­ality, confi­den­tiality, duties and permitted trading arrange­ments vary, so obtain qualified legal analysis rather than applying a generic defin­ition.

Reconstruct the information timeline

Determine when the infor­mation was created, updated, shared and made public. Preserve board papers, draft announce­ments, data-room logs, access records, calendars and commu­ni­ca­tions. List every person who could access each version, including advisers, contractors and household contacts.

Reconstruct the trading timeline

Obtain order, execution, account, position and funding records. Record when an order was entered, modified or cancelled and whether options or related securities were used. Compare the activity with the trader’s history, liquidity and estab­lished strategy. Profit or avoided loss may be relevant, but is not enough on its own.

Test the connection between information and trade

Look for calls, meetings, messages, shared locations, account access, gifts or transfers between insiders and traders. Analyse timing without overstating it. The SEC’s resource on inves­ti­gating and prose­cuting insider trading illus­trates the evidential and legal complexity of these cases.

Examine planned-trading explanations

Collect trading plans, mandates, instruc­tions and amend­ments in their original form. Establish when they were adopted and whether the trader possessed material nonpublic infor­mation at that time. SEC rules on insider-trading arrange­ments and disclo­sures include condi­tions intended to prevent oppor­tunistic misuse of planned-trading defences.

Map nominees and beneficial ownership

Trace accounts held through companies, trusts, relatives or inter­me­di­aries. Match beneficial ownership, funding and control rather than assuming the named account holder made the decision. Apply the ownership checks in our corporate-ownership inves­ti­gation guide.

Compare alternatives and contrary evidence

Test routine rebal­ancing, liquidity needs, published research, pre-existing instruc­tions and unrelated events. Preserve evidence that weakens the allegation as carefully as evidence that supports it. Statis­tical abnor­mality is a lead, not a finding.

Malta Media’s recent consul­tancy-contract inves­ti­gation demon­strates a broader reporting disci­pline: correct inaccurate figures, isolate what records establish and leave disputed allega­tions clearly labelled. That disci­pline also belongs in market-abuse reporting.

Build an allegation-level evidence matrix

For each suspected trade, record the infor­mation, access, commu­ni­cation, order, benefit, lawful expla­nation and response. Distin­guish regulator allega­tions, court findings and journal­istic inference. Give affected parties a meaningful oppor­tunity to respond before publi­cation.