Pump & dump

Inflate a thin asset with hype and coordinated buying, then sell into the crowd. Ancient, illegal, and rampant in low-cap crypto; covered for recognition and detection.

The idea

What is a pump-and-dump, and why is it illegal?

A pump-and-dump is a fraud with a fixed shape: organisers accumulate a thinly traded asset cheaply, promote it with false or misleading claims to manufacture buying demand (the "pump"), then distribute their holdings into that demand at inflated prices (the "dump"), leaving later buyers holding an asset that collapses back toward, or below, where it started. The organisers' profit is not from the asset's value; it is a transfer from the people who bought the hype to the people who manufactured it.

The scheme exploits two things: a thin, easily moved market (a micro-cap stock, a low-liquidity token) and a channel to reach buyers (a newsletter, a forum, a Telegram or Discord group, a social-media influencer). The "value" is entirely fabricated by the promotion. The defining feature is the false or misleading promotion combined with insider distribution into it: without the deception it is not a pump-and-dump; with it, it is securities fraud.

In the US, it violates Exchange Act §9(a)(2) (creating a false appearance of active trading to induce others to buy or sell), §10(b) and SEC Rule 10b-5 (the general anti-fraud rule), and is prosecuted by the DOJ as securities and wire fraud, with disgorgement, fines, bars, and imprisonment. In the EU and UK, MAR Article 12(1)(c) explicitly covers disseminating information that gives, or is likely to give, false or misleading signals as to an instrument, including via media or the internet, where the disseminator knew or ought to have known it was false; Article 12(1)(a)/(b) covers the trading legs. See the market-abuse regimes for how each prohibition bites.

The lifecycle: what footprint does each phase leave?

The scheme runs in four phases, and detection works because each leaves a distinct signal. Phase 1, accumulate: organisers quietly buy a thin asset cheaply, and the footprint is concentrated accumulation by a small set of correlated accounts or wallets before any news. Phase 2, promote: false or misleading hype across newsletters, forums, social media, and paid promotion, a coordinated messaging burst with no genuine underlying news, often with bot or sock-puppet patterns. Phase 3, pump: retail and herd buying drives an anomalous price-and-volume spike, with inflow timed to the promotion. Phase 4, dump: the same accounts that accumulated now sell concentratedly into the spike, then the price collapses.

This is described only at the level needed to recognise and detect the pattern; the footprint, not the mechanics, is the point. The transfer of value runs from the late buyers to the organisers; the realised gain of the cluster equals the realised loss of those who bought the hype.

The crypto and social-media era

The classic micro-cap pump-and-dump has migrated to crypto and social media, where thin tokens, frictionless global promotion, anonymous coordination (Telegram and Discord "pump groups"), and uneven enforcement make the scheme easy to run and fast. The mechanics are identical; the venue is more permissive. Crypto is fertile ground: thousands of low-liquidity tokens, 24/7 trading, no consolidated tape, easy token creation, influencer-driven promotion, and venues with weak or absent surveillance. Coordinated groups openly organise timed buying, though the false promotion leg that makes it fraud is what regulators target.

Whether crypto pump-and-dump is illegal turns on whether the token is a security (SEC jurisdiction under the Howey analysis), a commodity (CFTC jurisdiction, and the CFTC has pursued crypto pump-and-dumps as fraud and manipulation), or whether the conduct is wire fraud regardless of classification. The promotional-fraud core is reachable even where the asset's status is contested. A "rug pull" (where organisers abandon the project and abscond with funds, for instance by draining liquidity) is a related but distinct fraud: a pump-and-dump manipulates a market price, a rug pull steals the underlying funds directly. The honest framing for an engineer: if you build bots against crypto or prediction-market venues, you will encounter these schemes, and recognising the accumulate-promote-pump-dump footprint protects you from being the late buyer and keeps your own activity clearly on the legitimate side. Participating, even as a "late" buyer who knows it is a pump, can itself expose you to liability and loss.

How does this apply to prediction markets?

Prediction markets and thin crypto venues are vulnerable to manufactured-information manipulation that rhymes with pump-and-dump: false claims about an event's outcome, or coordinated promotion, can move a thin contract before the truth corrects it. Detection uses the same forensics: anomalous price and volume timed to a messaging burst, concentrated accounts distributing into it.

Prediction markets bound the payoff (a contract resolves to a known value) so a "dump" is ultimately checked by resolution. But the interim manipulation, moving a contract on false information and exiting before resolution, is the same false-signal fraud MAR and securities law reach where they have jurisdiction. On thin event contracts, the accumulate-promote-distribute footprint is detectable in the order and message record exactly as it is in equities and crypto.

How is it detected and prosecuted?

Detection combines trading forensics (anomalous price-and-volume spikes, concentrated accumulation before promotion and concentrated distribution into it) with social and on-chain forensics: coordinated messaging bursts, bot patterns, and, in crypto, wallet clustering showing the same actors accumulating then dumping. Prosecution then proves the false or misleading promotion and the insider distribution.

Five signals combine. An anomalous price-and-volume spike with no genuine underlying news, timed to a promotion burst. Concentrated accumulation before the pump and concentrated distribution into it by a small set of correlated accounts. Coordinated messaging forensics: a burst of promotional content, bot or sock-puppet amplification, and, where applicable, paid-promotion disclosure failures. On-chain forensics in crypto: wallet clustering and fund-flow analysis linking the accumulators to the dumpers and to the promotion channel. And account-level correlation: the promoters and the sellers are the same actors or coordinated. The SEC, CFTC, FCA, and DOJ pursue these, and venues run machine-learning anomaly detection over price, volume, and message data to flag candidate schemes for investigation.

Worked example

A synthetic, checkable detection walkthrough, as of 2026, framed as a forensic reconstruction, how it is caught, not how it is done. A thinly traded micro-cap token has a baseline of ~$50k daily volume and a price of $0.10. Over a week, a small cluster of wallets quietly accumulates ~30% of the float at $0.08–$0.11 (phase 1). A coordinated promotion burst then hits Telegram, Discord, and X: fabricated "partnership" news, influencer posts, bot-amplified hype (phase 2) with no verifiable underlying event. Volume spikes 40× and the price runs to $0.45 as retail buys the hype (phase 3). The accumulating wallets sell nearly all their holdings into the spike between $0.35 and $0.45 (phase 4) and the price collapses to $0.06, below the start.

Read the tells. The price/volume anomaly: a 4.5× price move on 40× volume with no genuine news, flagged automatically. The accumulate-then-distribute pattern: on-chain wallet clustering shows the same wallets that accumulated at ~$0.09 sold at ~$0.40 into the spike. The promotion correlation: the messaging burst precedes the pump by hours, with bot and sock-puppet patterns evident in the social data. And the victim transfer: the realised gain of the cluster equals the realised loss of the late buyers, the fraud's signature transfer. The case is then built by proving the promotion was false or misleading and that the promoters and sellers were the same coordinated actors: the §10(b)/Rule 10b-5 and MAR Art. 12(1)(c) elements.

The lesson: the scheme is loud in the data: anomalous price and volume, a synchronised promotion burst, and an accumulate-then-dump wallet or account footprint. Recognising it protects you from being the late buyer. The figures are synthetic and illustrative; a real case rests on the trading, message, and on-chain record, not on round numbers. See market manipulation for where this sits among the related conduct.