Pre-trade compliance is the automated screening every broker-dealer runs on an order before it reaches an exchange, catching trades that would exceed financial limits, violate securities laws, or hit the market with obvious errors. The core requirement comes from SEC Rule 15c3-5, the Market Access Rule, which obligates any firm with exchange or ATS access to maintain documented risk management controls and supervisory procedures reasonably designed to manage the financial and regulatory risks of that access.1eCFR. 17 CFR 240.15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access Stopping a bad order before it executes is always cheaper than unwinding it afterward. Firms that have failed at this have paid as much as $12 million in a single enforcement action.
The Rule Behind the Checks
Rule 15c3-5 applies to every broker-dealer that accesses an exchange or alternative trading system, whether trading for its own account or sponsoring customer access. The rule’s central move was banning what the SEC called “unfiltered” or “naked” access, where a customer’s orders flowed straight onto an exchange without passing through any of the sponsoring broker’s controls.2U.S. Securities and Exchange Commission. SEC Adopts New Rule Preventing Unfiltered Market Access Under the rule, the sponsoring broker-dealer is legally responsible for every order sent under its market participant identifier, which is why those orders now have to pass through the broker’s compliance engine.
FINRA Rule 3110 sits alongside the SEC rule, requiring each member firm to maintain a supervisory system reasonably designed to achieve compliance with securities laws and FINRA rules generally.3FINRA. FINRA Rule 3110 – Supervision Where 15c3-5 focuses specifically on the market-access checks, Rule 3110 covers the broader supervisory framework those checks sit inside.
Neither rule prescribes specific dollar thresholds or percentages. The language is “reasonably designed” for the firm’s business and customer base, because a large institutional broker and a small retail firm face very different risk profiles.
Financial Risk Checks
The first category of required controls targets financial exposure. Rule 15c3-5 says a firm’s systems must prevent the entry of orders that exceed appropriate pre-set credit or capital thresholds, both for each customer and for the firm in the aggregate.4U.S. Securities and Exchange Commission. Rule 15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access Those thresholds set a ceiling on how much financial risk any single order, or any accumulating series of them, can create.
Within that framework, firms deploy a handful of specific mechanisms.
Fat-finger checks catch orders with obvious data-entry errors. If a trader keys in an order to sell 100,000 shares when they meant 10,000, the system compares the size against recent volume and flags anything well outside normal ranges.
Price collars block orders priced too far from the current market. If a stock is trading near $50, a collar can stop an order entered at $60 on the theory that the price is almost certainly a mistake rather than a legitimate limit.
Concentration limits cap how much exposure a single trader or desk can accumulate in one security or sector. They are calibrated to the firm’s overall capital, so that one bad position cannot threaten solvency.
Regulatory Risk Checks
The second category keeps the firm on the right side of securities law. Rule 15c3-5 requires systems that prevent the entry of orders unless pre-order regulatory requirements are satisfied, and that block orders in securities the person is restricted from trading.1eCFR. 17 CFR 240.15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access
Restricted and Watch Lists
Firms maintain internal restricted lists identifying securities that employees or the firm itself cannot trade. The list typically includes companies where the firm possesses material non-public information, often through investment banking work on mergers, underwritings, or advisory engagements. If a firm is advising on an acquisition, the target’s stock goes on the restricted list and the pre-trade system blocks any employee order in that name.
Watch lists do related but different work. Securities on a watch list are not necessarily blocked, but trades in those names get heightened scrutiny and may trigger additional review. Compliance departments update both lists continuously as engagements open and close.
The stakes behind these screens are real. Trading a restricted security can trigger insider trading enforcement, with civil penalties up to three times the profit gained or loss avoided.5Office of the Law Revision Counsel. 15 USC 78u-1 – Civil Penalties for Insider Trading Criminal prosecution for willful violations carries a maximum fine of $5 million and up to 20 years’ imprisonment for individuals, and $25 million for firms.6Office of the Law Revision Counsel. 15 USC 78ff – Penalties
Short Sale Locates
Regulation SHO adds another pre-trade gate. Before executing a short sale in any equity security, Rule 203(b)(1) requires the broker-dealer to borrow the shares, enter a firm arrangement to borrow them, or have reasonable grounds to believe they can be borrowed and delivered by settlement.7U.S. Securities and Exchange Commission. Division of Market Regulation – Regulation SHO FAQ The locate must be in hand before the order is accepted. It is a true pre-trade control, not a post-trade reconciliation.
A locate obtained early in the day can sometimes be reused for later short sales in the same security on the same day, provided the quantity doesn’t exceed the original amount and the source confirmed it was good for the full day. That reuse does not apply to hard-to-borrow or threshold securities, where a fresh locate is needed before each short sale order.
How the System Fires
The checks run inside an Order Management System or Execution Management System. The moment a trader submits an order, the system intercepts it and runs it through the pre-trade compliance engine before any exchange sees it. The whole thing takes milliseconds.
When an order fails a check, the system reacts in one of three ways depending on severity.
A hard block rejects the order outright. It cannot reach the exchange under any circumstances. A trade in a restricted security or an order breaching firm capital limits gets a hard block.
A soft warning flags a potential issue but lets the trader proceed after confirming the order. These suit ambiguous situations where the order might be legitimate but sits near a threshold.
A manual override requires a designated compliance officer to review and approve the order before it moves. That approval creates an audit trail showing who signed off, when, and why.
Every one of these outcomes is logged. The system records all blocked, warned, and overridden orders, generating the documentation regulators expect to see in an exam. Rule 15c3-5 also requires that appropriate surveillance personnel receive immediate post-trade execution reports for all orders resulting from market access, closing the loop between pre-trade gates and post-trade review.1eCFR. 17 CFR 240.15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access
Exchange-Level Backstops
No firm’s internal controls can prevent a market-wide cascade, so the exchanges run their own safeguards on top. The Limit Up-Limit Down plan sets price bands around every listed security based on recent trading, using the average of eligible trades over the preceding five minutes as a reference price.8Limit Up Limit Down. Limit Up Limit Down For Tier 1 securities above $3.00, the band is 5% in each direction during regular hours; for Tier 2 above $3.00, it widens to 10%; low-priced securities below $0.75 get the lesser of $0.15 or 75%. Orders that would execute outside the band are blocked or the security enters a trading pause.
Market-wide circuit breakers handle broader declines. A 7% drop in the S&P 500 against the prior close triggers a 15-minute Level 1 halt; 13% triggers a Level 2 halt of the same length; a 20% drop closes the market for the rest of the day.9New York Stock Exchange. Market-Wide Circuit Breakers FAQ Level 1 and 2 can each trigger only once per day, and only between 9:30 a.m. and 3:25 p.m. ET. A firm’s own engine has to account for the possibility that a halt lands between order submission and execution.
Annual Review and CEO Certification
Pre-trade compliance is not something a firm builds once and leaves alone. Rule 15c3-5 requires each broker-dealer to review the effectiveness of its risk management controls at least annually, under written procedures. The CEO or equivalent officer must personally certify each year that the firm’s controls comply with the rule and that the review was conducted.1eCFR. 17 CFR 240.15c3-5 – Risk Management Controls for Brokers or Dealers With Market Access FINRA Rule 3110 layers on additional annual inspections of offices of supervisory jurisdiction and branch offices that oversee others, with non-supervisory branches inspected at least every three years and a written report retained for at least three years.3FINRA. FINRA Rule 3110 – Supervision
Firms are also expected to monitor whether credit thresholds and risk models remain appropriate between annual reviews. A threshold set in January can be dangerously loose by September if volumes or product mix shift. The logs, override justifications, and block records that pre-trade systems generate are subject to SEC recordkeeping rules under Rule 17a-4, with multi-year retention and the first two years in easily accessible form.10eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers When examiners arrive, those records are the first thing they ask to see.
When Pre-Trade Fails
No system catches everything, and the SEC has shown it will treat failures as serious violations rather than paperwork lapses. In August 2012, a botched code deployment caused Knight Capital’s equity router to flood the market with millions of erroneous orders. The firm lost roughly $460 million in the 45 minutes before the problem was contained. The SEC found Knight lacked adequate controls at the point immediately before orders reached the market, relied on financial risk controls that could not prevent orders exceeding its capital thresholds, had insufficient code deployment and testing procedures, and had not properly completed its CEO certification. Knight paid $12 million to settle.11U.S. Securities and Exchange Commission. SEC Charges Knight Capital With Violations of Market Access Rule
In 2025, Liquidnet, Inc. paid a $5 million civil penalty for failing to maintain reasonably designed risk management controls, failing to systematically limit financial exposure, and failing to properly complete the annual CEO certification.12U.S. Securities and Exchange Commission. Administrative Proceeding File No. 33-11351 – Liquidnet, Inc.
When an order does slip through and executes at a clearly wrong price, FINRA and the exchanges can review and cancel the trade. The deviation thresholds that make a transaction “clearly erroneous” vary by stock price and time of day: 10% for stocks priced up to $25.00 during normal hours, 5% for stocks between $25.01 and $50.00, and 3% for those above $50.00, with wider thresholds outside regular hours.13FINRA. FINRA Rule 11892 – Clearly Erroneous Transactions in Exchange-Listed Securities A FINRA officer generally must act within 30 minutes of becoming aware of a potentially erroneous trade. That remediation path exists precisely because pre-trade controls occasionally miss, but its availability does not reduce the obligation to catch orders before they execute.