Insider Trading Signals: How to Read SEC Form 4 Filings

What Are Insider Trading Signals?

Insider trading signals are patterns detected in the legally mandated SEC filings of corporate insiders — executives, directors, and shareholders who own more than 10% of a company's stock. Under Section 16(a) of the Securities Exchange Act of 1934, these individuals must disclose every purchase, sale, or transfer of their company's shares by filing SEC Form 4 within two business days. The filings are published on the SEC's EDGAR database and are freely available to anyone.

The logic is straightforward. A CEO who spends $2 million of personal money buying shares on the open market is making a voluntary bet with their own wealth — not exercising options, not receiving a grant, but writing a check. That person has access to quarterly revenue trends, pipeline health, customer retention data, and strategic plans that public investors will not see for weeks or months. When three, four, or five executives at the same company all make similar purchases within a short window, the signal carries substantially more diagnostic weight.

Think of insider filings as a doctor's own health choices. If a cardiologist quietly starts exercising more, adjusting their diet, and taking specific supplements, they may know something about heart health that their patients have not yet been told. Insider buying is the corporate equivalent — the people with the deepest operational knowledge are putting their own money on the line.

How to Read an SEC Form 4 Filing

SEC Form 4 is a one-page disclosure document filed with the SEC's EDGAR system. Not all filings are created equal — the transaction code is the single most important field for distinguishing signal from noise.

Transaction Code P: The Only Code That Matters

The most common mistake when analyzing insider filings is treating all transactions equally. A Form 4 with transaction code A (award or grant) means the company issued shares to the insider as part of their compensation package — the insider did not spend any money. Code M (option exercise) means the insider converted previously granted options into shares, often as a scheduled liquidity event. Code S (sale) may be part of a pre-arranged 10b5-1 trading plan.

Only transaction code P — an open-market purchase — represents a voluntary decision to commit personal capital at the current market price. This is the only transaction type that carries genuine informational value about the insider's confidence in the company's future. MarketTriage filters exclusively for code-P transactions when generating insider signals.

What Are Insider Buying Clusters and Why Do They Matter?

An insider buying cluster occurs when three or more unique corporate insiders purchase shares on the open market within a compressed timeframe — MarketTriage uses a 15-day acute window — with each transaction exceeding a minimum dollar threshold. A single insider buying shares is informative. Multiple insiders buying within the same narrow window is a diagnostic pattern that academic research has consistently linked to above-average forward returns.

A landmark 2002 study by Lakonishok and Lee published in the Review of Financial Studies found that stocks with heavy insider buying outperformed the market by an average of 4.8% over the following 12 months. A 2012 study by Cohen, Malloy, and Pomorski in the Journal of Finance further refined the signal, distinguishing between "routine" insider trades (predictable, calendar-based patterns) and "opportunistic" trades (irregular timing, often preceding material news). Opportunistic purchases — the kind cluster detection identifies — showed significantly stronger predictive power, with a 6-month alpha of roughly 5.2% above the benchmark.

If one nurse at a hospital starts buying the hospital's stock, it could mean anything — a birthday gift, a tax strategy, a hunch. If the CEO, CFO, and three board members all buy within the same week, spending six or seven figures of personal money, the diagnosis is different. That is what cluster detection measures.

MarketTriage Cluster Detection Criteria

MarketTriage scans the SEC EDGAR database daily for new Form 4 filings. The insider engine applies four filters to separate signal from noise:

When five or more insiders meet these criteria, the system flags the cluster at high conviction — a rare event that has historically preceded significant price moves. In the MarketTriage conviction scoring system, a 3-4 insider cluster contributes 15-20 points toward the asset's total conviction score, while a 5+ insider cluster contributes 20-25 points.

Why a Single Insider Purchase Is Not a Reliable Signal

A single insider buying shares can occur for dozens of reasons unrelated to the company's prospects. Personal portfolio rebalancing, tax-loss harvesting offsets, contractual ownership requirements for new directors, and signaling confidence during a PR crisis all generate Form 4 filings with transaction code P. Without additional context, a lone filing is indistinguishable from noise.

Consider a real-world example: in Q3 2023, a newly appointed director at a mid-cap technology company purchased $50,000 in shares within their first week on the board. The filing generated headlines on retail-facing insider tracking websites. The purchase, however, was a contractual requirement of the director's appointment agreement — it carried zero informational value about the company's outlook. The stock declined 18% over the following quarter.

Contrast this with a true cluster event: in November 2022, five insiders at a regional bank — including the CEO, CFO, and three independent directors — purchased a combined $4.2 million in shares over eight days following a sector-wide selloff driven by rising interest rate fears. The purchases were unprompted by any contractual obligation and occurred at prices near the 52-week low. The stock recovered 34% within six months. The difference is not the existence of an insider purchase — it is the convergence of multiple independent actors making voluntary capital commitments at the same time.

A single vital sign reading in isolation — say, a slightly elevated temperature — rarely justifies a diagnosis. But when temperature, blood pressure, and white cell count all move in the same direction simultaneously, the convergence narrows the diagnostic possibilities dramatically. Cluster detection applies the same principle to insider filings.

Insider Cluster Buys: The 3-Insider Open-Market Pattern

An insider cluster buy is when 3 or more unique corporate insiders make open-market purchases of the same stock within a short window — typically 7 to 14 days. The pattern is more diagnostic than any single executive's purchase because it captures multiple independent actors (CEO, CFO, directors, 10%+ owners) committing personal capital at roughly the same price level. Cluster buys are tracked on dedicated feeds at OpenInsider, 13Radar, InsiderFinance, and 2iQ Research — the same data, surfaced at different thresholds.

How Different Services Define the Window

There is no SEC-defined window for a "cluster." Each tracker picks its own threshold, which materially changes how many tickers qualify on any given day:

MarketTriage's rationale for the 15-day acute window: insider buying — unlike selling — is discretionary and tends to compress in time. When executives decide the stock is undervalued, they typically act within days, not weeks. The 60-day backdrop layer catches sequential buying across two earnings cycles, weighted lower than the acute window in the conviction score.

Why the Cluster Pattern Has Held Up in Research

The empirical case for cluster buys rests on three studies that are still routinely cited in 2026:

These figures are historical alpha measurements, not forward guarantees. Sample sizes are large but the studies pre-date the post-2010 explosion in algorithmic trading and 10b5-1 plan usage, both of which compress the public-information window. Treat the numbers as evidence the pattern has had statistical validity over multi-decade samples — not as a target return.

Cluster Buys in the Smart Money Stack

An insider cluster on its own is one signal. The conviction picture sharpens when the cluster aligns with quarterly 13F whale accumulation from institutional filers — Berkshire, Bridgewater, Pershing Square, Renaissance Technologies, and 11 others tracked by MarketTriage. When both insider buying (Form 4) and whale accumulation (13F) point the same way on the same ticker, the system awards a 25-point smart money bonus and triggers an automatic regime promotion. The full multi-signal framework — insider, whale, COT, technical, regime — is mapped on the Smart Money tracking hub.

How MarketTriage Automates Insider Signal Detection

MarketTriage's insider engine scans the SEC EDGAR Full-Text Search system daily, parsing Form 4 XML filings for every equity in its 230-asset monitoring universe. The engine extracts transaction codes, dollar values, reporting relationships, and filing dates, then applies the cluster detection algorithm described above. The entire pipeline runs autonomously — no manual review required.

From Filing to Dashboard: The Signal Pipeline

When the insider engine detects a cluster meeting all four criteria, the signal flows through a multi-stage pipeline:

The Smart Money Override

The most powerful signal in the MarketTriage conviction system is not any single data source — it is the alignment of independent smart money signals. When an insider buying cluster coincides with whale accumulation detected through 13F filings from major institutional investors, the system triggers a "smart money override" — an automatic regime promotion that bypasses normal scoring thresholds. This override awards 25 bonus conviction points and can elevate an asset directly to OBSERVATION status in the 6-state regime classification framework.

The rationale: when both corporate insiders (who know the company's internal operations) and institutional whales (who have dedicated research teams and billions in capital) independently arrive at the same conclusion — to accumulate — the convergence represents the strongest available evidence of undervaluation. It is the market equivalent of both the patient's own physician and an independent specialist recommending the same treatment.

How Insider Signals Feed Into Conviction Scoring

MarketTriage does not treat insider signals in isolation. Every insider cluster feeds into a multi-source conviction scoring system that combines insider data with COT institutional positioning, 13F whale holdings, technical price structure, and macro context. The conviction score determines an asset's regime classification and its position on the triage dashboard.

The conviction score is one input into MarketTriage's 6-state regime classification — a diagnostic framework that classifies every asset into one of six states: STABLE, CLEARANCE, OBSERVATION, ELEVATED, CRITICAL, or BREAKDOWN. A high-conviction insider cluster can be the signal that tips an asset from STABLE into CLEARANCE, or from CLEARANCE into OBSERVATION when combined with other bullish confluence factors.

Common Mistakes When Analyzing Insider Filings

How to Look Up Form 4 Filings on SEC EDGAR

SEC EDGAR is the primary public database for all corporate filings, including Form 4 insider transaction reports. No registration or account is required — every filing is freely accessible. Here is a step-by-step process for looking up insider transactions for any publicly traded company.

For detailed instructions on reading Form 4 fields, see the SEC's official Form 4 instructions page. MarketTriage automates this entire process — scanning EDGAR daily, filtering for code-P transactions, and detecting clusters across all 230 monitored equities.

Insider Trading Trackers Compared

Several tools provide access to SEC Form 4 insider filing data. They differ in scope, automation, and whether they combine insider signals with other institutional data sources. The table below compares the most widely used insider tracking platforms.

Most insider tracking tools display raw Form 4 data without filtering by transaction code or applying cluster detection logic. MarketTriage is the only platform that combines insider cluster detection with 13F whale holdings, COT institutional positioning, and regime classification into a unified conviction scoring system.

Frequently Asked Questions