Hedged and Hidden: The Coordinated Strategies Draining Retail Broker P&L

As featured in Finance Magnates, 1st October 2026:

30% of broker P&L is being lost to only 1% of their clients. The future of risk management depends on identifying this small proportion of sharp and abusive traders capable of extracting millions while representing only a fraction of the client base.

The result is a growing blind spot: brokers are trying to detect network-level behaviour using only account-level data.

Negative balance protection abuse, swap abuse and bonus abuse frequently depend on coordinated positions across accounts that can be linked. Those accounts may sit with the same broker, but they can just as easily be spread across several. In isolation, each can look like a perfectly legitimate retail trader. It is only when the accounts are connected that the underlying strategy becomes visible.

Consider a trader holding a losing leveraged position at one broker and an offsetting winning position at another. To either broker, the account may look unremarkable. At network level, economic relationships are obvious.

Cross-broker activity is common. More than one in three hedged positions identified across the Radar Network are cross-broker - activity that no individual broker has the data to see on its own. The question for risk teams is no longer whether to look for coordinated activity, but whether they have the infrastructure to see it.

Why hedged activity matters

Hedging between related accounts is a common structural feature of several forms of brokerage exploitation.

1. Negative balance protection abuse

Negative balance protection abuse involves a trader opening accounts at different brokers and taking opposing leveraged positions. Following a large market move, one account may be stopped out while the opposing account generates a substantial profit.

Where the losing account benefits from negative balance protection, the trader's downside would be limited to the amount originally deposited, leaving the broker to absorb the remaining deficit. Traders can profit ten times their deployed capital with such strategies.

2. Swap abuse

Swap abuse relies on maintaining offsetting positions across brokers with different overnight financing terms. A trader then seeks to capture the difference between the swap paid, or avoided, on one side of the position and the swap received on the other leg of the hedged position.

This can be particularly profitable where one account benefits from swap-free or Islamic-account terms.

3. Bonus abuse

Bonus abuse typically involves opening several accounts that generate the minimum trading activity required to unlock promotional balances, whilst using offsetting positions to avoid market exposure. Once the bonus is credited, the trader then withdraws the bonus and their initial deposit across all their accounts.

For traders draining funds from brokers using negative balance protection abuse, swap abuse or bonus abuse, the individual accounts appear as legitimate, normal traders. Whilst sophisticated brokers may be able to identify cross-account hedging within their users, iSAM Radar identifies over 1 in 3 hedged positions as cross-broker, activity that individual brokers do not have the data to identify.

The scale is vast

Over 1,500 cross-broker hedged accounts are being identified across the Radar Network each month. These are traders where the economic impact of their trading becomes clear once related logins are viewed as a single entity.

What cross-broker visibility requires

Detecting coordinated activity requires two things a single-broker view cannot supply.

The first is a way to identify when multiple accounts belong to the same underlying trader. Within Radar, this utilises proprietary clustering methodology, combining identifiable information with trading behaviour analysis to highlight traders with multiple accounts within the network.

The second is a threshold. Not every hedged position is meaningful. A signal that is genuinely useful to brokers requires a minimum-position filter that keeps the focus on economically significant hedged positions, so risk teams see the trades that matter without being clouded by the trades that don't.

The combination of clustering and a meaningful threshold turn what would otherwise be a noisy stream of unrelated flags into a workable signal.

A different way of looking at the same book

None of these abuse strategies are new, they have always been on brokers' books. What has changed is the level of visibility available. Providing a network-level view puts the relationships between accounts into focus.

iSAM Securities Radar is the additional layer of intelligence for retail broker risk, providing cross-broker clustering and controlled alerting of coordinated trading activity. To see how Radar surfaces coordinated activity on your book, visit isam-securities.com/solutions/radar.

*iSAM Securities (USA) Inc.