How to Find Insider Buying That Actually Matters
The popular advice on how to find insider buying is incomplete. Filtering SEC filings for open-market purchases is necessary, but it isn't an investment process. A raw list of executives buying shares mixes genuine conviction with option exercises, tax withholding, gifts, routine compensation activity, and trades made by insiders whose historical judgment may be poor.
The useful question isn't, “Which insiders bought?” It's, “Which purchases contain information the market may not have fully absorbed?” That requires context. I focus on four variables: the insider's role, the economic size of the purchase, clustering across reporting persons, and the stock's condition when the buying occurs. Then I verify the filing manually before treating it as a trade idea.
Why Most Insider Buying Screens Fail Before They Start
A Form 4 records a transaction, not the reason for it. That distinction is why a raw EDGAR pull produces more noise than insight. The same filing system can show a CEO committing personal capital in the open market, an executive exercising options, or an insider receiving shares through compensation.
Start with transaction type. In U.S. markets, Form 4 is the required disclosure for officers, directors, and beneficial owners above 10% when they change holdings. Filings generally must be reported within two business days of the trade, as described by SEC Form 4 tracking guidance. The SEC insider-transactions dataset uses the XML portions of Forms 3, 4, and 5, so Form 4 remains the foundation for timely monitoring.

The raw screen is only the first pass
A purchase-only screen collapses trades that carry very different information. A small director purchase and a substantial CEO purchase may appear identical in a basic feed, despite differences in operating responsibility and personal commitment. Several filings may also reflect one mechanical arrangement rather than independent decisions.
Use four filters before a filing becomes a trade idea:
- Role: Prioritize the CEO, CFO, chair, and directors with meaningful economic exposure. Operating authority matters more than title alone.
- Size: Compare the purchase with the insider's own prior open-market activity. Judge significance against that person's established behavior.
- Cluster: Look for multiple reporting persons buying within a short period. One buyer can be wrong. Independent buyers acting together offer stronger confirmation.
- Timing: Focus on purchases after a significant drawdown, an earnings reset, or a company-specific shock.
The context layer is where a basic 51% win rate can become a useful search for abnormal returns. Role, clustering, drawdown timing, and post-trade behavior deserve more weight than a simple count of purchases.
Academic evidence supports filtering rather than following every reported buy. The classic Wharton sample earned more than 50 basis points of abnormal return per month, with roughly one-quarter of total abnormal return arriving in the first five trading days and about one-half within the first month. That timing makes the filing date important. By the time a casual investor sees a trade in a delayed summary, part of the reaction may have occurred.
Practical rule: Treat every screen as an inbox. Do not treat it as a portfolio.
Reading Form 4 and EDGAR Without Getting Lost
Form 4 becomes readable once you follow a fixed sequence. Begin with the issuer, reporting person, relationship to the company, transaction date, and filing date. The relationship field identifies whether the filer is a CEO, CFO, director, or another Section 16 reporting person. Confirm the role from the filing rather than guessing from the name.
Then move directly to the transaction table and find the transaction code. Code P marks an open-market or private purchase, the core starting point for a buying signal. Code A commonly records an acquisition through compensation or another non-market mechanism. Code M marks an option exercise. Code S records a sale, including sales made under a trading plan. These codes do not complete the analysis, but they eliminate basic classification mistakes.

A two-minute reading sequence
Use the same order for every filing:
- Confirm the trade date and filing date. A filing may arrive after the transaction. Form 4 transactions generally must be reported within two business days, so the gap matters during a fast move. Market attention often centers on the filing date rather than the trade date, as earlier research on Form 4 signals indicates.
- Read the code and transaction price. A P-coded transaction at a stated market price deserves attention. A share increase without a meaningful cash purchase may reflect compensation, conversion, or an exercise.
- Check shares owned after the transaction. The post-transaction holdings table shows whether the insider owns common stock directly or through an indirect entity.
- Reconcile ownership codes. Code D generally indicates direct ownership. Code F identifies shares withheld or surrendered to satisfy an obligation, such as taxes. Treat that activity as mechanical unless the filing provides evidence of discretionary buying.
- Read the footnotes. They can explain derivative securities, conversion terms, trust ownership, restricted stock, or a trading-plan arrangement.
The holdings table catches errors that transaction screens routinely miss. A row may appear bullish until a footnote shows that the shares came from an option exercise or were withheld for taxes. Separate common stock from derivative securities as well. A derivative purchase can carry a different signal from an open-market purchase of common shares.
The SEC's insider-transactions data sets provide the underlying filing data. EDGAR supplies the original document and footnotes needed for verification. Use aggregators to find candidates, then return to the filing before logging a signal or building a trade idea.
The Four-Layer Filter That Separates Signal from Noise
Open-market buying is only the starting point. A useful insider screen should narrow as the evidence improves, adding role, personal exposure, clustering, and price context before a filing becomes a trade candidate. That context layer is what separates a headline purchase from a potentially meaningful signal.
Layer one is role
Start with the person behind the filing. CEOs and CFOs sit closest to operating performance, capital allocation, liquidity, and internal forecasts, so their discretionary purchases usually merit more attention than those of non-operating officers. A chair or independent director can also matter when that person has a long ownership record and a clear understanding of the company's strategy. The title alone does not establish conviction.
Exclude routine activity that says little about operating judgment, including transactions tied to compensation, vesting, or mechanical plan execution. This is a signal-quality decision, not a judgment about the executive.
Layer two is size
Dollar value ranks insiders poorly on its own. Compare the purchase with the insider's previous open-market activity, compensation, and existing ownership. A purchase that is large relative to that person's normal behavior can be more informative than a larger trade by an insider who routinely invests substantial sums.
A purchase-only screen can still be noisy because it treats a small director purchase and a substantial CEO purchase as equivalent, even though their roles and personal commitment differ. Use deliberate exposure as the test. The relevant question is whether the insider meaningfully increased personal risk, not whether the transaction crossed a fashionable cutoff.
Layer three is clustering
Several insiders buying within a short window deserve more scrutiny than one isolated purchase. Clustered activity can indicate that multiple people independently view the share price as mispriced, especially when the buyers hold different positions. A CEO and CFO buying together carries a different implication from several related entities reporting transactions tied to one person's ownership structure.
The insider-buying screening framework places emphasis on role, timing, and confirmation across insiders rather than ranking the largest transactions. Apply that logic before allowing a large isolated purchase to dominate the screen.
Layer four is timing
Price context distinguishes accumulation from reflexive buying. Prioritize purchases after a meaningful decline from a recent high, a guidance reduction, or a market dislocation. Buying after weakness can reflect a belief that the market overreacted. Buying into strength may reflect a different objective, including routine exposure or ongoing participation in a winning position.
| Layer | Threshold | Rationale |
|---|---|---|
| Role | CEO, CFO, chair, or economically exposed director | Operating authority and personal exposure improve interpretability |
| Size | Material relative to the insider's prior buying pattern | Personal behavior provides a better baseline than a universal cutoff |
| Clustering | Multiple reporting persons buying in a short window | Independent confirmation reduces reliance on one judgment |
| Timing | Purchase after drawdown, reset, or dislocation | The trade may express a view on normalized value rather than momentum |
The published comparison supports using the full context stack. Purchases alone produced about +1.0% average 30-day return with a 51.1% win rate, while purchases after a 10% to 60% decline from a recent high produced about +2.3% average 30-day return and a 58.4% win rate, according to the published analysis. Treat those figures as evidence for better screening, not as a promise for any individual trade. Context changes the signal.
Manual Pulls, Free Screeners, or Paid Alerts
Your tool should match your investment process. A part-time investor covering a small watchlist doesn't need the same workflow as a portfolio manager monitoring the entire U.S. market.
| Source | Cost | Data Lag | Coverage | Clustering Detection | 10b5-1 Tagging | Best For |
|---|---|---|---|---|---|---|
| EDGAR RSS and full-text search | Free | Filing-dependent | Focused, issuer by issuer | Manual | Manual | DIY investors with time |
| OpenInsider and Finviz | Free | Aggregator-dependent | Broad | Limited to moderate | Varies by platform | Retail investors wanting breadth |
| Paid alert services | Subscription-based | Often real-time or near-real-time | Broad and automated | Usually stronger | Often automated | Active investors needing speed |
Manual EDGAR work gives you the cleanest relationship with the source document. You can inspect footnotes, ownership tables, and amendments without relying on an aggregator's classification. The drawback is time. For a focused universe, daily review is manageable. For broad coverage, manual monitoring becomes repetitive and makes clustering harder to spot.
Free screeners improve discovery. OpenInsider is useful for scanning Form 4 activity, while Finviz can help combine insider activity with valuation, price performance, and market filters. Their weakness is context. A preset “purchase” filter may not tell you whether the transaction was part of a plan, whether the insider has a meaningful operating role, or whether several filings belong to the same cluster.
Paid platforms are justified when speed affects execution. Services such as Altymo, Form4Oracle, and Insider Monkey Pro can surface alerts, organize historical activity, and help identify patterns such as CEO or CFO purchases, repeated accumulation, clusters, and buying after drawdowns. Compare the actual feature set before subscribing. “Real time” doesn't eliminate the need to verify the original Form 4.
Use automation to reduce search time, not to outsource judgment.
My preferred workflow is hybrid. Use an alert service for first-pass discovery, a free screener for broader cross-checking, and EDGAR for final verification. That combination preserves speed while keeping the primary document in the decision loop.
Verifying a Buy Before You Trust It
A Form 4 deserves a place on your watchlist only after it passes a verification routine. Start with the issuer's full insider history, not just the latest filing. You want to know whether this is a first open-market purchase after a long period of inactivity, a repeat buyer averaging down, or a routine pattern that has produced little information in the past.
Then confirm the transaction code. P is the relevant starting point for an open-market purchase. F can indicate tax withholding or shares surrendered to meet an obligation, G can identify a gift, and M can reflect an option exercise. Those events may change ownership, but they don't automatically demonstrate discretionary bullishness.
The five checks I require
- Code: Is the transaction a genuine open-market purchase rather than an acquisition, exercise, gift, or withholding event?
- Role: Does the buyer have operating authority or meaningful board-level insight?
- Context: Did the purchase follow a drawdown, guidance change, earnings disappointment, or other identifiable event?
- Plan status: Do the footnotes or related company disclosures indicate a Rule 10b5-1 plan?
- Price action: Is the stock trading near a meaningful area of weakness, or is the filing confirming a move already recognized by the market?
Review company disclosures for the date a trading plan was adopted or amended. Footnotes may provide the relevant explanation, and an issuer's current reports can add context. A plan transaction isn't automatically useless, but it should be scored differently from a clearly discretionary purchase.

I log the filing, buyer, role, code, transaction price, post-trade ownership, plan status, recent price movement, and prior buying history. If any core field is unclear, I keep the name on a research list rather than converting it into a trade.
A Real Workflow From Filing to Trade Idea
Consider a hypothetical mid-cap industrial that has fallen 38% from its 52-week high and then reports three Form 4 purchases within six trading days. The buyers are the CEO, CFO, and a director. Each transaction uses code P, and none is flagged as a 10b5-1 execution. This is the kind of setup that merits investigation, not automatic buying.
Start by pulling the filings from EDGAR and sorting them by transaction code and date. Confirm that each buyer purchased common shares in the open market and record the average transaction price. Then examine each person's historical Form 4 activity. The key question is whether the three filings represent new conviction or routine vesting that happens to appear close together.
Next, review the issuer's recent disclosures for any trading-plan adoption or amendment. Search the company's current reports and Form 4 footnotes for plan language. After that, read the latest earnings release and call transcript. A stock can fall because the market overreacted to temporary weakness, or because management's assumptions have deteriorated. Insider buying doesn't resolve that distinction.
The cluster is the alert. The earnings review decides whether it is investable.
Suppose the review finds no going-concern language, a recent guidance reduction, and a price decline that appears larger than the change in normalized earnings assumptions. I would add the company to a trade watchlist, not rush into a full position. A disciplined investor might define a small initial allocation, establish a stop below the recent low, and add only if the price holds above the cluster's average cost. The exact allocation must reflect portfolio risk, liquidity, and volatility.
Position management matters after entry. Define in advance what would invalidate the thesis, including a materially worse earnings outlook, a relevant insider sale, or new information about a trading plan. Log the thesis, entry, exit rules, and actual outcome. Without that record, every successful trade looks like proof and every failure gets rationalized.
Common Pitfalls and Risk Management
The most damaging mistake is confusing a change in ownership with a discretionary purchase. Gifts, option exercises, tax withholding, and plan-related transactions can all create activity that looks bullish in a headline feed. The counter-rule is simple: don't act until the code, footnotes, and ownership table agree.
The second mistake is chasing every cluster. A cluster among low-signal roles, related entities, or routine compensation events isn't equivalent to independent buying by senior operators. Require role quality and transaction context before assigning weight.
The third mistake is sizing from excitement. Insider buying is an informational edge, not a guarantee. Keep each idea small enough that a wrong signal doesn't damage the portfolio, and define the exit before entering.
Use this checklist:
- Transaction integrity: Confirm P-coded open-market buying and exclude mechanical events.
- Role quality: Give greater weight to CEOs and CFOs than to routine or peripheral filers.
- Plan review: Check footnotes and company disclosures for 10b5-1 activity.
- Context: Record the drawdown, catalyst, valuation argument, and current earnings risk.
- Position discipline: Use a modest allocation, a predefined invalidation point, and a written journal.
Audit your last ten signals against these rules before adding capital. If you can't explain why each trade was informative, your screen is measuring activity rather than conviction.
Altymo turns raw SEC Form 4 filings into alerts for patterns such as CEO and CFO open-market purchases, cluster buying, repeated accumulation, first-time buying after inactivity, and purchases following material drawdowns. Visit Altymo to add context-rich insider monitoring to your own verification workflow.