A trader builds a profitable bot, runs it through a futures evaluation, passes, then watches the funded account get revoked. The bot worked and the platform let it run, yet the firm pulled the account and the balance because one clause on the prohibited-activities page banned fully automated trading. That is the trap: the software letting you deploy a bot says nothing about whether your contract allows it. On futures firms the line moves from one firm to the next. One will fund your algo. The next will confiscate it for the exact same behavior.
The single most important truth is that automation permissions vary by firm, and they change. "Prop firms allow bots" is false. "Prop firms ban bots" is also false. The accurate picture is a spectrum where each firm draws its own line, and where two major futures firms currently sit on opposite sides of full automation. This article maps that spectrum, shows what gets flagged, and gives you a checklist to run before you deploy anything hands-off.
What counts as automation
The word "automation" hides a huge range of behavior, and firms care about one question above all. Does a human make the entry decision and supervise the system? Auto-bracketing your exits after you manually enter is treated, almost everywhere, as normal trading. A bot that opens and closes positions while you sleep is a different animal.
Get the definitions straight before you read any rulebook, because firms use these terms loosely. An ATM or bracket strategy that attaches a stop, a target, and a trailing stop the moment you click buy is automation of your exits, not of your decisions. A webhook that fires an order when a TradingView alert prints is automating execution of a signal you configured. A trade copier mirrors fills across accounts. An EA or bot encodes rules that open and close without you. Full unattended algo trading runs 24 hours a day with nobody watching. These are not interchangeable, and the further right you go, the more contractual risk you carry.
Does a human make and supervise the entry decision? ATM and bracket order automation, where you enter and the machine manages exits, is near-universally treated as normal trading, not as a banned bot.
The automation spectrum
Think of automation as a line that runs from fully manual on the left to fully unattended on the right. Each step adds capability. Each step also adds detection and compliance risk.
- Fully manual: you click every entry and every exit. Zero automation risk.
- Semi-auto assists: hotkeys, one-click entry, quick-flatten. Still you, just faster.
- ATM and bracket strategies: auto stop-loss, take-profit, and trailing once you enter. Near-universally fine.
- Webhook and alert-triggered orders: a TradingView signal fires an order. Now a rule, not your hand, pulls the trigger.
- Trade copier: mirror fills across accounts. Defensible when it copies only your own trades on your own accounts.
- EA or bot: rules-based code that opens and closes without you. Firm-dependent, and banned outright at some.
- Full unattended algo: 24/7, set-and-walk-away. The single most likely thing to be explicitly prohibited.
The mistake most traders make is assuming the spectrum is a single bright line with "allowed" on one side and "banned" on the other. It is not. Different firms cut the line at different points, and some cut it twice, allowing copiers but banning unattended bots, or allowing bots but banning HFT. Your job is to find exactly where your firm cuts.
What firms typically allow
There are patterns here, but treat them as patterns, not per-firm guarantees. What one futures firm explicitly permits, another explicitly forbids, and that contradiction is the whole story.
Commonly allowed across the industry: ATM and bracket order automation, semi-auto execution assists, and copying your own discretionary trades across your own accounts at the same firm. Bots and EAs on your own account are allowed at many firms, but this is exactly where futures traders get burned, because "most firms allow EAs" is a forex-and-CFD truth that does not transfer cleanly to futures.
Two live examples show the split, though both are time-sensitive and should be verified directly with each firm. Topstep, per its published policy, has permitted automated and bot trading in both the Combine evaluation and funded accounts, and even offers a native tool to mirror trades across accounts you personally own. Apex Trader Funding, per its prohibited-activities policy, has banned fully automated trading outright, including "AI, autobots, algorithms, fully-automated trading systems" and "any type of hands-off, set-and-forget" trading that runs around the clock, while permitting only limited tools such as ATM strategies and webhook alerts with active oversight. Confirm the current wording with each firm before you deploy, because these policies moved even across 2025 and 2026.
One major futures firm bans the very thing another major futures firm explicitly allows. For a futures audience, the only honest answer is "it varies, verify your firm."
For a deeper read on the forex and CFD side, where EA permissions are far more common, see our guide to forex prop firms that allow copy trading and EAs. The futures side is stricter and more fragmented, so do not assume parity.
The prohibited strategies
Some behaviors are banned at almost every firm regardless of where they cut the automation line. These are the strategies that move you from "trader the firm wants to fund" toward "exploiter the firm wants to remove."
- High-frequency trading (HFT): banned at most firms, usually described as an excessive number of orders and cancellations or sub-second machine-speed scalping. You will see bloggers cite a "5-second" cutoff. Treat that as a heuristic, not a rule. Firms generally do not publish official second-level or millisecond thresholds, so verify the current wording rather than trusting any specific number.
- Latency and quote-feed arbitrage: banned widely. Exploiting feed delays or data lag is off-limits.
- Exploiting data or pricing errors and SIM mechanics: banned widely. Unrealistic fills, no-slippage stops, and queue-position abuse in the simulated evaluation environment are explicitly enumerated by some firms, Topstep among them.
- News-spike gambling: Topstep, for example, has banned purposefully trading your full maximum position size directly into a scheduled major news event. The concept is common across firms, the wording is firm-specific. For the broader rules on this, see news trading rules and blackout windows.
- Copying another person or a third-party signal service: banned almost everywhere. Copying your own trades across your own accounts is the line most firms draw as acceptable.
- Fully unattended trading: banned at some firms, allowed at others. This one must be checked per firm, every time.
Sitting above every firm rule is exchange law. CME Group adopted Rule 575, "Disruptive Practices Prohibited," in 2014. It prohibits spoofing (bidding or offering with intent to cancel before execution), quote stuffing (overloading the quote system or delaying others' executions), and entering messages with intent to disrupt or with reckless disregard for orderly trading. Enforcement focuses on intent, not duration, so a genuine fat-finger error is not a 575 violation, though it may break other rules. The relevance to you is direct: an automated strategy that spoofs or quote-stuffs is illegal at the exchange level, on top of any firm rule. Rule 575 targets disruptive practices specifically. It is not a blanket ban on bots, so do not read it that way.
How firms detect automation
Here is the part a generic blog will miss: the bot is rarely what gets you caught. The cadence is. Firms do not need to see your code. They read your fills. A profitable, "smart" bot that fires like a metronome is easier to flag than a mediocre discretionary hand, because the trade record itself betrays the machine.
The signals firms typically watch, presented as common industry techniques rather than any firm's published spec:
- Suspiciously regular or round time intervals between fills, the cadence of a clock rather than a human.
- Reaction speed faster than humanly plausible, such as a sub-second response to a print or a news release.
- Identical or near-identical fills across multiple accounts within milliseconds, at the same sizes, the classic copy or group-trading signature.
- Timestamp-delta and lot-size matching across accounts, plus shared IP and device fingerprinting.
- On the forex side, MT4 and MT5 copier metadata such as Magic Numbers and order comments. Less relevant to pure-futures platforms, but it illustrates the principle.
When a flag fires, it routes to automated or manual review, then to a warning, a payout denial, or account termination with balance forfeiture. Exact detection thresholds are not public, so do not believe any "10ms" or "5-second" figure as a firm rule. Those numbers are illustrative. For the full breakdown of the surveillance stack, read how prop firms detect copy trading.
Semi-auto trading and copiers
The safest zone is semi-auto: ATM and bracket strategies where you decide the entries and the machine manages the exits. You stay the trader. The firm stays comfortable. This is the part of the spectrum almost nobody gets terminated for.
A server-side copier that mirrors your own discretionary decisions across your own accounts at one firm is the most defensible form of "real" automation, because a human is still deciding every trade. Some firms, Topstep included, even provide this natively. The catch is twofold. First, a copier can still trip identical-fills detection, since millisecond-matched entries at matched sizes are exactly the fingerprint surveillance hunts for. Second, firm rules still govern it, and some firms ban VPS or remote access entirely, which can rule out a server-side setup regardless of intent. Verify both per firm.
The line that matters: a copier pulling from a third-party signal or another person is widely banned, while a copier mirroring your own hands across your own accounts is usually fine. If you run accounts at more than one firm, the rules compound, and our guide on whether you can copy trade multiple prop firm accounts walks through the per-firm constraints. Phoenix Technologies builds Thor, a server-based futures and CFD trade copier (around 17ms copy latency, flat $39 a month, 14-day free trial) built for the own-accounts use case, but no tool exempts you from reading your firm's clause first. The vendor's willingness to run your copier is a commercial decision. The firm's willingness to pay on it is a contractual one, and only the second matters at withdrawal.
Staying compliant
Run the worked numbers before you decide automation is "free money." Take an Apex-style 50K evaluation as the illustration, with all dollar figures time-sensitive and worth verifying before you act. Say the eval costs roughly $35 a month under a common 80%-off promo, with a $99 activation fee on passing. You pay in $35 + $99 = $134 to get funded. You earn and request a first payout of $1,500, paid at the 100% split that often applies to the first $25,000 per account. If you are compliant, your net is $1,500 - $134 = +$1,366.
Now suppose the bot is detected as fully automated, a banned activity, and the policy consequence is forfeiture of the account and all associated balances. The $1,500 payout is withheld, so the $1,366 gain evaporates. The $134 in fees is not refunded. Your realized outcome is -$134 and the funding is gone, a $1,500 swing destroyed by one skimmed clause. Scale the same banned bot across 3 accounts to "diversify" and you sink roughly 3 x $134 = $402 in fees, while coordinated and identical-fills detection can forfeit all three at once. The multiplier works against you, turning a 3x scaling play into a 3x loss.
On a banned-strategy violation the structural math never changes: you lose what you paid in and you lose what you earned. The specific dollar amounts above are illustrative, so verify the current rule with the firm.
Before deploying any automation on a funded futures account, work this checklist:
- Read the firm's automation and prohibited-activities clause in full, not the marketing page. Search the literal words "automated," "bot," "EA," "algorithm," "HFT," "copy," "unattended," and "VPS."
- Classify your tool on the spectrum: assist, ATM-bracket, webhook, copier, EA, or full unattended. The further right, the more risk.
- Confirm in writing, via a support ticket you keep, whether hands-off and unattended trading is allowed. If the firm bans set-and-forget, you must attend the system.
- Verify your copier mirrors only your own discretionary trades across only your own accounts at that firm. No third-party signals, no other people.
- Check VPS, VPN, and remote-access rules. Some firms require you to trade from your own device.
- Keep behavior inside a human-plausible envelope: no metronomic fixed intervals, no sub-second reactions, no max size into scheduled news, no identical-millisecond fills across accounts.
- Confirm no HFT, no latency or quote-feed arbitrage, and no exploiting SIM fills, slippage, or pricing errors, which is also CME Rule 575 territory.
- Re-verify after every rule update. What passed last quarter can be banned now.
The honest tradeoff is this. Automation scales through consistent execution, no fatigue, and many accounts at once, but every increment raises detection and compliance risk and shifts you from a trader the firm wants to fund toward a black box it wants to avoid. A copier mirroring your own discretionary hands is genuinely different in kind from a black-box bot, because a human is deciding, yet firm rules govern both and both can trip identical-fills detection. Automation is not the answer when your contract bans unattended trading (then scaling a bot just buys forfeitures), when you are copying a third party (banned almost everywhere), when the "scale" plan is many accounts running one identical bot (one detection can forfeit them all), when your edge depends on HFT or feed arbitrage or SIM mechanics (banned and often CME-575 disruptive), or when you simply cannot supervise a system the firm requires you to attend. The red line: if the clause bans fully automated trading and you cannot get explicit written permission, do not run an unattended bot. No edge survives a forfeited account.
Frequently asked questions
Do futures prop firms allow automated and bot trading?
It depends entirely on the firm, and futures firms currently take opposite positions. Topstep has permitted automated and bot trading in both its evaluation and funded accounts, while Apex Trader Funding has banned fully automated, hands-off trading outright. Because permissions vary and change frequently, you must read your specific firm's prohibited-activities clause and verify the current rule before deploying any bot.
Is using an ATM or bracket strategy considered banned automation?
Almost never. ATM and bracket strategies automate your exits, such as the stop-loss, take-profit, and trailing stop, only after you personally enter the trade, so a human still makes and supervises the entry decision. Firms near-universally treat this as normal trading rather than the kind of hands-off automation they prohibit. Definitions still vary slightly by firm, so confirm if you are uncertain.
How do prop firms detect that I am running a bot?
Firms tend to read your fills rather than your code. They watch for suspiciously regular time intervals between trades, reaction speeds faster than a human could manage, and identical or near-identical fills across multiple accounts within milliseconds at matching sizes. They also use IP and device fingerprinting and timestamp matching. A profitable bot that fires like a metronome is often easier to flag than a discretionary trader.
Can I use a trade copier across my own prop firm accounts?
Usually yes, when the copier mirrors only your own discretionary trades across only your own accounts at the same firm, and some firms provide this natively. The key restriction is that copying another person or a third-party signal service is banned almost everywhere. Be aware that even an own-accounts copier can trip identical-fills detection, and some firms ban VPS or remote access entirely, so verify both per firm.
What does CME Rule 575 prohibit, and does it ban bots?
CME Group's Rule 575, adopted in 2014, prohibits disruptive practices: spoofing (orders entered with intent to cancel before execution), quote stuffing (overloading the quote system), and messages entered with intent to disrupt orderly trading. Enforcement focuses on intent, not duration. It is not a general ban on automation; it targets disruptive conduct specifically, which means an algo that spoofs or quote-stuffs breaks exchange law on top of any firm rule.
What happens if I get caught running a banned bot on a funded account?
The typical consequence is forfeiture of the account and all associated balances, meaning your pending payout is withheld and the funding is revoked. Fees you already paid for the evaluation and activation are generally not refunded. If you scaled the same banned bot across multiple accounts, coordinated-trading detection can forfeit all of them at once, turning a scaling plan into a multiplied loss.
Is there an official HFT time threshold like 5 seconds or 10 milliseconds?
Generally no. Firms tend to describe high-frequency trading as an excessive number of orders and cancellations or sub-second machine-speed scalping, but they typically do not publish official second-level or millisecond cutoffs. Figures such as a 5-second HFT rule are usually blogger heuristics, not firm rules. Treat any specific number as illustrative and verify the actual wording with your firm.
How can I deploy automation while staying compliant?
Read the firm's full automation and prohibited-activities clause, classify your tool on the spectrum from assist to full unattended, and confirm in writing whether hands-off trading is allowed. Verify your copier uses only your own trades on your own accounts, check VPS and remote-access rules, and keep your trade record human-plausible by avoiding fixed intervals, sub-second reactions, and identical fills. Re-verify after every rule update, because policies change.