How to Read SEC Form 4: A Practical Guide

Every time an officer, director, or large shareholder of a U.S. public company buys or sells that company's stock, the SEC requires them to file a short form describing the transaction. That form is Form 4. It is the single most-watched document in equity research — and almost everything you read about “insider buying” or “CEO selling” ultimately traces back to one of these filings.

Form 4 is also short. Once you know what to look at, a filing takes about ten seconds to read. The hard part is knowing which fields matter, because most of them don't.

Who has to file a Form 4

Section 16 of the Securities Exchange Act of 1934 defines three categories of reporting insiders for any company with registered equity:

Officers — the CEO, CFO, COO, and other principal officers. The company decides who counts.
Directors — every member of the board.
Beneficial owners of more than 10% of any class of registered equity — often called “10% owners” in the data.

Anyone in those three buckets is a Section 16 insider and has to report their transactions in the company's stock. A board member of a company they don't otherwise work for is still a reporting insider for that company. A venture fund that crosses 10% ownership becomes one too.

The deadline that makes Form 4 useful

The reason Form 4 carries weight as a signal is the timing rule. After the Sarbanes-Oxley Act of 2002, insiders must file Form 4 within two business days of the transaction. Before SOX, the deadline was the 10th of the following month — long enough that the information was stale by the time it became public.

Today, a CEO who buys 10,000 shares on a Monday is on the public record by Wednesday night. A real-time feed of Form 4s is therefore a real-time feed of insider behavior — which is exactly what Watch4Insider's live filings feed shows.

Table I and Table II: the two halves of a Form 4

Every Form 4 contains two tables. Most reads only need Table I.

Table I — Non-Derivative Securities

Direct transactions in the company's common stock. When you hear “CEO bought 50,000 shares,” the data is in Table I. Every row reports:

Date of transaction (Box 3). Note: this is the trade date, not the filing date. Filings can lag by up to two business days.
Transaction code (Box 4). A two-letter code that tells you what kind of transaction it was. The most important field in the whole form.
Amount of securities (Box 5). The share count.
Price per share (Box 6). Blank for some compensation events; a weighted average for open-market trades that spanned multiple prices.
Total beneficial ownership after the transaction. How many shares the insider holds, post-trade. This is the number worth tracking over multiple filings.

Table II — Derivative Securities

Options, warrants, restricted stock units, convertibles — anything where the underlying right relates to the company's stock. Most retail readers can ignore Table II most of the time. It exists primarily to track option grants and exercises, which are routine compensation events rather than active investment decisions.

The transaction codes that actually matter

Box 4 is one or two letters. The SEC publishes the full list, but a small subset carries virtually all the signal:

P — Open-market purchase. An insider went into the market with their own money and bought stock. This is the rare and highly-watched code. Insiders almost never buy unless they think the stock is mispriced low. Watch4Insider's largest-purchases report ranks live P transactions by dollar value.
S — Open-market sale. Insider sold into the market. By itself, S is not a strong signal — most S transactions happen on autopilot under a 10b5-1 plan. See 10b5-1 Plans Explained for why.
A — Grant or award. Stock granted to the insider as compensation. Not a buy decision; just compensation accounting.
M — Exercise of derivative security. The insider exercised options. Often paired with an S the same day to fund the exercise.
F — Tax withholding. Shares automatically withheld to cover the tax liability on a vesting event. Pure mechanics, no signal.
G — Gift. Shares given away (often to family trusts or charity).
D — Disposition to issuer. Often a buyback participation or a contractual redemption.

The reason Form 4 readers obsess over P codes is that every other code is largely a function of pre-set compensation rules or planned events. P is the rare code that reflects an active human decision — the insider chose, today, to put cash into their own stock. That choice has consistently been one of the more robust signals in the academic literature on insider trading.

Reading the numbers without overreading them

A few framings that help separate noise from signal:

Convert share counts to dollar values. A 200,000-share buy in a $3 stock is $600K — interesting but not transformative. A 2,000-share buy in a $400 stock is $800K — almost identical economically. Watch4Insider's filings table sorts on Value for this reason.
Compare the trade size to the insider's holdings. A CFO with $50M in company stock buying another $200K isn't saying much. A CFO with $1M in company stock buying another $200K is saying a lot.
Watch for clusters. One insider buying could be personal balance sheet. Three insiders buying in a week is a different story — that's a cluster buy, and they show up in the cluster-buys report.
Sells are usually noise. Buys are usually signal. Roughly: most sells fund taxes, diversification, or lifestyle; most buys are intentional bets. That asymmetry is at the heart of why P-coded transactions are watched so closely.

Red flags vs false alarms

What looks like signal but usually isn't:

A wave of S filings shortly after earnings. Usually planned 10b5-1 sales that executed because a trading window opened.
A large M followed by an S. Cashless option exercise — no view on the stock, just mechanics.
A “sale” right after an A grant. Often an F (tax withholding) being mislabeled in third-party reporting.

What is worth a second look:

A P from someone who has never filed a P before. New buyers are unusually informative.
A P at the high end of a 52-week range. Most insider buys cluster at lows; buying at highs implies real conviction.
A cluster of P transactions from independent directors (not officers). Officers can be required to maintain ownership; directors typically aren't, so their buys carry less compensation-related noise.

A practical workflow for monitoring Form 4s

With ~10,000 Form 4s filed per week across the U.S. market, manual monitoring doesn't scale. The workflow that does:

Decide what shape of filing matters to you (open-market buys above a dollar threshold? clusters? specific tickers?).
Save that shape as a screener in Watch4Insider's filings search.
Promote the screener to an alert. From there, every Form 4 that matches your rules arrives in your inbox, typically under a minute after it hits EDGAR.

The point of automating the read is not to outsource judgment — it's to make sure the filings you would have wanted to read actually reach you, on a timeline where the read is still actionable. The first two business days after a buy are when the trade is most useful as information; after that, the stock has usually moved on the news.