Crime Insurance

Updated February 6, 2024

Crime Insurance – Coverage that helps protect a business from certain losses caused by theft, fraud, forgery, or employee dishonesty.

In plain language: crime insurance helps a business recover money or property lost because of certain dishonest or fraudulent acts, such as theft, forgery, or scams involving company funds. Think of it as a financial backstop for specific wrongdoing exposures that are usually not covered by standard property or general liability policies. 

Technical definition: For insurance professionals, crime insurance is a specialized first-party coverage typically written for businesses to address losses involving employee dishonesty, forgery, funds transfer fraud, theft of money and securities, and related exposures. It commonly appears as a standalone policy, package policy component, or endorsement, with terms found in insuring agreements, definitions, exclusions, conditions, and limits. It is most associated with business insurance accounts, including private companies, nonprofits, and financial institutions, and many carriers offer commercial crime insurance using proprietary or ISO-style approaches. This often varies by state and carrier; always check the specific policy form. 

A business owner may think a stolen inventory loss, a fake wire instruction, and an embezzling bookkeeper are all handled the same way. In practice, they are often treated very differently, and a gap in understanding can create both an uncovered claim and an agency E&O problem. 

 crime insurance is one of the most misunderstood parts of a business account because clients often assume “theft” is already covered everywhere. 

TL;DR

    Crime Insurance is specialized coverage for certain losses caused by dishonest acts, fraud, forgery, and theft of money, securities, or property. 
    It matters in agency workflows because theft and fraud exposures are easy to overlook during account reviews, renewals, and proposal comparisons. 
    A common misunderstanding is assuming every scam, wire fraud event, or internal theft automatically falls under property insurance or cyber insurance. 
    A best practice is to document exposures, review the client’s money-handling procedures, and explain that terms, triggers, and exclusions differ by carrier and form. 

What is Crime Insurance in Insurance?

At a practical level, crime insurance fills gaps left by other policies when a business suffers direct loss from certain dishonest or fraudulent acts. It often appears as a standalone contract or as part of a package for business accounts, and the important details are usually found in the insuring agreements, conditions, definitions, and exclusions. Some policies address loss of money, securities, or other property; others focus more heavily on employee acts, forgery, or transfer fraud. 

Agencies should understand that crime coverage is not one single broad promise. Coverage can be broken into separate insuring agreements, each with its own trigger, limit, and exclusions. A client may have one part for forgery, another for funds transfer fraud, and another for dishonest acts by workers, while a separate exposure may still be uninsured. A crime policy may also use a discovery basis or another reporting approach, so timing matters when a loss is found and reported. 

Another key point is that crime coverage overlaps conceptually with property, cyber, fiduciary, and financial institution exposures, but it is not interchangeable with them. For many businesses, a commercial crime policy is used to address risks from internal actors and external scams that standard property forms were not designed to handle. Reviewing how money moves, who approves transactions, and how fraud could occur is central to placing the right protection. 

Key Related Terms to Know

    Employee dishonesty – A common insuring agreement that may respond when a worker intentionally causes covered loss to the employer through dishonest acts. Clients often casually call this “employee theft,” but policy wording matters. 
    Forgery or alteration – Coverage that may apply when checks, drafts, or similar written payment instruments are forged or altered, subject to the policy language and conditions. This is different from many electronic fraud situations. 
    Funds transfer fraud – Coverage designed for certain fraudulent instructions directing a financial institution to transfer money from the insured’s account. It may not respond to every scam involving voluntary payment. 
    Social engineering fraud – A type of scam where a person is tricked into sending money or information based on false pretenses, such as fake executive emails or fraudulent vendor requests. Some forms include limited coverage; others exclude it unless specifically added. Clients often confuse social engineering fraud with broader cyber protection. 
    Discovery basis – A reporting structure under which loss is generally covered if discovered during the policy period or any extended discovery period, subject to the form. The timing of discovery of loss can become a major claims issue. 
    ERISA bond – A bond required for many employee benefit plan fiduciaries or persons handling plan funds under the employee retirement income security act. erisa bonds are not the same as broad crime insurance, even though clients sometimes group them together. 
    Money and securities – Terms used in many crime policy forms to describe the types of property insured under certain insuring agreements. These definitions can affect whether cash, checks, or negotiable instruments are treated as covered property. 

Common Questions About Crime Insurance

Is crime insurance the same as employee theft coverage? 

Not exactly. crime insurance can include protection for losses caused by employees, but it may also address forgery, robbery, transfer fraud, or other dishonest acts depending on the form. A client who only wants protection for employee theft may still have uninsured exposures if no coverage is included for transfer scams or forged checks. From an E&O standpoint, document what exposures were discussed and which insuring agreements were accepted or declined. 

Does a crime policy cover wire fraud and email scams? 

Sometimes, but not automatically. A crime policy may cover certain transfer fraud scenarios, but many forms draw a sharp line between unauthorized instructions and situations where an employee was deceived into voluntarily sending funds. That distinction is why business email compromise and social engineering fraud need a careful coverage discussion during quoting and renewal. Agencies should avoid saying “yes” based on the loss label alone and instead compare the facts to the exact policy wording. 

Is crime insurance only for large companies? 

No. Small businesses, nonprofits, contractors, retailers, and professional offices can all have meaningful theft and fraud exposures. A small company with one trusted bookkeeper and weak approval controls can suffer a severe loss from theft by employees or forged disbursements just as easily as a larger account. The size of the insured matters less than how money, inventory, and financial authority are handled. 

How does a claim usually get reported and evaluated? 

Most carriers will expect prompt notice, supporting records, and a completed proof of loss within the timeframe required by the policy. The insurer may request bank records, payroll records, emails, check copies, accounting entries, and other documents to determine whether the event fits a covered insuring agreement. An external auditor may help quantify the amount, but the carrier still evaluates whether the facts match the contract language. Agencies should avoid estimating coverage before the investigation is complete. 

Are ERISA requirements handled by crime insurance? 

Usually, not by default. Certain benefit plans may require erisa bonds, which are a separate requirement tied to handling plan funds, not a substitute for a broad crime insurance placement for the business itself. If a client has retirement plans, ask who handles plan assets and whether a bond is required. This often varies by state and carrier; always check the specific policy form. 

What should agencies ask during underwriting or renewal? 

Ask how the client receives and disburses funds, who can sign checks, who can approve an electronic funds transfer, and whether dual approval exists for high-dollar payments. Also ask about remote access, accounting authority, prior losses, and whether the insured has controls around vendor changes and banking instructions. Good documentation helps align recommended limits and endorsements with the client’s actual exposures. It also reduces the chance that a producer or CSR assumes the client’s cyber policy fills every fraud gap. 

Crime Insurance vs. Cyber Insurance

These two coverages are often confused because both can involve emails, stolen credentials, and fraudulent instructions. The key difference is that crime insurance focuses on certain direct losses from theft, fraud, and dishonesty, while cyber insurance is usually designed around data, privacy, network security, and technology-related liability or first-party costs. In many accounts, both are needed because the same event can create separate types of harm. 

Comparison Area 

crime insurance 

Cyber Insurance 

  

Primary use case 

Protecting against certain direct losses from theft, forgery, fraud, and dishonest acts 

Addressing data breach, privacy, network security, ransomware, and related first- and third-party exposures 

Coverage / concept type 

Financial crime-focused first-party protection, often split into multiple insuring agreements 

Technology and privacy-focused package of first-party and liability coverages 

Typical exclusions 

Depends on the form; may restrict voluntary parting, indirect loss, inventory shortages, or certain scam scenarios 

Depends on the form; may restrict contractual liability, prior acts, certain fraud payments, or non-cyber financial crime 

Who is most affected by errors 

Businesses handling cash, checks, payroll, disbursements, or transfer authority 

Businesses storing sensitive data, relying on networks, or facing privacy and security exposures 

Common mistakes 

Assuming every fraud event is covered under one broad theft grant 

Assuming a cyber policy automatically pays for every stolen-funds event 

Real Claim Examples Involving Crime Insurance

Scenario 1: A small distributor discovered that its long-time accounting manager had been issuing unauthorized checks to a shell vendor for almost two years. The loss came to light during a routine reconciliation after leadership noticed unusual pressure on cash flow and declining financial performance. The insured had a crime insurance placement with an employee dishonesty insuring agreement, but the carrier required detailed accounting support and a signed proof of loss before evaluating the amount. After review, part of the loss was covered, while some older transactions raised timing and documentation questions. The lesson for the agency was to discuss limit adequacy and maintain clear renewal notes on employee access, controls, and prior concerns. 

Scenario 2: A manufacturer received an email that appeared to come from its regular supplier, instructing the company to update bank details for upcoming invoices. Staff followed the request and sent a large payment to a fraudulent account. The insured assumed the event would be covered because a hacker transferring funds sounded like cybercrime, but the facts were more complicated. The account carried a crime policy with a limited endorsement for social engineering fraud, and that endorsement had a lower limit and specific conditions. Coverage applied only up to the sublimit, leaving a significant uninsured amount. The lesson was to explain payment verification procedures and to compare social engineering fraud options carefully. 

Scenario 3: A nonprofit found discrepancies after a board review revealed altered deposit records and missing cash from multiple fundraising events. The organization also handled benefit plan funds and believed its erisa bonds meant all dishonesty-related losses were insured. The carrier explained that the bond requirement was separate, and the nonprofit’s broader commercial crime exposure depended on the actual commercial crime insurance and its insuring agreements. During the claim, the organization had to assemble donor records, bank statements, event logs, and a formal proof of loss. Some missing-cash allegations were difficult to establish because of weak documentation. The practical lesson was that better controls and recordkeeping can matter as much as the policy itself. 

Limitations and Common Mistakes

    Crime insurance does not cover every kind of theft, scam, or accounting discrepancy; direct loss requirements, exclusions, and definitions are critical. 
    Clients often assume that inventory shortages, unexplained disappearance, or fraudulent manipulation of financial statements are automatically insured, but many forms limit or exclude those situations. 
    Some businesses think a commercial crime policy and cyber policy are interchangeable, especially when a fraud starts with an email. They are not. 
    Coverage can depend heavily on prompt reporting, cooperation, and submission of a complete proof of loss, so delayed notice can create claim problems. 
    Weak documentation around approvals, bank changes, or payment request processes can increase both claim disputes and agency E&O exposure. 
    Agencies should avoid informal assurances and instead summarize options, limits, declinations, and crime policy forms in writing. 

How to Explain Crime Insurance to Clients

Personal Lines-style small business client: “Your business policy may cover many property losses, but it may not respond the way you expect if money is stolen, checks are forged, or someone tricks your staff into sending funds. crime insurance is designed for those specific financial theft and fraud exposures, so we should review how you handle cash, checks, and online payments.” 

Small Business owner: “If someone inside your company steals, or if external fraudsters trick your team into sending money to the wrong place, the answer depends on the exact insuring agreement and endorsements you carry. We should look at your internal control environment, your funds transfer controls, and whether you use call-back verification, because coverage and prevention work together.” 

CFO or Risk Manager: “We should evaluate commercial crime exposures separately from property and cyber because different loss triggers apply. I’d want to understand your segregation of duties, vendor management processes, internal audit function, use of a whistleblower hotline, and any role an external auditor plays in fraud detection. We can then compare limits, retentions, claims services, and whether the coverage addresses counterfeit currency, computer fraud, and social engineering fraud in a way that matches your actual risk profile.” 

A practical client conversation should also set expectations on claim handling. Explain that a loss involving commercial crime may require a detailed proof of loss, forensic accounting support, and carrier review of bank records and approvals. If the client handles checks, cash, or negotiable instruments, ask who reconciles accounts and who can move money. If the client has received a clean audit or even an unqualified opinion, remind them that audit results do not guarantee future fraud prevention. The best placement approach is to match coverage to real transaction flows, authority levels, and control weaknesses rather than relying on generic assumptions about a single crime coverage solution. 

Coverage knowledge your team can actually use.

Total CSR trains insurance agency staff on the concepts behind the terminology — so they can explain it to clients, not just recite it.

Book a Demo