What is Crime Insurance?

What does crime insurance cover?

Crime insurance covers direct financial loss resulting from criminal acts, including employee theft, forgery, computer fraud, funds transfer fraud and, depending on the policy, social engineering fraud. Coverage typically applies to money, securities and other property, whether the loss originates internally or from a third party. Most policies combine several of these insuring agreements into a single form rather than selling them separately.

The scope of coverage varies meaningfully by carrier and policy form, which is why understanding each insuring agreement matters before comparing quotes:

• Employee theft — Loss of money, securities or property resulting from dishonest acts by an employee, acting alone or with others.
• Forgery or alteration — Loss from forged or altered checks, drafts or similar financial instruments.
• Computer fraud — Loss resulting from unauthorized entry into or use of a computer system to fraudulently transfer money or property.
• Funds transfer fraud — Loss from fraudulent instructions to a financial institution to transfer, pay or deliver funds.
• Social engineering fraud — Loss resulting from an employee being intentionally misled into transferring funds based on fraudulent instruction. Many carriers offer this as a separate, often sublimited endorsement rather than including it in the base form.
• Third-party fidelity — Coverage extending to clients whose money or property is entrusted to the insured organization.

How does crime insurance differ from cyber insurance and fidelity bonds?

Crime insurance, cyber insurance and fidelity bonds address related but distinct exposure. Confusing them creates coverage gaps. Crime insurance responds to direct financial loss from criminal acts. Cyber insurance responds to data breaches, network security failures, and business interruption tied to technology systems. Fidelity bonds are a narrower form of crime coverage focused specifically on employee dishonesty.

The distinctions matter most at the point of a claim, when the wrong policy is the one expected to respond:

• Crime insurance vs. cyber insurance — A social engineering scam that tricks an employee into wiring funds is typically a crime insurance matter. A ransomware attack that encrypts systems and halts operations is typically a cyber insurance matter. Some losses, such as computer fraud involving stolen funds, can trigger either policy depending on the specific language, which is why coordinating both coverages matters.
• Crime insurance vs. fidelity bonds — A fidelity bond is essentially employee theft coverage in isolation. A comprehensive crime policy bundles employee theft with forgery, computer fraud and other insuring agreements under one form, giving broader protection than a standalone bond.
• Crime insurance vs. directors and officers (D&O) insurance — D&O insurance protects leadership from claims tied to management decisions. Crime insurance protects the organization'’s assets from criminal acts, regardless of who is accused of mismanagement.

Which organizations benefit most from crime insurance?

Organizations that handle cash, process electronic payments, manage client funds or maintain a distributed workforce carry the highest exposure to crime losses. Financial institutions, nonprofits, professional service firms and organizations with high transaction volumes face particular risk because of the opportunity for internal or external fraud scales with the volume and complexity of financial activity.

Several operational characteristics tend to raise an organization’s exposure:

• High transaction volume or frequent wire transfers between the organization and vendors, clients or financial institutions.
• Decentralized approval processes where a single employee can initiate and approve payments without secondary review.
• Fiduciary responsibility for client, member or beneficiary funds, which is common among nonprofits, associations and financial services organizations.
• Remote or hybrid work arrangements that increase reliance on email and electronic communication for payment authorization, a common entry point for social engineering fraud.
• Frequent employee or vendor turnover, which can widen the pool of individuals with access to sensitive financial systems.

Recognizing these risk factors is a starting point, not a purchasing decision.  

What are the main types of crime insurance policies?

Crime insurance policies are structured around two key variables — which insuring agreements are included and how the policy defines when coverage responds. Most organizations purchase a commercial crime policy that bundles multiple insuring agreements, rather than a standalone fidelity bond covering employee theft alone.

The trigger structure has a direct effect on how far back a policy can reach:

• Loss sustained form — Covers losses that occur and are discovered during the policy period. This form typically requires a retroactive date or prior coverage to address losses that occurred before the policy took effect.
• Discovery form — Covers losses discovered during the policy period, regardless of when the underlying criminal act occurred, subject to policy terms. This structure is often preferable for losses that go undetected for an extended period, which is common with employee theft schemes.
• Named perils vs. blanket coverage — Some policies list specific covered crimes individually, while others provide broader, less restrictive triggering language across insuring agreements.

Organizations often carry both a fidelity bond, required in some cases by fiduciary or regulatory obligations, and a broader commercial crime policy layered on top for additional protection.

What should organizations evaluate before purchasing crime insurance?

Selecting the right crime insurance policy requires evaluating coverage triggers, sublimits and internal controls together, since underwriters weigh all three when setting terms. A policy with strong limits but a restrictive discovery period, or one without adequate social engineering coverage, can leave meaningful gaps despite looking comprehensive on paper.

• Social engineering sublimits — Many policies cap social engineering fraud coverage well below the overall policy limit. Confirm whether the sublimit reflects realistic exposure, given the organization'’s payment processes.
• Discovery period length — Understand how long after policy expiration a loss can still be discovered and reported, particularly for policies written on a discovery form.
• Internal control requirements — Underwriters frequently require dual-approval processes for wire transfers or segregation of duties as a condition of coverage or favorable pricing.
• Retentions and deductibles — Higher retentions can lower premiums but should be weighed against the organization’s ability to absorb a loss before coverage responds.
• Third-party crime coverage — Organizations managing client or member funds should confirm whether third-party fidelity protection is included or needs to be added separately.

Organizations that address these questions before binding coverage are better positioned to avoid disputes at the time of a claim, when policy language receives the closest scrutiny.