Does cyber or crime insurance cover wire fraud?
It depends on how the money left. If someone breaks into your systems and moves money, or sends fake instructions to your bank, a crime policy usually covers the stolen funds. If an employee is tricked into sending the payment, that is social engineering, often a separate add-on with a smaller limit. Cyber insurance usually pays to investigate the break-in and restore systems, but often not the lost money itself. If your business moves money, review the two policies together.
What cyber insurance pays for
Cyber insurance covers your own costs after a hack or data breach, such as investigators, legal advice, notifying the people affected, and restoring systems. It also covers claims from others who were affected.
Some cyber policies include limited cover for payment fraud, but the money that was lost is often a matter for crime insurance instead.
What crime insurance pays for
Crime insurance, sometimes called fidelity coverage, covers money and property stolen from the business, including theft by an employee. For payment fraud, policies usually separate three scenarios, and the last one often has the smallest limit and may require that the instructions were verified first:
- Computer fraud: someone breaks in and moves money
- Funds transfer fraud: someone sends fraudulent instructions to your bank
- Social engineering: an employee is tricked into sending the money
One incident, two losses
Say someone breaks into an email account and uses it to redirect a payment. Investigating the break-in is usually a cyber matter. The redirected payment is usually a crime matter, and if an employee approved it after being deceived, it may fall under a social engineering add-on. Buying both policies doesn’t guarantee there’s no gap between them.
We read the two side by side and walk through how a payment happens at your firm, from request to release. For each quote, we set out:
- Which policy responds to each payment fraud scenario
- The social engineering limit and any verification conditions
- Whose money is covered, including fund or client assets
- The notice and proof each insurer needs after a loss
How we help
Send us your current cyber and crime policies, if you have them, and tell us how payments are approved. We’ll show you which policy would respond to each scenario and where the gaps are.
Further reading
Background from insurers and regulators. These pages describe their own products and rules, and are not an offer of coverage from Cilantro.