Skip to main content
Financial Institution Protection — Bankers Blanket Bond

Bankers Blanket Bond (BBB)
Financial Institution Insurance

Bankers Blanket Bond (BBB) protects financial institutions against both internal and external financial crime under a single policy. It offers broad coverage spanning employee dishonesty, computer crime, in-transit losses, and forgery or alteration.

SEDDK Licensed Insurance Broker SBD Member Reinsurance broker — market access for large capacity placements BRSA / CMB licensed institution experience

Coverage and quotation in brief

Bankers Blanket Bond (BBB) covers financial institutions against direct financial losses arising from employee dishonesty and crime events defined in the policy. Neolife evaluates the institution's operations, transaction volume, internal controls, and claims history to compare limit, deductible, and insurer quotations. Social engineering and computer crime coverage must be confirmed separately.

What is a Bankers Blanket Bond?

Bankers Blanket Bond (BBB) is a comprehensive financial crime policy designed exclusively for financial institutions. The term "blanket" refers to the fact that a single policy covers multiple coverage heads together. Unlike standard commercial insurance products, BBB is designed specifically for the risk profile of financial institutions.

BBB covers two main risk sources: internal risks (employee-sourced dishonesty and theft) and external risks (fraud by third parties directed at the institution). The distinction between these two channels plays a decisive role in determining coverage scope.

Coverage heads

Internal risks — employee and premises

A
Employee Dishonesty / Fidelity

Employee Dishonesty / Fidelity Coverage

Direct financial loss caused by an employee's acts of dishonesty, theft, embezzlement, or misappropriation against the institution. Its blanket structure covering all employees eliminates the need to name individuals separately. Forms the core of the BBB.

B
Premises / On-Premises

Premises Coverage

Physical loss of cash, securities, or property occurring within the institution's buildings, vaults, or controlled areas. Covers armed robbery, burglary, and vandalism damage. A sublimit structure can be established based on the breadth of the branch network.

C
In Transit

In-Transit Coverage

Loss or damage to cash, securities, or other assets during transfer between institutions or between locations. The liability boundary with the carrier must be clearly defined.

External risks — fraud and crime

D
Forgery or Alteration

Forgery or Alteration

Signature forgery, cheque alteration, and manipulation of promissory notes or bills of exchange. Of critical importance for institutions with high cheque volumes. Where an employee acts in collusion with an outsider, this coverage may overlap with the employee dishonesty coverage.

E
Counterfeit Currency

Counterfeit Currency

Losses caused by counterfeit banknotes or coins accepted in good faith. Counterfeit currency processed unwittingly by branch staff falls within this coverage.

F
Third Party Crime / Fraud

Third-Party Crime

Losses arising from fraudulent acts by persons outside the institution are evaluated only under the selected policy terms. Social engineering, fraudulent instructions, and identity fraud are not automatic BBB coverage; the relevant endorsement, verification requirement, and sublimit must be confirmed in the quotation.

G
Computer Systems Crime / Electronic Funds Transfer Fraud

Computer Crime / Electronic Funds Transfer Fraud

Direct financial losses arising from unauthorised access to information systems, manipulation of computer systems, or electronic funds transfers executed under fraudulent instructions. The boundary between this coverage and cyber insurance is the most critical issue; overlap or gap risk areas require careful analysis.

Discovery basis: BBB's defining feature

Most liability insurance operates on a claims-made basis. BBB is written as standard on a discovery basis. This distinction is decisive, particularly for employee dishonesty cases that go undetected for years.

Key concepts

Discovery basis
Coverage is tied to the loss being discovered during the policy period. Even if the act causing the loss occurred years earlier, the policy in force at the time of discovery responds. This structure provides a critical advantage in long-running internal dishonesty cases.
Retroactive Date
This is the earliest date boundary the policy can cover. Coverage does not apply to losses that began before this date and are then discovered. Preservation of the retroactive date on insurer changes or policy renewals is essential; if it is broken, the period between the two policies is left uncovered.
Retroactive Date Break Risk
If the retroactive date of the previous insurer is not carried over to the new insurer, a loss that began in the prior period but is discovered in the new period will fall into the gap between the two policies. The broker compares the prior loss, discovery, and notification provisions at transition and negotiates continuity; acceptance is subject to insurer conditions.
Extended Reporting Period
Upon policy expiry, provides additional time for notification of losses that occurred in the prior period but have not yet been discovered. Taking an extended reporting period on policy cancellation or insurer change creates transition protection against continuing risks.

Limit structure: per-occurrence, aggregate, and sublimits

Per-occurrence limit

The maximum indemnity payable for a single event or a series of related events. The definition of "related events" must be clarified in the policy terms; an employee's acts continuing over months may be counted as one occurrence.

Aggregate limit

The maximum total for all indemnities paid during the entire policy period. When multiple events occur, cumulative payments cannot exceed this limit. For institutions with high-frequency risk, it is critical that the aggregate limit is broader than the per-occurrence limit.

Coverage-based sublimits

A different limit can be set for each coverage head (A, B, C, D…). For example, a high sublimit for employee dishonesty and a lower one for counterfeit currency. This structure enables premium optimisation and risk focus.

Deductible / Retention

The initial portion of each loss borne by the institution before the insurer responds. A higher deductible reduces the premium; however, for small frequent events it means the institution absorbs the full amount. It must be optimised in line with risk tolerance.

Note: When determining the limit structure, the institution's largest single-event loss scenario (largest employee, most critical system access, highest single-day cash movement) must be modelled. Insurance placed with insufficient limits will not provide satisfactory protection in the event of an actual loss.

Boundary distinctions with D&O, PI, and Cyber

In a financial institution's insurance programme, BBB, D&O, and Cyber policies frequently coexist. Ambiguity in the boundaries between the three can give rise to both overlaps (double recovery claims) and gaps (areas covered by no policy).

Scenario BBB D&O Cyber Assessment
Employee embezzles from client account BBB — Coverage A — — Classic BBB case
Director makes poor investment decision; shareholder lawsuit — D&O — Classic D&O case
Hacker enters system and transfers funds from client account BBB — Coverage G — Cyber — data / interruption Overlap risk; policy coordination essential
CFO approves fraudulent payment instruction via social engineering BBB — F or G D&O (possible) — Primarily BBB; D&O if director negligence applies
Ransomware — data encryption, ransom demand — — Cyber No BBB coverage; Cyber policy required
Employee misleads client; client suffers loss — — — Gap risk — PI or specialist coverage may be needed
Data breach notification cost, regulatory fine — D&O (possible) Cyber Both policies should be considered together

* This table is intended as a conceptual guide. In real cases, the precise policy wording, definitions, and exclusions of each policy are determinative.

Claims Notification Process

In BBB policies, the notification obligation is critical for preserving the right to indemnity. Late notification may provide grounds for the insurer to reject or reduce a claim.

1

Immediate assessment at discovery

When a potential loss or suspected crime is identified, the policy terms must be checked to determine whether notification to the insurer is required before an internal investigation is launched.

2

Parallel notification — without waiting for the investigation

Most BBB policies require preliminary notification to the insurer before the internal investigation is complete. The flow of information to the insurer must not be interrupted while the internal investigation continues; documented communication is essential to preserve indemnity rights.

3

Preservation of evidence

Digital records, access logs, system records, and relevant correspondence must not be destroyed; they are of critical importance for both criminal proceedings and the insurance process.

4

Preparation of the claim file

The loss amount calculation, relevant transaction records, the internal investigation report, and any criminal complaint or investigation documents must be submitted to the insurer. Neolife, as broker, assumes coordination responsibility throughout this process.

5

Preservation of subrogation rights

After the insurer makes payment, it becomes the party that assumes subrogation rights against the employee or third party. The institution must take care not to carry out any action that would weaken the right of subrogation.

Which financial institutions should take out BBB?

BBB is one of the core elements of the insurance programme for institutions licensed by the BRSA (Banking Regulation and Supervision Agency) and CMB (Capital Markets Board). Certain regulatory frameworks or international correspondent banking relationships make this policy effectively mandatory.

Banks
Participation Banks
Development / Investment Banks
Insurance Companies
Reinsurance Companies
Brokerage Firms
Portfolio Management
Investment Funds
Leasing Companies
Factoring Companies
Payment Institutions
Fintech / E-Money

For institutions seeking to establish or maintain international correspondent banking relationships, correspondent banks may require BBB as a condition. In such cases, whether the policy structure and limit meet the correspondent bank's requirements must be assessed separately.

Frequently asked questions

What is the key difference between BBB and D&O?
D&O covers liability claims arising from management decisions, with claims brought by third parties (shareholders, creditors, regulators). BBB covers direct financial losses suffered by the institution itself — losses caused by employee dishonesty or external crime. D&O is liability insurance; BBB is first-party loss insurance.
Does BBB computer crime coverage replace cyber insurance?
No. BBB computer crime coverage addresses direct financial transfers, while cyber insurance covers data breach notifications, business interruption, ransom, customer notification costs, and third-party liabilities. The two policies complement each other; BBB alone does not replace cyber insurance. Coordinated programme design prevents gaps and overlaps.
Why is discovery basis different from claims-made?
Under claims-made, the claim must be made during the policy period. Under discovery basis, it is sufficient that the loss is discovered during the policy period — the act may have occurred years earlier. Because a large proportion of employee dishonesty cases are only discovered years later, discovery basis has become the standard for financial institutions.
How is the retroactive date preserved when changing insurers?
The new insurer's policy must include the inception date of the existing policy — or an earlier date — as the retroactive date. If that date is broken, losses that began in the prior period will fall into the gap between the two policies. Neolife places continuity of the retroactive date at the centre of insurer transition negotiations.
Are social engineering attacks covered under BBB?
This depends on the precise policy wording. Classic BBB forms may not expressly cover social engineering; however, many modern forms offer a Social Engineering Fraud endorsement covering fraudulent payment instruction cases carried out by telephone or email. Whether this coverage is included in the policy and whether its sublimit is adequate must be confirmed separately.

Related pages

Related Technical Terms

Bankers Blanket Bond (BBB) Comprehensive fidelity cover for banks against employee dishonesty and fraud. Claims-Made Policy Covers claims notified to the insurer during the policy period, whenever the act occurred. Deductible The first portion of a loss that the insured bears before the insurer's cover responds. Indemnity The compensation paid by the insurer to restore the insured to their pre-loss position.

Explore all insurance and reinsurance terminology: Insurance & Reinsurance Glossary →