Crime & Fidelity — Employee Dishonesty & Fraud

Crime & Fidelity Insurance:
Employee Dishonesty, BEC Fraud & Computer Crime

Employee theft, Business Email Compromise (BEC), computer fraud and forgery can result in significant financial losses that standard property and liability policies do not address. Crime and fidelity insurance fills this gap — but social engineering fraud is a critical coverage question that must be checked in every policy.

SEDDK Licensed Insurance & Reinsurance Broker Independent — no insurer ties BEC/social engineering gap analysis Multi-market competitive placement

What Crime & Fidelity Insurance Covers

Crime and fidelity insurance addresses financial losses arising from dishonest, fraudulent or criminal acts — whether by employees, third parties, or a combination. Standard commercial crime cover comprises the following sections:

Employee Dishonesty / Fidelity

Theft or fraudulent misappropriation of money, securities or property by employees acting alone or in collusion. The most common crime loss for Turkish businesses.

Forgery or Alteration

Financial loss from the forgery or fraudulent alteration of cheques, instruments of payment, contracts or other documents.

Computer Fraud

Financial loss from unauthorised use of a computer system to fraudulently transfer funds — distinct from social engineering (see below).

Social Engineering Fraud

Business Email Compromise (BEC) and CEO fraud — an employee is deceived by impersonation into making a fraudulent funds transfer. Coverage varies significantly by policy wording; must be verified.

Premises Cover

Robbery, burglary or theft of cash, securities or other property from the insured's premises by third parties.

Transit Cover

Loss of cash, securities or valuable property while in transit — including messenger transit and armoured carrier shipments.

Social Engineering Fraud: The Crime/Cyber Gap

The Most Important Coverage Question

Social engineering fraud (Business Email Compromise, CEO fraud, invoice fraud) — where an employee is deceived by impersonation into authorising a fraudulent bank transfer — is the most rapidly growing financial crime affecting businesses globally. It is also the most frequently misunderstood coverage gap: many crime policies exclude or sublimit it, and many cyber policies do the same. The result is that this exposure may fall into a gap between both products. Every buyer must explicitly verify how their crime policy treats social engineering fraud.

Crime Policy vs. Cyber Policy: Who Responds?

Social engineering fraud involves human deception, not a technical system breach. A crime policy addresses the financial loss from the deceptive act — the employee was tricked into authorising a transfer. A cyber policy addresses the technical system breach — an unauthorised intrusion into the insured's IT systems. The distinction matters because:

  • Crime policies may require a technical "computer fraud" (system intrusion) — making social engineering ineligible under the computer fraud section
  • Social engineering extensions in crime policies may have low sublimits (e.g. USD 250,000) relative to the actual BEC loss
  • Cyber policies may exclude "voluntary parting" — where the insured voluntarily transferred funds, even if deceived
  • Neither policy may respond fully without a specific, carefully worded social engineering extension
Action Required: If your organisation has not explicitly confirmed with your broker whether social engineering fraud is covered under your crime policy, cyber policy or both — and at what limit — this gap should be addressed as a priority. BEC losses frequently exceed USD 1 million for mid-size businesses and can exceed USD 10 million for larger organisations.

Bankers Blanket Bond vs. Commercial Crime

Bankers Blanket Bond (BBB)

BBB is designed for financial institutions — banks, securities brokers, asset managers, leasing companies and similar entities. It provides the core crime covers plus institution-specific extensions: securities forgery, counterfeit banknotes, fraudulent loan applications, trading losses, safe custody liability and safe deposit box risks. The BBB wording (typically based on the standard American or London market form) is broader and uses terminology specific to financial institution operations. BBB insurers are specialists in financial institution crime risk and assess the quality of compliance, credit and treasury controls in depth.

Commercial Crime (Non-Financial Corporates)

Commercial crime insurance covers the same core perils for non-financial businesses — manufacturers, retailers, logistics companies, professional service firms. It does not include the financial institution-specific extensions. The insurer assesses internal controls, segregation of duties, IT access controls and the strength of the finance function's control environment.

Discovery-Based Cover and Retroactive Date

Crime insurance operates on a discovery basis — the policy responds when the loss is discovered, not necessarily when the dishonest act occurred. Employee fraud can go undetected for years. The retroactive date in the policy must be set far enough back to capture historical fraud schemes that are discovered during the current policy period. An inadequate retroactive date is a common coverage gap on renewal.

Frequently Asked Questions

What is the difference between a BBB policy and commercial crime insurance?
BBB (Bankers Blanket Bond) is a comprehensive crime policy tailored for financial institutions — banks, securities brokers, investment managers — including institution-specific extensions (securities forgery, fraudulent loans, counterfeit currency). Commercial crime insurance covers the core crime perils for non-financial corporates — employee dishonesty, computer fraud, forgery, premises and transit. The terminology, scope and insurer appetite differ substantially between the two products.
Is social engineering fraud (BEC) covered under crime insurance or cyber insurance?
Social engineering fraud — where an employee is deceived by impersonation into transferring funds — is primarily a crime policy risk, not a cyber risk, because it involves deception rather than a technical breach. However, many crime policies exclude or sublimit it, and many cyber policies also exclude it under "voluntary parting." Buyers must verify explicitly how each policy treats social engineering fraud to avoid a gap. This is currently the most important crime coverage question for most businesses.
Do weak internal controls affect crime insurance coverage?
Yes. Insurers assess internal controls during underwriting. Weak controls may result in higher premiums, lower limits or additional exclusions. More critically, if a policy contains conditions requiring specified controls and those were not in place at the time of a loss, this may be grounds to reduce or decline the claim. Policyholders should confirm and operationally maintain the control conditions specified in their policy.
What is the discovery trigger and why does it matter?
Crime insurance is discovery-based: cover triggers when the insured discovers a loss, not when the dishonest act occurred. Employee fraud can go undetected for years. The policy's retroactive date must be set far enough back to capture historical fraud discovered in the current policy period. An inadequate retroactive date is a common gap on renewal — buyers should confirm the retroactive date at each renewal.
Are funds transferred under social engineering automatically covered by crime insurance?
Not automatically. Coverage depends on the specific policy wording and whether social engineering or funds transfer fraud is included or excluded. Some crime policies include it as a named extension with a sublimit; others exclude it entirely. Where included, the deception element is key — the insured employee must have been genuinely deceived by a fraudulent misrepresentation. Buyers should read the social engineering clause carefully and discuss coverage with their broker.

Related Coverage Lines

Cyber Insurance Cyber breach response, ransomware and data liability — complement to crime cover for BEC. Bankers Blanket Bond Comprehensive crime protection for banks, brokers and financial institutions. D&O Insurance Directors and officers liability — including regulatory action following a fraud incident.

Browse all terms: Insurance & Reinsurance Glossary →