What Crime & Fidelity Insurance Covers
Crime and fidelity insurance addresses financial losses arising from dishonest, fraudulent or criminal acts — whether by employees, third parties, or a combination. Standard commercial crime cover comprises the following sections:
Employee Dishonesty / Fidelity
Theft or fraudulent misappropriation of money, securities or property by employees acting alone or in collusion. The most common crime loss for Turkish businesses.
Forgery or Alteration
Financial loss from the forgery or fraudulent alteration of cheques, instruments of payment, contracts or other documents.
Computer Fraud
Financial loss from unauthorised use of a computer system to fraudulently transfer funds — distinct from social engineering (see below).
Social Engineering Fraud
Business Email Compromise (BEC) and CEO fraud — an employee is deceived by impersonation into making a fraudulent funds transfer. Coverage varies significantly by policy wording; must be verified.
Premises Cover
Robbery, burglary or theft of cash, securities or other property from the insured's premises by third parties.
Transit Cover
Loss of cash, securities or valuable property while in transit — including messenger transit and armoured carrier shipments.
Social Engineering Fraud: The Crime/Cyber Gap
Social engineering fraud (Business Email Compromise, CEO fraud, invoice fraud) — where an employee is deceived by impersonation into authorising a fraudulent bank transfer — is the most rapidly growing financial crime affecting businesses globally. It is also the most frequently misunderstood coverage gap: many crime policies exclude or sublimit it, and many cyber policies do the same. The result is that this exposure may fall into a gap between both products. Every buyer must explicitly verify how their crime policy treats social engineering fraud.
Crime Policy vs. Cyber Policy: Who Responds?
Social engineering fraud involves human deception, not a technical system breach. A crime policy addresses the financial loss from the deceptive act — the employee was tricked into authorising a transfer. A cyber policy addresses the technical system breach — an unauthorised intrusion into the insured's IT systems. The distinction matters because:
- Crime policies may require a technical "computer fraud" (system intrusion) — making social engineering ineligible under the computer fraud section
- Social engineering extensions in crime policies may have low sublimits (e.g. USD 250,000) relative to the actual BEC loss
- Cyber policies may exclude "voluntary parting" — where the insured voluntarily transferred funds, even if deceived
- Neither policy may respond fully without a specific, carefully worded social engineering extension
Bankers Blanket Bond vs. Commercial Crime
Bankers Blanket Bond (BBB)
BBB is designed for financial institutions — banks, securities brokers, asset managers, leasing companies and similar entities. It provides the core crime covers plus institution-specific extensions: securities forgery, counterfeit banknotes, fraudulent loan applications, trading losses, safe custody liability and safe deposit box risks. The BBB wording (typically based on the standard American or London market form) is broader and uses terminology specific to financial institution operations. BBB insurers are specialists in financial institution crime risk and assess the quality of compliance, credit and treasury controls in depth.
Commercial Crime (Non-Financial Corporates)
Commercial crime insurance covers the same core perils for non-financial businesses — manufacturers, retailers, logistics companies, professional service firms. It does not include the financial institution-specific extensions. The insurer assesses internal controls, segregation of duties, IT access controls and the strength of the finance function's control environment.
Discovery-Based Cover and Retroactive Date
Crime insurance operates on a discovery basis — the policy responds when the loss is discovered, not necessarily when the dishonest act occurred. Employee fraud can go undetected for years. The retroactive date in the policy must be set far enough back to capture historical fraud schemes that are discovered during the current policy period. An inadequate retroactive date is a common coverage gap on renewal.