What Is Crime Insurance?: A Complete Guide for Business Owners (Video)

Quick Answer

Gordon explains what crime insurance is and why standard business policies leave this gap exposed.
  • “My bookkeeper embezzled $80,000 over two years and the policy limit was too low.”
  • “Our insurance denied the claim because it didn’t cover outside theft.”
  • “A social engineering scam hit us for $50,000 and we had no coverage without an endorsement.”

These are the exact phrases business owners use when they discover what is crime insurance, and why they needed it before the loss.

If you are asking what crime insurance is and whether your business needs it, you are probably sensing a gap in your current coverage. That instinct is usually right.

The Protection Gap Is Real

Most business owners assume their property or BOP policy covers theft and fraud. It does not, not fully.
The Coyle Group is a commercial insurance agency for business owners who have outgrown one-size-fits-all coverage and need a specialist who understands the nuances. We design standalone crime insurance programs that close specific gaps in your existing coverage.
With over 40 years of experience, we have seen exactly how these claims unfold and what it takes to recover.
Contact us today for a no-pressure policy review.

Could Your Business Survive a $150,000 Loss?

A single fraud event can wipe out an entire year of profit. The real cost is often far higher than the stolen amount alone, because losses compound every month the scheme goes undetected. The 2024 ACFE report analyzed 1,921 actual fraud cases across 138 countries and calculated $3.1 billion in total losses.

According to the Association of Certified Fraud Examiners’ 2024 Report to the Nations, organizations lose 5% of annual revenue to fraud every year, and the median fraud case runs undetected for 12 months before discovery.

Key findings relevant to every business owner:

  • Organizations lose an estimated 5% of annual revenue to fraud each year.
  • The median fraud case runs for approximately 12 months before it is detected.
  • More than 84% of fraudsters displayed at least one behavioral red flag before discovery, but were not caught.
  • After discovering fraud, 25% of companies responded by purchasing or enhancing their insurance coverage.

The consequences extend beyond the theft itself.

Businesses recovering from a significant fraud event face:

  • Disrupted cash flow,
  • Legal and investigation costs,
  • Damaged vendor and client relationships,
  • And months of operational distraction while trying to run the company.

For businesses that ask what crime insurance is only after a loss has occurred, the lesson is an expensive one.

What is crime insurance — a business owner reviewing their commercial crime policy with an insurance specialist.
Title: What Is Crime Insurance

According to the Association of Certified Fraud Examiners:

  • 95% of businesses experience some form of employee theft.
  • 5% of annual revenue is lost to fraud across all businesses.
  • The median fraud case costs a business $145,000 before it is detected and stopped.

These are not statistics about rare events. They are warnings about the baseline probability any operating business faces.

What Is Crime Insurance?

Crime insurance, also called commercial crime insurance, is a standalone business insurance policy that covers direct financial losses caused by criminal acts, including employee theft, embezzlement, forgery, computer fraud, and social engineering.

It fills the gaps that standard commercial property, general liability, and Business Owner’s Policy coverage leave exposed. While most businesses assume their existing policies protect them, the reality is that crime losses fall outside the scope of every other common commercial policy.

While many small businesses have some crime coverage bundled into a Business Owner’s Policy (BOP), those bundled limits are typically $10,000 to $25,000, which is far too low for most real-world fraud events. A standalone crime policy tailored to your specific risk exposure can provide coverage from $500,000 to $3 million or more.

Crime insurance is also not the same as cyber insurance, and the two policies do not automatically cover each other’s gaps. Understanding what crime insurance is and how it interacts with cyber insurance is essential to building a complete protection program, which we address below.

What Does Crime Insurance Cover?

Crime insurance covers four core perils:

  • Employee dishonesty.
  • Forgery and alteration.
  • Computer fraud.
  • And social engineering fraud.

Each is a distinct coverage that requires specific policy language to trigger, and a gap in any one of them can leave a significant exposure unaddressed.

What is included, how claims are triggered, and what limits apply varies significantly by insurer and policy form.

Crime Insurance Explained: What It Covers and What It Does Not

Most policies bundle these four coverages, but the specific policy form determines exactly what is covered, what is excluded, and what endorsements are required to close common gaps.

A bundled BOP crime endorsement may cover only one or two of these perils. A standalone crime policy can address all four with appropriate limits for each. Understanding what crime insurance covers in your specific policy is not optional if you want coverage that actually responds when a loss occurs.

1. Employee Dishonesty Coverage

This is the most commonly triggered coverage on a crime policy, and the losses are consistently larger than business owners expect. Employees can siphon funds slowly over time, making detection difficult. Because a typical fraud scheme runs for 12 months before discovery, small monthly diversions compound into major losses. Common forms of employee dishonesty include:

  • Payroll fraud: inflating hours, creating ghost employees, or routing payroll to accounts controlled by the employee.
  • Expense reimbursement fraud: submitting duplicate receipts, inflated claims, or entirely fabricated expenses.
  • Credit card abuse: charging personal purchases to company cards, often gradually, to stay under audit thresholds.
  • Asset misappropriation: stealing inventory, equipment, or other physical business assets.
  • Check tampering: forging checks payable to the employee or an entity they control.

What is Employee Dishonesty Insurance? Gordon explains the coverage that protects your business from internal fraud.

These schemes often run for years before they are uncovered. By the time they are discovered, losses routinely exceed the default crime limits on a bundled BOP. Having the right standalone limits is the difference between recovering from the event and being permanently damaged by it.

2. Forgery and Alteration Coverage

Forgery and alteration coverage reimburses losses from forged checks, altered documents, or fraudulent payment instructions. Even businesses with strong internal controls can be hit by these schemes, because the fraud occurs outside the organization’s view. The two most common scenarios are:

  • Check interception: a fraudster intercepts a company check, changes the payee name, and deposits it into their own account.
  • Check washing: criminals use chemical solvents to erase the ink on a legitimate check, then rewrite the payee and amount before cashing it.

Even with wire transfers, dual signatures, and approval systems, some losses slip through. Forgery and alteration coverage ensures your business is financially protected when these schemes succeed despite your controls.

What is Forgery and Alteration Coverage? How it protects your business from check fraud and altered payment documents.

3. Computer Fraud Coverage

As financial transactions have moved online, crime exposure has followed. Computer fraud covers unauthorized electronic fund transfers, including funds diverted by hacking, credential theft, or fraudulent electronic payment instructions. While cyber insurance provides some protection for cyber-enabled losses, it often has sublimits that fall well short of the actual financial exposure.

A standalone crime policy can provide broader, higher-limit coverage specifically for computer-initiated fund theft.

Important: computer fraud coverage and cyber insurance do not automatically overlap. Depending on how an incident is categorized, a loss could fall between the two policies and trigger neither. This is exactly the kind of gap The Coyle Group identifies before a loss, not after.

4. Social Engineering Fraud Coverage

Social engineering fraud is one of the fastest-growing crime exposures for businesses. It is not hacking.

It is human manipulation: a fraudster impersonates a trusted party, such as a vendor, the CEO, or a bank representative, to trick an employee into voluntarily transferring funds to a fraudulent account.

According to the FBI’s Internet Crime Complaint Center, Business Email Compromise has resulted in over $55.5 billion in total exposed losses since 2013.

Social engineering fraud is often excluded from standard crime policies unless a specific endorsement is added. Standard cyber policies also frequently exclude or severely sublimit BEC coverage. A business without either endorsement may have $0 coverage for one of the most common and costly fraud schemes in the market today. For a deeper look at how this exposure is addressed, see cyber insurance and social engineering coverage.

Who Needs Crime Insurance?

Any business that handles money, employs people, or relies on electronic payments has some level of crime exposure. The businesses most at risk are often those with the highest levels of employee trust, which creates opportunity for internal fraud to go undetected longer. Certain industries and operational profiles carry significantly higher risk based on the volume and nature of their financial transactions.

The businesses that benefit most from a dedicated crime policy include:

  • Financial services firms: accounting firms, investment advisors, family offices, and wealth managers handle large sums on behalf of clients, creating both internal theft and third-party fraud exposure.
  • Technology companies: high-velocity electronic payments, remote workforces, and complex vendor networks create significant computer fraud and social engineering exposure.
  • Manufacturers and distributors: large vendor payment volumes and multi-tier supply chains create forgery, alteration, and vendor impersonation exposure.
  • Nonprofits: statistically more vulnerable to internal fraud due to limited financial controls, high-trust cultures, and volunteer-heavy environments.
  • Retail and food service: cash-heavy operations face consistent employee theft exposure across multiple locations and shifts.
  • Any business with a bookkeeper or controller who has long-term, unsupervised access to accounts: the most common crime claim profile is a trusted, tenured employee who managed to keep losses small enough to avoid detection for years.
Industries that need crime insurance — financial services, technology, manufacturing, and nonprofit organizations.

Crime Insurance vs. Cyber Insurance: Understanding the Difference

Crime insurance covers direct financial theft; cyber insurance covers the costs of a data breach, network attack, or privacy liability event. These are separate policies designed for fundamentally different events, and the overlap between them is narrower than most business owners realize. The most dangerous gap is social engineering fraud, which standard versions of both policies may exclude.

The key distinction in practice:

  • Crime insurance covers direct financial theft, whether initiated by an employee, a third party, or a fraudster who manipulated an employee into making a transfer.
  • Cyber insurance covers the costs and liabilities associated with a data breach or network attack, including forensic investigation, notification, legal defense, and regulatory response.

The dangerous coverage gap is social engineering fraud. When a fraudster tricks your employee into making a wire transfer, that loss may not trigger either policy without specific endorsements in place. Crime policies may invoke the “voluntary parting” exclusion if the employee chose to make the transfer, even under deception. Cyber policies may exclude it because no unauthorized system access occurred. For a detailed comparison, see cyber insurance versus crime insurance.

Cyber AND Crime Insurance: Do You Need Both? Gordon breaks down the critical differences.

Coverage Feature

Crime Insurance

Cyber Insurance

Primary Coverage

Direct financial theft by employees or third parties.

Data breach costs, network attacks, privacy liability.

Employee Theft

Core coverage.

Not covered.

Data Breach Response

Not covered.

Core coverage.

Social Engineering / BEC

Endorsement required.

Often excluded or sublimited.

Computer Fraud

Standard or endorsement.

Sublimited in most policies.

Typical Policy Limit

$500,000 to $3 million.

$1 million to $5 million.

How Much Does Crime Insurance Cost?

Annual premiums for a standalone crime policy range from $650 to $2,500 per year for most small to midsize businesses. The wide range reflects the many factors underwriters consider when pricing coverage for your specific business. Limits between $500,000 and $3 million are standard, but the right coverage level depends entirely on your revenue, industry, employee count, and internal financial controls.

Key cost drivers:

  • Coverage limits: higher limits drive higher premiums. Most policies are written between $500,000 and $3 million, with some higher-risk operations requiring more.
  • Deductible: standard deductibles are typically $2,500. Accepting a higher deductible can reduce annual premium but raises the threshold at which a loss becomes claimable.
  • Industry: financial services, retail, and businesses with high-volume electronic payments are rated at higher premiums due to exposure concentration.
  • Employee count and turnover: More employees and higher turnover increase statistical exposure.
  • Internal controls: Businesses with documented dual-approval processes, segregation of duties, and regular audits typically qualify for better rates.
  • Claims history: Prior crime losses affect both pricing and availability of coverage.

For businesses that need only limited supplemental protection, some insurers offer crime endorsements to existing policies starting around $100 per year. However, for any business with real financial exposure, a standalone policy with appropriate limits and endorsements is the right structure.

What Crime Insurance Does NOT Cover

Understanding the exclusions in a crime policy is just as important as knowing what it covers. The most commonly misunderstood limitations are the ones that produce claim denials, and being surprised by them after a loss is an expensive education. Common exclusions include:

  • Owner and officer fraud: most crime policies exclude losses caused by named principals, owners, or senior executives. If the person committing the fraud is a listed insured or principal, coverage typically does not apply.
  • Prior known dishonesty: if you were aware of an employee’s dishonest behavior before the policy period, losses tied to that employee are excluded.
  • Indirect or consequential losses: crime insurance covers direct financial losses only. Lost profits, reputational damage, and business interruption costs are not covered.
  • Voluntary payments without endorsement: standard crime policies do not automatically cover situations where your employee was tricked into transferring funds. A social engineering endorsement is required for that exposure.
  • Data theft without financial loss: if an employee steals confidential data but no money is moved, crime insurance typically does not respond. That scenario falls under cyber insurance.
  • Government seizure or regulatory fines: losses resulting from government confiscation, sanctions enforcement, or regulatory action are excluded.

The “voluntary parting” clause deserves special attention. If your employee chose to make a transfer, even under deception, some policies treat that as a voluntary payment and deny the claim. This is one of the primary reasons why understanding what crime insurance actually covers in your specific policy form matters before you buy it, not after. The Coyle Group offers a complimentary coverage review.

How to Know If Your Crime Coverage Is Actually Protecting You

Most business owners who review their crime coverage for the first time find one of three problems: limits buried inside a BOP that are far too low for any real fraud event, a missing social engineering endorsement, or a deductible that eliminates recovery for the most common loss scenarios. Reviewing the actual policy form, not just the declarations page, is the only way to know where you stand.

Here is what to evaluate in your current program:

  • Where is your crime coverage sitting? If it is inside your BOP, your limit is almost certainly $10,000 to $25,000. That covers a minor theft, not a real fraud event.
  • Do you have a social engineering endorsement? Check the endorsement schedule of your policy. If you do not see it listed explicitly, you have no BEC coverage.
  • What is your deductible? A $25,000 deductible on a crime policy effectively eliminates coverage for the most common losses, which are in the $20,000 to $80,000 range.
  • Does your policy include computer fraud? Some crime policies include it as standard. Others require a separate endorsement. Confirm explicitly, not by assumption.
  • Verify that your current policy limit covers your actual worst-case scenario. If your annual revenue is $3 million and the ACFE estimates 5% of revenue is lost to fraud, that is a $150,000 exposure.

Understanding what crime insurance entails and verifying that your current program matches your exposure is the kind of review The Coyle Group provides as part of every client engagement. You should not need a loss event to find out where the gaps are.

How The Coyle Group Helps You Get the Right Crime Insurance

At The Coyle Group, we make insurance straightforward and tailored to your needs. Our process is built around understanding your specific crime exposure, not selling a standard package. With over 40 years of experience and a comprehensive approach to commercial insurance coverage, we structure crime insurance programs for businesses of every size and complexity.

Here is how we approach it:

  • Review your current policies and identify exactly where your crime coverage sits, what limits apply, and which endorsements are present or missing.
  • Identify gaps in your existing coverage, including social engineering, computer fraud, and BOP sublimit exposure.
  • Design a custom policy that covers your actual exposure with appropriate limits, proper endorsements, and a deductible structure that makes financial sense for your business.

We work with carriers that specialize in crime coverage and know how to negotiate the terms that matter. Our process is simple, no-pressure, and designed to give you a clear picture of where you stand before a loss forces the issue. We have helped businesses across financial services, technology, manufacturing, and other industries build crime insurance programs that actually respond when they are needed.

Don’t Leave Your Business Exposed

Crime insurance is purpose-built coverage that no other commercial policy is designed to replace. Without it, a single fraud event can trigger losses that your property policy, general liability, commercial umbrella, and cyber insurance will all decline to cover. Employee theft and fraud are not possibilities. They are probabilities.

A business generating $2 million per year faces a statistical $100,000 annual fraud exposure based on ACFE data. A single uncovered loss of that size can eliminate an entire year of profit.

With the right crime insurance program in place, you can:

  • Safeguard business assets from employee theft and external fraud.
  • Avoid major out-of-pocket losses when fraud schemes are discovered.
  • Close the coverage gap between your cyber and crime policies for social engineering fraud.
  • Focus on growing your business instead of recovering from financial setbacks.

See how business insurance fundamentals connect across all your commercial coverages, and understand where crime insurance fits in your overall risk program.

Ready to Protect Your Business?

Let’s ensure your business is fully protected. Contact us today to schedule a free consultation. No pressure, just smart advice and tailored solutions from someone who has been in the business for over four decades. Click the “Get Insured Now” button at the top of this page to get started.

Frequently Asked Questions About Crime Insurance

Crime insurance is not legally required in most states. However, certain contracts, including those with government entities, financial institutions, or large corporate clients, may require it as a condition of doing business. Confirming your contractual obligations before binding coverage is part of what a thorough risk review covers.

It depends on how the theft occurred. Crime insurance covers direct financial theft, including computer-initiated transfers, if the policy includes a computer fraud endorsement. However, losses from data breaches, network attacks, or third-party liability from a cyber event are covered under cyber insurance, not crime insurance. The overlap between the two is narrow and requires specific endorsements on both policies to close.

Fidelity insurance is the older term for employee dishonesty coverage. Modern crime insurance policies include employee dishonesty as one component within a broader policy that also covers forgery, computer fraud, and social engineering. Most carriers now issue commercial crime policies rather than standalone fidelity bonds, though some industries still use both.

Most BOP policies include a very limited crime endorsement, typically $10,000 to $25,000. For most businesses, that limit is insufficient to cover a real fraud event. A standalone crime policy provides appropriate limits, proper endorsements, and coverage structures designed for actual business crime exposure.

Most crime policies have strict reporting requirements. Typically, you must discover the loss within the policy period and report it within 60 to 90 days of discovery. Delayed reporting is one of the most common reasons crime claims are denied. Understanding your policy’s discovery and reporting requirements before a loss occurs is essential.

It depends on the policy form. Some third-party crime exposures are covered under standard crime policies. The vendor impersonation scenario, where a fraudster poses as your vendor and redirects a legitimate payment, typically requires a social engineering endorsement to be covered. This is one of the most common gaps in business crime programs today.

About the Author

This article was written by Gordon B. Coyle, CPCU, ARM, AMIM, PWCA, CEO of The Coyle Group, who has over 40 years of experience working with business owners of all sizes and industries across the US, solving their insurance challenges.

Check Out Our Blogs