ERISA Bond: What It Is, How Much You Need and the Mistakes That Leave Your 401(k) Exposed

Quick Answer

“I’m a little confused by the requirement to get bonded; am I required to get this bonding for the 401k plan I’m offering my employees or are the fund managers required to get this bond?” We hear that question from business owners all the time, usually right after a CPA or plan administrator asks about the ERISA bond. The short answer is that the bond is your plan’s responsibility, and getting it wrong is easier than most owners think.

The Coyle Group is a commercial insurance agency for business owners who’ve outgrown one-size-fits-all coverage and need a specialist who understands the nuances.

If your administrator just asked “what is the limit of your ERISA bond?” and you’re not sure, you’re in good company. We manage the market for you: we check whether your bond names the plan, matches 10% of this year’s assets and works with your crime and fiduciary coverage, then bring the right insurers to the table. I’ve audited business insurance programs since 1984. The next step is a short, confidential call.

When an organization has an ERISA-based benefit plan, such as a 401(k), it must have an ERISA bond. This coverage is needed to protect a portion of the retirement plan’s assets. In this post, we describe what an ERISA bond is and how it integrates with other important coverages relative to retirement plans.

What happens if your plan’s money is stolen and the bond is too small?

If someone steals from your plan and the bond is missing or too small, the plan absorbs the loss, and the fiduciaries can be personally liable to restore it. Losses aren’t small. A union finance chief once took nearly $1 million from benefit plans. However, the bigger risk for most owners is a bond nobody has resized in years.

Here’s what the record shows:

Why an ERISA bond matters: a company controller reviews retirement plan statements after spotting a withdrawal she doesn't recognize

Insider theft can reach seven figures.

Zurich describes a former union CFO who pleaded guilty to embezzling nearly $1 million from the union’s benefit plans, hidden as plan expenses, in its ERISA fidelity bond insight.

Outsiders steal from plans too.

The same Zurich piece describes a retirement plan that lost over $1 million when criminals used stolen personal data to request withdrawals.

Fiduciaries can pay personally.

The Department of Labor says fiduciaries who break the rules may be personally liable to restore any losses to the plan.

The annual report asks about it.

The 2025 Form 5500-SF instructions list a penalty of up to $2,739 a day for failing to file a complete and accurate report.

Why small and mid-sized plans get caught

In my experience, the bond gets bought once, when the plan is set up, and then forgotten. Assets grow every year, but the bond limit stays put until an auditor, a 5500 preparer or a loss forces the question.

What is an ERISA bond, in simple terms?

An ERISA bond is insurance for your retirement plan itself, not for your company or the people running the plan. It pays the plan back when someone who handles plan money steals it. That sounds simple. However, the rules about who must be covered and for how much are where owners slip.

An ERISA bond is a form of fidelity insurance and, simply put, fidelity insures against theft or embezzlement. Here’s how it works: if a covered person steals from the plan, the plan files a claim with the surety, and the surety repays the plan up to the bond limit. It sits among the specialty coverages in our business insurance by coverage library.

Watch: What is an ERISA Bond or ERISA Fidelity Coverage

This video gives additional details on what you need to know when it comes to your retirement plan and safeguarding assets.

Why ERISA requires the bond

ERISA, which is a federal law, stands for the Employee Retirement Income Security Act of 1974. It was created to safeguard the assets held in a pension plan, a 401(k) plan or other qualified ERISA plans, since these assets are held for the benefit of the organization’s employees and their beneficiaries.

The Department of Labor oversees ERISA and compliance with its laws. The DOL wants to make sure that if assets are stolen from a retirement plan, there is an insured method to recover those assets, and that is the job of the ERISA bond. The bond requirement itself sits in Section 412 of the law.

  • Fidelity equals theft protection. Since the fidelity bond is mandated and cheap, it’s pretty easy to understand.

When the question usually comes up

When you set up a 401(k) plan or file the annual Form 5500, it’s common for your CPA or pension administrator to ask, “Do you have an ERISA bond for the plan?” or “What is the limit of your ERISA bond for this plan?” If you don’t know the answer, that’s the moment to find out, before you sign the filing.

Just got that question from your CPA? Book a call and we’ll find the answer together.

What are the key rules of an ERISA bond?

The core ERISA bond rules come from the Department of Labor’s Field Assistance Bulletin 2008-04: what it covers, who issues it, whose name is on it and how much it must be. Regulation fixes most of them, so there’s little room to negotiate. That’s why the details matter more than the price.

Here are the key aspects at a glance, from DOL Field Assistance Bulletin 2008-04:

Rule

What it means for you

Covers fraud or dishonesty

Theft, embezzlement, forgery, misappropriation and similar acts by people who handle plan funds

Plan is the insured

The plan must be named or identified so it can make a claim

No deductible

The bond must pay the plan from the first dollar of loss

Approved surety only

The surety must appear on the Treasury’s Listing of Approved Sureties (Circular 570)

Minimum amount

10% of funds each person handled in the prior year, at least $1,000

Maximum required

$500,000 per plan, or $1,000,000 if the plan holds employer securities

Term

One year or longer, checked at the start of every plan year

Who pays

The plan may pay for the bond from plan assets

The bond doesn’t cover bad investment choices or honest mistakes. Those belong to other coverages, which we’ll get to below.

Who needs an ERISA bond, and who has to be covered?

Every person who “handles” funds or other property of a funded ERISA plan needs to be covered by an ERISA bond, unless an exemption applies. In practice, that’s usually the owner, the CFO or controller and anyone else who can move plan money. Some people outside your company can need coverage too.

Zurich summarizes the DOL’s handling test. A person handles plan funds if they have:

  • Physical contact with cash, checks or similar property.
  • Power to transfer funds from the plan to themselves or someone else.
  • Power to negotiate plan property, such as securities.
  • Authority to disburse, or to direct disbursement.
  • Authority to sign checks or other negotiable instruments.
  • Supervisory or decision-making responsibility over any of the above.
  • “Anyone have an recommendations on who I should use if it is indeed required of me?”

Plans that are exempt

A completely unfunded plan, paying benefits only from general assets, is exempt, as are plans outside Title I of ERISA. Certain banks, insurance companies and registered broker-dealers also have exemptions. Service providers that handle plan money may carry their own bonds naming their plan clients, or be added to yours. If your 401(k) holds money in a trust, assume the ERISA bond applies.

Industries where we see the most exposure

These are the employers I see with the most at stake:

  • Professional services firms where a partner handles the plan.
  • Manufacturers and distributors with growing balances and lean finance teams.
  • Financial services firms with client-money exposure too; see financial services insurance and crime insurance for wealth managers.
  • Fast-growing technology companies.
  • Nonprofits with ERISA-covered plans.

Not sure who “handles” your plan money? Book a call and we’ll map it with you.

How much ERISA bond coverage do you need?

Your ERISA bond must equal at least 10% of the plan funds each covered person handled in the prior plan year, never less than $1,000. The law doesn’t require more than $500,000 per plan, or $1,000,000 if the plan holds employer stock. You can buy more, though.

Under ERISA, plan sponsors must bond at least 10% of plan assets, up to a $500,000 bond, which you reach at $5,000,000 in plan assets. Zurich’s example: a plan with $1 million in funds needs each person handling them bonded for at least $100,000.

Here’s how the minimum ERISA bond works out by plan size:

Plan assets at end of prior year

Minimum required bond

Note

$250,000

$25,000

10% rule

$1,000,000

$100,000

10% rule

$3,000,000

$300,000

10% rule

$5,000,000 or more

$500,000

Statutory cap for most plans

Any size, holding employer securities

Up to $1,000,000

Higher cap applies

When assets grow

Keep in mind that as plan assets grow, you need to contact your agent to make sure you’re maintaining that 10% level of protection every year. The DOL says the plan administrator must confirm at the start of each plan year that the bond still covers the required amount. Many sureties add an inflation guard; Merchants Bonding says its Inflation Guard raises coverage during a three-year term, but only if the bond met 10% when it was issued.

  • Put your ERISA bond on the same calendar as your Form 5500. When the preparer pulls last year’s asset total, multiply it by 10% and compare it with your bond limit before anyone signs.

How is an ERISA bond different from fiduciary liability, EBL and crime insurance?

An ERISA bond protects the plan’s money from theft, while fiduciary liability insurance protects the people running the plan from lawsuits. They answer different questions. However, owners and even some brokers mix them up, and that confusion is where real gaps open.

There are three coverage parts that often get confused when it comes to an ERISA-based benefit plan such as a 401(k) or pension plan: fidelity, employee benefit liability (EBL) and fiduciary liability. The DOL is direct about it: a fidelity bond is not the same thing as fiduciary liability insurance, and the 5500 instructions say fiduciary liability policies can’t be reported as fidelity bonds.

Here’s how the coverages compare:

Coverage

What it protects

Typical trigger

Required by law?

ERISA bond

The plan’s money

Theft or fraud by someone handling plan funds

Yes, for most funded plans

Fiduciary liability

Plan fiduciaries personally

Lawsuits over fees, investments or administration

No, but strongly advised

Employee benefit liability (EBL)

The employer

Clerical errors in enrolling or administering benefits

No

Commercial crime

The company’s money

Employee theft, forgery, computer fraud

No

Fiduciary liability: the coverage the bond doesn’t replace

Our guide to fiduciary liability insurance explains what it pays, and our primer on what fiduciary liability is covers who counts as a fiduciary. Excessive-fee lawsuits, like the one in our Home Depot 401(k) claim post, are fiduciary claims, not bond claims. Fiduciary coverage usually sits in a management liability package with D&O; see our D&O insurance hub.

Watch: What is Fiduciary Liability Insurance and Why is it needed for firms with ERISA based benefit plans?

Employee benefit liability: narrow by design

Employee benefit liability covers administrative mistakes, like failing to enroll an employee. It doesn’t cover theft and it doesn’t cover breaches of fiduciary duty. Having EBL doesn’t mean you have either of the other two.

Watch: What is Employee Benefit Liability or EBL coverage?

Not sure which of the three you actually have? Contact us and we’ll sort it out from your policies.

Can you add an ERISA bond to a crime policy?

Yes, the plan can be added as a named insured on your company’s commercial crime policy, as long as the policy meets ERISA’s rules, usually through an ERISA rider. It’s often the cleanest setup. However, a crime policy that excludes owners can quietly fail the test.

Premiums for ERISA bonds are pretty cheap, and this coverage can often be combined with other forms of crime insurance when you purchase a stand-alone crime insurance policy. A crime policy may have several different types of coverages, from employee dishonesty to computer crime, plus parts like forgery and alteration.

Watch: Crime Insurance | What You Need to Know

The owner exclusion trap

Many crime policies exclude theft by owners or partners. The DOL says that if the crime bond excludes the company owner and the owner handles plan funds, the company bond doesn’t fully protect the plan. The fix is a separate bond for the owner, or an ERISA rider that doesn’t exclude the owner for plan losses.

Does your crime policy actually name your 401(k)? Contact us and we’ll read the rider with you.

How much does an ERISA bond cost?

An ERISA bond usually costs a few hundred dollars a year or less, and blanket bonds can start around $100 a year. Price depends mainly on the bond amount, the term and the surety. The more expensive mistake is buying too little, not paying too much.

Ubiquity Retirement notes that you can buy blanket bonds covering all employees for as little as $100 a year. Multi-year terms are common, and some sureties, such as Old Republic Surety, add an inflation rider at no additional charge.

What drives the price (as of October 2026):

Bond situation

What it usually looks like

What moves the price

Small 401(k), bond under $100,000

Low premium, often issued online

Bond amount, term

Bond of $100,000 to $500,000

Still modest

Bond amount, term, surety

Employer securities, up to $1,000,000

More underwriting

Limit, plan structure

Added to a crime policy by rider

Folded into crime premium

Crime limits, owner coverage

These are general patterns, not quotes. Your actual cost depends on underwriting.

Where to buy an ERISA bond

You can buy one through your broker, your plan’s third-party administrator or directly from a surety, as long as the surety appears on the Treasury’s approved list. As one owner put it afterward, “It was relatively cheap and lasts a few years.” The harder part is sizing it and coordinating it with your crime policy.

Underwriting factors for an ERISA bond

These factors shape eligibility and terms:

Factor

Why underwriters care

What to have ready

Plan assets at the end of last year

Sets the 10% minimum

Last Form 5500 or plan statement

Employer securities or unusual assets

Raises the required cap

List of plan investments

Who handles plan funds

Determines who must be covered

Names and roles of plan officials

Prior dishonesty by a plan official

Bonds can exclude people with a known history

Any prior incident, disclosed honestly

Existing crime coverage

Decides rider vs standalone

Current crime policy and renewal date

Want the right bond amount without guessing? Book a call and bring last year’s plan asset total.

What are the benefits of getting your ERISA bond right?

The main benefit is that a theft from your plan becomes a claim, not a personal problem for you and your fiduciaries. A correct ERISA bond also keeps your Form 5500 answers clean. It’s one of the cheapest compliance items you’ll own.

Here’s what the right bond protects you from:

  • Repaying stolen plan money out of company or personal funds.
  • A wrong “Yes” on Form 5500, because the plan wasn’t actually a named insured.
  • Audit friction when a CPA or the DOL asks for proof of coverage.
  • Gaps between coverages, when bond, crime and fiduciary coverage for a 401(k) plan are coordinated instead of bought separately.

Watch: What is Employee Dishonesty Insurance? Crime coverage explained.

What should you watch out for with an ERISA bond?

Watch out for a bond that’s too small, a policy that doesn’t name the plan and crime coverage that excludes the people who actually handle the money. Each one can turn a covered theft into an uncovered loss. In my experience, most are inexpensive to fix once someone reads the paperwork.

I audit programs for a living, and I find a fatal flaw in roughly 9 out of 10 of them. With retirement plans, the flaw is often a bond set at plan launch and never touched again.

Real-world example: the plan that outgrew its bond.

Losses outside fraud or dishonesty

Zurich notes that cyber-enabled theft, such as fake withdrawal requests, may fall outside the basic agreement unless optional computer fraud or funds transfer fraud parts are added. Our comparison of cyber insurance vs crime insurance and our guide to social engineering coverage show where each loss belongs.

  • Fiduciary liability insurance does not satisfy the ERISA bond requirement. If your only “plan coverage” is a fiduciary policy, your plan isn’t bonded.

Red flags your ERISA bond won’t respond

  • The bond limit hasn’t changed since the plan was set up.
  • The bond names your company, not the plan.
  • Your crime policy excludes owners who sign checks or approve plan transfers.
  • The only crime coverage is a small sublimit inside a BOP, with no ERISA rider.
  • Nobody can say whether the plan holds employer stock, so the cap may be wrong.
  • You have a bond but no fiduciary coverage, which leaves you open to fiduciary liability lawsuits.

Watch: 9 out of 10 Business Insurance Policies have fatal flaws in them, putting you at risk.

Recognize one of these red flags? Book a call and we’ll check your bond against this list.

How do you check your ERISA bond in 15 minutes?

Pull your bond or crime policy, last year’s plan asset total and your last Form 5500, then answer five questions. If one answer is “I don’t know,” that’s your gap. It’s the same check we run in a business insurance review.

  1. Does the bond name the plan itself, by its exact name, as an insured?
  2. Is the limit at least 10% of last year’s plan assets for each person handling funds?
  3. Does the plan hold employer securities, which raises the cap to $1,000,000?
  4. Are owners covered if the bond is part of a crime policy?
  5. Does the 5500 answer match the paperwork, including the bond amount entered?

Add these checks to your commercial insurance renewal checklist so they happen every year.

  • An ERISA bond is cheap and required, but it only protects the plan if it names the plan, covers everyone who handles money and keeps pace with plan assets every year.
How to check your ERISA bond: a business owner and HR manager review the plan's bond and a five-point checklist at a conference table

Why work with The Coyle Group on your ERISA bond?

We start by reading your bond, crime policy and plan documents together, not by sending out quotes. That’s how we catch a bond that’s too small or a rider that excludes owners. There’s a difference between being covered and being adequately covered. One checks a box. The other protects your business.

We review the bond alongside your management liability insurance. I hold the CPCU and ARM designations, and 95% of our clients stay with us.

The Coyle Process

Diagnose the risk.

We learn who handles plan money, how assets have grown and what you already carry.

Identify the right insurers.

We decide between a standalone bond and a crime rider, then pick sureties that fit.

Explain where we’re going and why.

You know which insurers we’ll approach before we approach them.

Bring viable options back for comparison.

You compare limits, riders and terms, not just price.

The benefit is simple: fewer applications, fewer duplicate requests and one point of contact.

About shopping your coverage

Comparing options is smart; shopping indiscriminately is different. When several brokers send your account out, the same insurers see duplicate applications, and a generalist can misclassify your risk. You don’t need five brokers shopping your insurance. You need one capable broker making sure the right insurers compete for your business.

Who this isn’t right for

If you’re looking for someone to rubber-stamp what you already have at a lower price, there are brokers who will do that. We’re not one of them. If all you need is a basic bond for a very small plan, your plan administrator may arrange one quickly, and I’ll tell you so. And we only handle business insurance, not home or auto.

Your next step: a 15-minute call, not an application

  • If you already have a bond or crime policy, we’ll do a confidential review of the forms, riders, exclusions and limits to show whether your plan is properly protected.
  • If you need new coverage, we’ll build the underwriting picture first, then identify which sureties and insurers fit your plan.

Have other questions or concerns about your ERISA-based retirement plan risk? Book a call and let’s start a 15-minute conversation.

Frequently Asked Questions

Almost all do. Any funded plan subject to ERISA needs a bond for the people who handle its money. Completely unfunded plans and plans outside ERISA, such as government plans, are exempt.

Yes. “401(k) bond,” “ERISA fidelity bond” and “ERISA bond” all describe the same Section 412 fidelity bond. It is not the same as fiduciary liability insurance.

Usually little. Blanket bonds can start around $100 a year, and most small plans pay modest premiums. Larger limits and employer stock raise the price.

Terms of one to three years are common, and the DOL allows longer terms. The plan administrator still has to confirm the amount at the start of each plan year.

Only a surety or reinsurer on the Treasury’s Listing of Approved Sureties, or under certain conditions Underwriters at Lloyd’s of London. Neither the plan nor a party in interest may control the surety.

Yes. The DOL allows the plan to pay for a proper Section 412 bond from plan assets, because the bond protects the plan, not the officials.

Most plans are, with little underwriting. A person with a known history of dishonesty may be excluded, so that person can’t handle plan funds without separate arrangements.

Comparing makes sense, but sending your account to several brokers usually backfires. Insurers see duplicate submissions and you fill out the same forms twice. One capable broker managing the market gets you a cleaner result.

Author’s Expertise

This article was written by the CEO of The Coyle Group, Gordon B. Coyle, CPCU, ARM, AMIM, PWCA, who has over 40 years of experience working with business owners of all sizes and industries across the US, solving their insurance challenges.

Check Out Our Blogs