Employee embezzlement, forged checks, CEO fraud, and computer theft are completely excluded from standard commercial insurance. Organizations lose an estimated 5% of revenue to fraud annually — and small businesses are hit hardest because they have fewer controls. Commercial crime insurance is what fills that gap.
The threat is not usually a stranger. It is the bookkeeper who has been with you for eight years. The manager you trusted. The employee who had access because they needed it to do their job. The Association of Certified Fraud Examiners finds that the average fraud scheme runs 18 months before detection — long enough to cause catastrophic losses before anyone notices.
Your general liability policy was designed for third-party claims. Your property policy was designed for physical damage. Neither was designed for financial losses caused by the people inside your business. Commercial crime insurance is the only coverage that addresses this exposure directly.
The coverage gap to understand
GL: Covers third-party bodily injury and property damage — not employee theft
Property: Covers fire, wind, and physical damage — typically excludes employee dishonesty
Crime: Specifically covers theft, fraud, forgery, and computer crime by employees and outsiders
The core coverage — theft, embezzlement, and fraudulent acts by your employees. Covers the bookkeeper skimming accounts, the manager stealing inventory, the trusted employee manipulating financial records. Average embezzlement scheme: 18 months before discovery.
Covers losses when someone forges your signature on checks, alters check amounts, or creates fraudulent instruments drawn on your accounts. A stolen or forged check that clears your bank account is a covered loss.
Covers theft of money through unauthorized computer access — a hacker who gains access to your banking credentials and transfers funds, or malware that allows unauthorized access to financial systems. Distinct from cyber liability, which covers breach response costs.
Covers losses when employees are tricked into transferring funds — a criminal impersonating your CEO requesting an urgent wire transfer, fake vendor emails requesting payment to a new account. This is now the most common and costly crime loss for small businesses.
Covers loss of cash and securities from your premises or in transit — robbery, safe burglary, theft during bank deposits, and mysterious disappearance of cash.
Covers unauthorized wire transfer instructions — criminals who provide fraudulent banking information and divert legitimate payments. Often overlaps with social engineering; verify both are covered.
The social engineering question: Traditional crime policies often exclude or severely sublimit social engineering losses. CEO fraud and vendor impersonation are now the most common large crime losses for small businesses. When reviewing any crime policy, always ask specifically whether social engineering is covered and at what limit.
Insurance covers losses after they happen. These controls prevent them from happening — and many underwriters offer premium discounts for documented procedures.
Different people should authorize transactions, process them, and reconcile accounts. This single control eliminates the majority of embezzlement opportunities. When one person does all three, fraud is easy to hide.
Fraud is frequently discovered when someone else covers for a vacationing employee. Requiring annual vacations and cross-training a backup for every financial role is one of the most effective fraud detection tools.
Vendor impersonation and CEO fraud almost always arrive via email. A simple policy of verifying any payment instruction change by calling a known phone number — not one provided in the suspicious email — stops most of these schemes.
The average scheme runs 18 months. Your limit should reflect cumulative potential losses over that window — not just what could be stolen in a day. A $25,000 limit is often inadequate for businesses with meaningful financial exposure.
Assess your financial controls, identify your highest-risk exposures, and prepare for your crime insurance application.
Download Free Checklist →Premiums are primarily driven by coverage limit and industry. Answer four questions to see your range.
We identify where your business is most vulnerable — who has financial access, how funds flow, what controls exist, and where gaps are. Social engineering and computer fraud exposure are always part of this conversation.
Based on your actual exposure, we recommend coverage types and limits. The right limit reflects cumulative potential loss over an 18-month detection window, not daily exposure. We work with multiple carriers to find competitive pricing.
Crime exposure changes as your business grows and your team changes. We review your crime coverage at renewal and when you make significant operational changes — new financial systems, staff changes in key roles, or rapid growth.
Commercial crime insurance is the only policy specifically designed to cover financial losses from employee theft, fraud, and computer crime.
Fill out the form and an agent will be in touch within one business day.
The most common gap is buying a crime policy that excludes the exact type of fraud that is most likely to happen.
I work with businesses on commercial crime insurance and the social engineering conversation is always the first one I have. Standard crime policies often exclude CEO fraud and vendor impersonation — which are now among the most common and largest crime losses for small businesses. I also talk through coverage limits relative to actual financial exposure, because a $25,000 limit on a business with a bookkeeper who has unsupervised access to accounts is not meaningful protection.