What Is Commercial Crime Insurance and Does It Cover Employee Theft?

The most damaging theft many small businesses ever suffer is not a break-in. It is a trusted bookkeeper paying personal bills from the operating account for three years, or a staff member who wires a supplier payment to a fraudster's bank because the email looked right. Neither loss fits neatly inside a property or liability policy. Commercial crime insurance exists for exactly this category of loss, and employee theft is usually the reason a business buys it.

How a commercial crime policy is organized

Crime coverage is sold as a standalone policy or as a coverage part inside a package policy. Many forms in the market are either built on, or compared against, the standard crime forms published by Insurance Services Office (ISO). The current ISO edition groups coverage into separate insuring agreements, and each one carries its own limit and deductible on the declarations.

That structure matters more than the policy name. A business can buy a high limit for employee theft and a low one, or none, for forgery or funds transfer fraud. When a loss happens, the question is not "do we have crime insurance?" but "which insuring agreement fits these facts, and what limit sits next to it?"

Employee theft: the core of most crime programs

The employee theft agreement covers loss of money, securities and other property caused by theft committed by an employee. Several features of the standard wording work in the policyholder's favor:

• The thief does not always have to be named. Coverage can apply even when the specific employee responsible cannot be identified, which matters when inventory simply disappears.
• Collusion is covered. The agreement applies whether the employee acted alone or with others.
• Forgery by an employee counts as theft under the definition used in the form.

One feature cuts the other way. The limit applies per occurrence, not per employee. If ten employees join one scheme, the business collects one limit, not ten. Separate, unrelated thefts by different people can each be their own occurrence.

The newest ISO edition also added related agreements, including coverage for theft of a client's property by an identified employee, and a separate agreement for dishonesty by an official of an employee benefit plan.

Forgery, computer fraud and impersonation scams

Beyond employee theft, a crime policy can include several agreements aimed at outside fraud:

• Forgery or alteration of checks, drafts, promissory notes and similar written promises to pay drawn on the business, with defense costs if the business refuses to honor an instrument it believes is forged and is sued, subject to the insurer's written consent.
• Inside the premises theft of money and securities, plus robbery or safe burglary of other property.
• Computer and funds transfer fraud, which responds when a fraudulent entry or change in a computer system causes money to move, or when a bank acts on a transfer instruction that appears to come from the business but was issued by an impostor without its knowledge or consent.
• Fraudulent impersonation, added in the current ISO edition, which addresses the case where the business itself, acting in good faith, sends money or changes a vendor's payment details because of instructions from someone posing as a customer, vendor or authorized person.
• Money orders and counterfeit money accepted in good faith.

The distinction between the last two fraud agreements is the one that decides many disputed claims. Computer and funds transfer fraud is built around transactions the business did not make. Impersonation coverage is built around payments the business did make, because it was fooled. Older editions and some non-standard forms have no impersonation agreement, and where it is added by endorsement it may carry a smaller sublimit than the rest of the policy.

How crime coverage differs from cyber and property insurance

Property insurance is designed around physical loss to buildings, equipment and inventory. Money taken by an insider over several years does not look like the fire or windstorm a property form is written for, so do not assume a property policy picks up dishonesty losses; read its exclusions.

Cyber insurance is usually built around a data breach, a network outage, ransomware and the notification, forensic and liability costs that follow. Some cyber policies include social engineering or funds transfer coverage, often as an optional sublimit. Others leave money-movement losses to a crime policy. When both policies are in place, check how they coordinate so that one wire fraud loss is not argued back and forth between two insurers. For firms that handle client funds, such as law, accounting and real estate businesses, that coordination belongs in a business insurance review rather than being discovered after a loss.

Discovery versus loss sustained forms

Crime forms come in two timing structures, and the difference matters because employee theft is often found years after it starts.

• Loss sustained form: the theft must occur during the policy period and be discovered during that period, or within an extended period after the policy ends. In the ISO form, that extended period is one year, and it ends early if the business buys other coverage.
• Discovery form: the loss must be discovered during the policy period, which can pick up older theft, subject to the form's terms. The extended period after the policy ends is much shorter, 60 days in the ISO discovery form.

Switching between the two, or between insurers, can open gaps for theft that started under the old policy. Loss sustained forms include conditions for losses that began under prior insurance. Ask how the new policy treats a scheme that started before its effective date.

Crime forms also contain a condition that ends coverage for a specific employee once designated people in the business learn that employee has committed a dishonest act. In the current ISO edition, that termination takes effect on a date in a notice the insurer mails. Older editions and non-ISO forms can work differently, so read your own form before keeping someone in a financial role after an incident.

Which businesses usually need a crime policy

Almost any business with employees has some exposure, but the need is sharpest when:

• one person both writes checks and reconciles the bank statements;
• the business handles cash, client funds or escrow money;
• vendors and subcontractors are paid by wire or ACH;
• a client, landlord or lender requires crime or fidelity coverage in a contract;
• the business sponsors a retirement plan that needs an ERISA fidelity bond.

On that last point, U.S. Department of Labor guidance says plan officials who handle funds generally must be bonded for at least 10 percent of the funds they handle, with a minimum of $1,000 per plan and a maximum that is usually $500,000 per plan, or $1,000,000 for plans that hold employer securities. Crime forms can include an agreement written to address that requirement.

Controls underwriters look for

Crime underwriters tend to ask about financial controls because controls are what keep small thefts from becoming large ones. Expect questions about dual signatures or approvals, bank reconciliations by someone other than the person who pays bills, required vacations for finance staff, background checks, and a call-back procedure to a known phone number before changing any vendor's bank details. Having these in place can affect both pricing and whether a particular agreement, such as impersonation coverage, is offered at all.

Frequently asked questions

Does employee theft coverage require knowing which employee stole?

Not always. The standard employee theft agreement can apply even when the specific employee cannot be identified. Some related agreements, such as theft of a client's property, do require an identified employee, so the answer depends on which agreement the claim falls under.

Is a fidelity bond the same thing as crime insurance?

The terms overlap. "Fidelity" describes coverage for dishonesty by employees, and the current ISO crime edition uses it as the name for a group of agreements that includes employee theft. An ERISA bond is a specific fidelity requirement for retirement plans that can be met through a crime form or a standalone bond.

Will a crime policy pay if an employee wires money to a fake vendor account?

Only if the policy has an agreement that fits. Because the employee chose to send the payment, a computer or funds transfer fraud agreement may not apply, while a fraudulent impersonation or social engineering agreement might, subject to its sublimit and conditions.

How long after a policy ends can a theft still be reported?

It depends on the form. The ISO loss sustained form allows discovery within one year after the policy ends, unless other coverage is bought, and the ISO discovery form allows 60 days. Non-standard forms set their own periods.

What Truscott recommends

Start by mapping how money actually moves through your business, who can move it and who checks the work, then match each exposure to a specific insuring agreement and limit. A Truscott coverage review can check how your property and cyber policies treat theft and funds transfer fraud, so you can see which losses still need a dedicated crime policy. When you are ready, request a business quote and include any crime declarations you already have.