A trusted employee with access to accounting records can create more financial damage than an outsider who breaks a window. A bookkeeper changes vendor payment details. A manager takes inventory over time. A fraudulent wire request reaches the right person on a rushed Friday afternoon. To choose commercial crime coverage well, a business owner has to look beyond a generic theft limit and examine how money, property, and authority actually move through the company.
Commercial crime insurance is designed to address certain losses caused by employee dishonesty, theft, forgery, fraud, and related criminal acts. The details matter. A policy that responds to one kind of loss may exclude another, especially when social engineering, computer fraud, outside vendors, or contractual obligations are involved. The right answer is not simply the highest limit. It is a policy structure that matches your operation and the controls you can realistically maintain.
Start With the Losses Your Business Could Actually Sustain
Commercial crime coverage is often treated as an add-on to a business package policy. That can be a costly assumption. Standard property coverage may protect business personal property after a covered event, but it generally is not built to cover the full range of internal theft, fraudulent fund transfers, or forged financial instruments.
Begin with a practical review of access. Who can initiate payments, approve payroll changes, handle deposits, issue refunds, access customer bank information, receive inventory, or alter vendor records? The concern is not a lack of trust. It is recognizing that businesses change, employees face financial pressure, and a single person with unchecked authority creates a concentration of risk.
For a professional services firm, the largest exposure may be a fraudulent wire transfer or misuse of client funds. For a contractor, it may be stolen materials, payroll manipulation, or a dishonest project manager. A medical practice may face employee theft of cash receipts or electronic payment information. A retailer may be more concerned with inventory shrinkage, refund fraud, and employee theft at multiple locations.
The coverage conversation should follow these realities rather than a one-size-fits-all industry label.
Know What Commercial Crime Coverage May Include
Policy forms and endorsements differ by carrier, so definitions and exclusions should be reviewed carefully. Still, commercial crime coverage commonly involves several distinct insuring agreements.
Employee Theft or Dishonesty
This is often the core protection. It may respond when an employee steals money, securities, or other property from the business. The definition of employee is critical. Owners, partners, temporary workers, leased employees, volunteers, and independent contractors may not all be treated the same way.
A family-owned business should pay particular attention here. Many forms limit or exclude losses caused by owners, partners, or certain executive officers. If relatives work in the company or responsibilities overlap with ownership, the policy language deserves a closer review before a loss occurs.
Forgery and Alteration
This coverage may apply to forged checks, promissory notes, or similar financial instruments. It can be useful, but it should not be confused with broad protection for all electronic payment fraud. A forged check and a convincing email directing a wire transfer are different events under many policies.
Computer Fraud and Funds Transfer Fraud
These coverages address certain fraudulent electronic events, but their triggers can be narrow. Some forms require direct entry into a computer system. Others may respond to a fraudulent instruction that causes a financial institution to transfer funds. The distinction becomes especially important when an employee voluntarily sends money after receiving a fraudulent email or text.
Social Engineering Fraud
Social engineering coverage is increasingly relevant because criminals often impersonate executives, vendors, banks, or clients. They rely on urgency and credibility, not a dramatic system breach. This protection may be available by endorsement, often with a smaller sublimit than the overall crime limit.
Businesses that routinely send wires, change vendor banking details, or process high-value invoices should ask exactly how the policy treats voluntary parting with money induced by deception. A broadly described “fraud” endorsement is not enough. Request examples of covered and uncovered scenarios.
Set Limits Based on Severity, Not Just Premium
A $25,000 limit may sound reasonable until a payroll scheme runs for 18 months or a single wire transfer exceeds that amount. To set a meaningful limit, estimate the largest credible loss from each major exposure.
Consider the maximum cash or inventory an employee can access, the largest routine wire transfer, the value of property held for clients, and the amount that could be diverted before a reconciliation identifies the problem. Also consider how long a loss could remain undiscovered. Internal theft is often uncovered months or years after it begins, which makes discovery provisions and prior-loss coverage especially relevant.
Higher limits cost more, and not every business needs a seven-figure crime policy. But choosing a low limit simply because it keeps the premium down can create a false sense of security. A sound decision weighs the retained risk against the company’s cash reserves, borrowing capacity, and ability to continue operating after an uninsured loss.
Deductibles deserve the same discussion. A higher deductible may be reasonable for a financially stable business with strong controls. It is less attractive if the expected loss is likely to fall just above the deductible or if the business relies on limited working capital.
Review Exclusions, Conditions, and Timing
Commercial crime policies can be highly dependent on their wording. One of the most consequential questions is whether coverage is written on a loss sustained basis or a discovery basis. The answer affects when a loss must occur or be discovered for the policy to respond.
Look for conditions related to notice, proof of loss, recordkeeping, employee termination after discovery of dishonesty, and audit requirements. Some policies contain exclusions involving known prior dishonest acts, indirect or consequential loss, legal fees, or voluntary parting with property. Coverage for client property, third-party liability, or money held in trust may require separate consideration.
This is also where contract requirements matter. If a client, lender, franchisor, landlord, or government contract requires a fidelity bond or specific crime limit, confirm that the policy satisfies the actual requirement. Do not assume that a certificate or a general crime endorsement provides the precise language the contract calls for.
Pair Coverage With Controls That Reduce the Odds of Loss
Insurance is a financial backstop, not a substitute for oversight. Strong internal controls can prevent a loss, reduce its size, and support a cleaner claims process.
At a minimum, payment initiation and payment approval should be separated whenever staffing allows. Bank-account changes for vendors should be verified using a known phone number, not the contact information contained in an email request. Reconciliations should be performed promptly by someone who does not issue payments. Access to accounting platforms should be limited by role, and former employees should be removed immediately.
For businesses with higher wire exposure, create a written callback procedure for any new payment instructions, changes in bank details, or transactions above a stated threshold. Employees need permission to slow down when a request feels urgent or unusual. Fraudsters count on people bypassing normal procedures to avoid disappointing a senior executive or delaying a vendor payment.
Controls do not eliminate the need for coverage. They do, however, help determine the coverage limits, deductible, and endorsements that fit the business.
Work With an Advisor Who Will Compare the Details
The right commercial crime policy is rarely identified by looking at one premium number. Carrier forms can differ meaningfully in their treatment of social engineering, computer fraud, employee definitions, discovery periods, sublimits, and claims documentation.
A consultative review should connect the policy to your financial procedures, organizational structure, contracts, and existing property, cyber, management liability, and professional liability coverage. There may be overlap in some areas and gaps in others. For example, cyber insurance can address certain technology-related events, but it does not automatically replace commercial crime coverage for employee theft or fraudulent transfers.
ASF Insurance Agency can help business owners compare available carrier options and build a tailored coverage map around the risks that are actually present. The goal is clear: understand what the policy is designed to do, what it will not do, and what operational steps should support it.
The best time to examine crime coverage is while every transaction still looks ordinary. Review who has access, where approvals can fail, and how much loss the business could truly absorb. That preparation gives you a policy decision grounded in accountability rather than hope.