Fidelity insurance reimburses a business for direct financial losses caused by dishonest acts of its own employees, including theft, embezzlement, forgery, and unauthorized fund transfers. It pays out only when the act is intentional and the loss is measurable in dollars, and for businesses that manage employee benefit plans, a form of it is required by federal law.
What Fidelity Insurance Covers
The coverage targets one category of risk: deliberate dishonest acts by employees that cause direct financial harm. Covered acts typically include stealing cash or merchandise, forging checks, diverting company funds through unauthorized wire transfers, embezzling from accounts, and committing credit card fraud using company accounts.
The critical word is “direct.” If an employee steals $50,000 from a company account, the policy covers that $50,000, minus any deductible. It will not cover the ripple effects: lost business opportunities, reputational damage, or interest that could have been earned on the stolen funds. That distinction matters more than most policyholders realize until they file a claim.
How Fidelity Coverage Is Structured
Fidelity insurance comes in several structures, and choosing the wrong one can leave gaps that only become obvious after a loss. Three forms are common, and they differ in who they cover and how coverage limits apply.
Blanket Coverage
Blanket coverage protects against dishonest acts by any employee without naming specific people or positions. Every worker, whether full-time, part-time, or temporary, falls under the policy automatically. For businesses with high turnover or large workforces, this is the most practical option because it never needs updating when someone is hired or leaves.
Coverage limits apply per loss rather than per employee. If three employees conspire to steal from the same account, the policy pays up to one maximum limit for that single occurrence, not three separate limits. Premiums run higher than scheduled policies because the protection is broader, but for industries where many employees handle money, the convenience usually justifies the cost.
Name Schedule Coverage
Name schedule policies cover only the specific employees listed on the policy. The business chooses the individuals, and only losses caused by those named people trigger coverage. This structure works when the risk is concentrated in a handful of employees, such as a controller, a treasurer, or a senior accountant, and the company wants to set different coverage limits for each person based on how much money they handle.
The tradeoff is maintenance. Every time a covered employee leaves, is promoted, or a new hire takes on financial responsibilities, the policy needs to be amended. Miss an update, and you might discover after a loss that the employee who stole from you was never actually on the policy.
Position Schedule Coverage
Position schedule coverage lists job titles rather than individuals: chief financial officer, payroll manager, accounts payable clerk. Anyone occupying those roles is automatically covered, so when one cashier replaces another, the coverage follows the position. Limits can be tailored to each position based on the financial exposure the role creates. The risk is incomplete role mapping. If a newly created position handles significant funds but nobody adds it to the schedule, losses from that role fall outside the policy. Periodic reviews of the position list, particularly after reorganizations, help prevent those gaps.
What Fidelity Insurance Does Not Cover
The exclusions are as important as the coverage, and some of them catch policyholders off guard.
- Indirect and consequential losses. Lost profits, lost interest, and reputational harm are not covered. The policy pays only for the direct financial loss caused by the dishonest act itself.
- Losses proven only by inventory shortage. If the only evidence of a loss is that an inventory count came up short or a profit-and-loss statement doesn’t balance, most policies exclude it. You need independent evidence linking the shortage to a specific dishonest act.
- Acts by owners and principals. Fidelity insurance typically excludes dishonest acts by business owners, partners, or majority shareholders. The policy is designed to protect the business from its employees, not from its own principals.
- Prior known dishonesty. If you knew an employee had committed a dishonest act and continued employing them, coverage for that employee’s future acts is voided. This is automatic under most policies unless the insurer provides a written waiver.
- Accidental errors. A bookkeeper who mistakenly processes a duplicate payment has made an error, not committed a dishonest act. Negligence and honest mistakes do not trigger fidelity coverage.
The prior-knowledge exclusion deserves special attention. Some employers discover minor dishonesty, such as an employee pocketing small amounts from petty cash, and choose to address it internally without termination. Under most fidelity policies, that decision strips away coverage for any future dishonest act by that same employee.
When Does Coverage Actually Trigger
Fidelity policies use one of two mechanisms to determine when coverage responds, and the difference matters enormously when fraud has been going on for years before anyone notices.
Discovery-Based Policies
Under a discovery-based policy, coverage applies when the policyholder first discovers the loss, regardless of when the dishonest act actually occurred. If an employee has been embezzling for five years and the company discovers it today, the current policy responds, even though most of the theft happened under earlier policy periods. This is the more common form and the more favorable one for policyholders dealing with long-running schemes.
The catch is the reporting deadline. Most discovery-based policies require the insurer to be notified within 30 to 60 days of discovery, and a formal proof of loss typically must follow within four to six months. Miss those windows and the claim can be denied outright, even if the loss is real and well-documented.
Loss-Sustained Policies
A loss-sustained policy requires both the dishonest act and its discovery to occur during the policy period. If the theft happened before the policy started, it generally isn’t covered, unless the business has maintained continuous crime coverage without any lapse since the time the loss occurred. When a loss-sustained policy terminates, it usually provides an extension of up to one year for discovering and reporting losses that were sustained during the policy period.
A business switching from one insurer to another could face a gap if the new policy is loss-sustained and the old losses had not yet been discovered. Understanding which trigger your policy uses is one of the first things to check when buying or renewing coverage.
When Fidelity Coverage Is Required by Law
Fidelity coverage is not always optional. Federal law requires most employers that sponsor retirement plans or other employee benefit plans to secure fidelity bonds for anyone who handles plan funds or property. This requirement comes from ERISA Section 412, and it applies to plan fiduciaries, trustees, and anyone else with access to plan assets, not just senior management.
The bond amount must equal at least 10% of the plan funds handled in the preceding year, with a floor of $1,000 and a ceiling of $500,000. For plans that hold employer securities, such as company stock in a 401(k), the maximum increases to $1,000,000.1Office of the Law Revision Counsel. 29 USC 1112 – Bonding These amounts apply per plan, so an employer sponsoring multiple plans may need separate bonds or a single bond listing each plan with adequate coverage.
Certain entities are exempt. Plans that are completely unfunded, where benefits are paid directly from the employer’s general assets, do not need bonds. The same goes for governmental plans and church plans that aren’t subject to ERISA Title I. Regulated financial institutions such as banks authorized to exercise trust powers, insurance companies, and registered broker-dealers are also exempt, provided they meet the conditions specified in the statute.2U.S. Department of Labor. Protect Your Employee Benefit Plan With an ERISA Fidelity Bond
An ERISA fidelity bond is not the same as fiduciary liability insurance, though the two are frequently confused. The bond protects the plan itself against losses from fraud or dishonesty. Fiduciary liability insurance protects the fiduciary from lawsuits alleging breaches of their duties, such as poor investment decisions or failure to follow plan terms. Fiduciary liability insurance is not required by ERISA and does not satisfy the bonding requirement.2U.S. Department of Labor. Protect Your Employee Benefit Plan With an ERISA Fidelity Bond
Fidelity Insurance vs. Commercial Crime Insurance
Fidelity insurance covers one threat: dishonest employees. Commercial crime insurance covers that same threat plus crimes committed by outsiders, including burglary, robbery, forgery by non-employees, and in many policies, computer fraud and fraudulent funds transfers initiated by third parties. For businesses worried about both internal and external crime, a commercial crime policy provides broader protection under a single policy.
Neither product is a substitute for cyber liability insurance. A commercial crime policy might cover a fraudulent wire transfer triggered by a hacked email, but it generally will not cover data breach notification costs, regulatory fines, or the expense of restoring compromised systems. Businesses facing significant digital exposure typically need both a crime policy and a standalone cyber policy.
What the Policyholder Has to Do
Buying the policy is only the beginning. Fidelity insurers expect policyholders to maintain internal controls that reduce fraud risk and improve early detection. Specific requirements vary, but common expectations include separating financial duties so no single employee controls an entire transaction from start to finish, requiring dual authorization for large disbursements, conducting regular audits, and enforcing mandatory vacations for employees who handle funds. The vacation rule is a classic way to expose fraud that depends on one person’s continuous presence.
Failing to maintain these controls will not just increase premiums. It can give the insurer grounds to deny a claim. If the policy required segregation of duties and the company let one person handle both accounts payable and bank reconciliations, the insurer may argue the company created the conditions for the loss. Banks and financial institutions face particularly detailed expectations, and a bank with a history of losses may be required to accept a higher deductible as a condition for continued coverage.3Federal Deposit Insurance Corporation. Section 4.4 Fidelity and Other Indemnity Protection
Full disclosure on the application is equally important. Insurers evaluate risk based on past fraud incidents, existing security measures, and the financial roles within the organization. Misrepresenting or omitting material facts, such as a prior embezzlement loss, can void the entire policy. The application becomes part of the bond, and inaccurate answers give the insurer strong grounds for rescission.3Federal Deposit Insurance Corporation. Section 4.4 Fidelity and Other Indemnity Protection
Premium payments need to stay current. Most insurers offer annual or quarterly billing, and a missed payment can create a lapse with no grace period. Once coverage lapses, reinstating it may require a new application and fresh underwriting. Policyholders should also notify their insurer of significant operational changes, such as departmental restructuring, new financial systems, or major expansions, that could affect the risk profile.
How a Fidelity Claim Works
Speed and documentation are everything when filing a fidelity claim. The moment a business discovers employee dishonesty, the clock starts on reporting deadlines that most policies set at 30 to 60 days. The initial notice should identify the suspected employee, describe the nature of the fraud, and give a preliminary estimate of the loss amount. Most insurers require this notice in writing, often through a standardized claim form.
After the initial notification, the insurer will request documentation to substantiate the loss: bank statements, transaction records, audit reports, and any internal investigation findings. Businesses typically need to provide a sworn proof of loss that details how the fraud was discovered, what steps were taken to prevent further losses, and the total amount claimed. The deadline for submitting this formal proof of loss is usually four to six months from discovery, though the specific window depends on the policy.
Some claims require a forensic accounting review to verify the loss amount. This is especially common with complex schemes involving manipulated records or long time horizons. Forensic accountants typically charge $200 to $600 per hour, with senior specialists at large firms billing above that range. Whether the policyholder or the insurer pays for this work depends on the policy terms. The insurer then conducts its own investigation, which can take months depending on the complexity and the quality of available evidence.
If you discover fraud and plan to file a claim, talk to your insurer before entering into any agreements with the person responsible. Most policies require you to cooperate with the insurer’s efforts to recover from the employee after a payout, and settling privately or signing a release that waives claims against the employee can jeopardize your coverage.