Chubb holds a narrow lead over Travelers, earning frequent mentions for explicit social engineering fraud endorsements and crime coverage. For small law firms seeking liability protection, ALPS Insurance is the usual answer.
45% of citations point at the ranked brands’ own sites. americanbar.org, thecoylegroup.com, reddit.com are the most-cited sites outside the ranked brands’ own domains.
Several major commercial insurers offer cyber insurance policies that can cover social engineering fraud, including business email compromise (BEC), fake vendor invoices, and criminals impersonating executives to trick employees into transferring money. Some insurers include this protection in their cyber policies; others offer it through an endorsement or a separate crime/fidelity policy.
Here are the strongest starting points based on insurers' published coverage descriptions.
Insurers that offer social engineering fraud coverage
1. Chubb
(Cyber and crime coverage)
Chubb explicitly lists social engineering fraud as an available cyber-crime endorsement, covering situations where an employee is tricked into transferring money. Its crime insurance also offers protection against vendor, client, and executive impersonation. Published coverage limits for its dedicated social engineering endorsement start at up to $250,000 per occurrence, with higher limits potentially available subject to underwriting.
Coalition explicitly lists coverage for funds transfer fraud and social engineering, including financial losses from fraudulent instructions that result in unauthorized transfers. Its coverage descriptions also address invoice manipulation.
Official details:
3. Travelers
Travelers' CyberRisk materials specifically identify social engineering fraud as a coverage option and publish dedicated social engineering fraud supplemental applications. Availability and terms may vary by policy and customer type.
Official details:
4. The Hartford
The Hartford describes cyber-fraud coverage that can include social engineering, invoice manipulation, phishing, and business email compromise. Confirm the exact policy form and whether the protection applies to the particular payment scam you're concerned about.
Official details:
5. Beazley
Beazley's Full Spectrum Cyber and cyber coverage materials list fraudulent instruction and social engineering protection. Its commercial crime policy also covers certain fraudulent transfers prompted by impostors, subject to conditions such as out-of-band authentication.
AIG offers CyberEdge cyber insurance and separate Crime and Fidelity insurance that can address social engineering and impersonation fraud. Ask specifically whether the cyber policy covers voluntary transfers authorized by a deceived employee, or whether a crime policy is needed.
Don't rely on the words “cyber insurance” alone. Ask the broker to confirm these points in the actual policy wording:
Social engineering fraud: Does it cover an employee who is deceived into voluntarily sending money?
Business email compromise (BEC): Are fake CEO emails and compromised vendor accounts covered?
Invoice manipulation: Are fraudulent changes to supplier banking details covered?
Coverage limits: What are the per-claim and annual aggregate limits, and the deductible?
Verification requirements: Must the business independently verify payment instructions by phone or another channel?
Exclusions and conditions: Are there restrictions for impersonation, compromised email accounts, or failure to follow internal payment controls?
These distinctions matter because social engineering coverage can have separate sublimits and specific claim conditions, and coverage is not guaranteed for every fraud scenario.
My recommendation: Start by requesting quotes from Chubb, Coalition, Travelers, and Beazley, and compare the specific social engineering wording and limits rather than just the headline cyber policy limit.
If you tell me whether this is for a small business, a mid-sized company, or a large enterprise, and which country the business operates in, I can narrow the list to the most relevant insurers and policy options.
Providers that routinely include or offer social engineering fraud coverage within their cyber or crime forms include:
The Travelers Companies : Noted for integrating social engineering and phishing-related fraud protections directly into select CyberRisk policy forms.
Beazley : Offers robust cyber options and specialized high-limit excess policies addressing invoice manipulation and executive impersonation scams.
Hiscox : Provides small-business coverage that handles unauthorized transfers resulting from social engineering communications.
Zurich Insurance : Includes cyber fraud and social engineering protections often structured as part of their comprehensive modular cyber suites.
Chubb : Tailors first-party cyber stacks that can address digital deceptions and funds transfer fraud, subject to underwriting approval and specific security controls.
Important Considerations:
Sub-limits: While base cyber coverage might be in the millions, social engineering extensions are frequently sub-capped (commonly around $250,000 by default) unless you request and pay for higher limits.
If you're looking for business cyber insurance that specifically covers social engineering fraud, I'd start with Hiscox, Chubb, Travelers, Coalition, and The Hartford. These are good candidates to compare, but the key is confirming that the actual policy covers fraudulent payments made by an employee who has been deceived—not just data breaches, ransomware, or unauthorized computer access.
Social engineering coverage can be especially important for business email compromise (BEC), fake vendor invoices, fraudulent wire-transfer instructions, and scams involving someone impersonating an executive. It may be included, offered by endorsement, or subject to a separate limit.
Providers to contact
1. Hiscox
(First quote to request)
A strong starting point for small businesses concerned about phishing, invoice manipulation and fraudulent transfers. A 2026 comparison ranks Hiscox highly for cybercrime and social engineering protection; confirm the precise coverage and limits available for your business.
Website:
2. Chubb
Chubb explicitly offers social engineering fraud protection through its cyber and crime insurance products. Its crime policy endorsement addresses impersonation of vendors, executives and clients, including some schemes conducted by phone or in person. The published endorsement describes coverage up to $250,000 per occurrence, with higher limits potentially available subject to underwriting.
Official details:
3. Travelers
Offers CyberRisk insurance and has a dedicated social engineering fraud supplement for applicants. It is worth requesting a quote that explicitly includes the relevant fraud coverage rather than assuming it is automatically part of the base policy.
Official details:
4. Coalition
Worth comparing if you want insurance paired with cybersecurity monitoring and risk-management services. A recent small-business comparison rates its cybercrime coverage favorably, but verify whether social engineering losses are included in your specific quote and what sublimits apply.
Website:
5. The Hartford
Another option to solicit a quote from. The Hartford describes coverage for social engineering fraud and funds-transfer fraud alongside broader cybercrime protection. Ask for the applicable policy wording and limits.
Official details:
What to verify before buying
Don't compare these policies on the headline cyber limit alone. Ask each insurer or broker to confirm the following in writing:
Social engineering fraud: Does it cover money an employee voluntarily sends after being deceived by a fake vendor, CEO or supplier?
Wire-transfer and invoice fraud: Are fraudulent bank-detail changes and business email compromise covered?
Coverage limit: What is the specific social engineering sublimit per claim and in total per policy year?
Verification requirements: Must employees independently verify payment instructions or bank-account changes?
AI and deepfake impersonation: Are voice-cloning and AI-generated impersonation scams covered, or excluded?
Crime policy versus cyber policy: Would you need a separate crime/fidelity policy or an endorsement to get the protection you need?
These distinctions matter because some policies exclude voluntary transfers or impose much lower fraud limits than the main cyber insurance limit.
I can narrow this to the best options for you
One important question: Are you buying insurance for a business or for personal/family protection?
If it's for a business, tell me what industry you're in and roughly how many employees you have. I can then narrow the list to the most relevant providers and help you identify which ones explicitly address social engineering fraud in their policy terms.
Prominent insurance carriers offering provisions or extensions for social engineering fraud include:
Travelers — Includes social engineering fraud provisions within specialized CyberRisk plans (especially tailored for tech and public entities), responding to deceptive phishing and spear-phishing tactics that trick employees into voluntary fund transfers.
Beazley — Provides extensive cyber and crime protection, including targeted excess and primary options designed to cover impersonation and social engineering scams where fraudsters manipulate staff into wiring funds.
Zurich — Offers robust cyber solutions where social engineering and cyber fraud can be integrated or added via specific policy endorsements alongside core first-party coverages.
— Features comprehensive small-business cyber policies that account for electronic identity fraud and associated financial deception risks.
Key Considerations When Buying This Coverage
Sub-limits: Standard social engineering limits are often capped between $100,000 and $250,000, even if your overall cyber policy limit is in the millions. Higher limits usually require additional underwriting and premium.
Several cyber insurance policies offer protection for social engineering fraud, where an employee is tricked into transferring money, changing vendor payment details, or disclosing funds in response to a fraudulent email, phone call, or impersonation scheme.
The key distinction is that not every cyber policy automatically covers social engineering losses. Coverage may be included, added by endorsement, or available only with a separate sublimit and specific conditions.
Below is a shortlist of insurers and cyber insurance products worth evaluating, particularly for U.S. businesses.
Cyber insurance options with social engineering fraud coverage
These are established insurers with public product information confirming social engineering or fraudulent-instruction coverage. The precise coverage, limits, and availability depend on the policy form and underwriting.
1. Coalition — Cyber insurance
(Cyber policy option)
Coalition explicitly lists coverage for funds transfer fraud and social engineering, including fraudulent instructions that result in a transfer of funds. It also lists invoice manipulation coverage.
Best to investigate if you want social engineering protection as part of a cyber-focused insurance program.
Travelers: Known for specialized small-to-midsize business cyber packages that specifically factor in social engineering and phishing vulnerabilities.[](https://www.security.org/insurance/cyber/best/)
AIG: Features extensive enterprise-grade cyber solutions (CyberEdge ) suitable for larger operations or organizations requiring high coverage ceilings.[](https://www.security.org/insurance/cyber/best/)
Chubb lists social engineering fraud as an available cyber crime endorsement. Its separate crime insurance offerings also address vendor, supplier, client, and executive impersonation. Its published crime endorsement describes coverage up to $250,000 per occurrence, with higher limits potentially available through underwriting. That figure should not be assumed to apply to every Chubb cyber policy.
Best to investigate if you need both cyber coverage and a dedicated crime insurance solution.
Travelers provides specific social engineering fraud supplements for its CyberRisk product. Its public-sector cyber offering explicitly lists social engineering fraud among its cyber crime insuring agreements. Confirm the corresponding coverage for your business's policy form.
Best to investigate if you need a traditional commercial cyber policy with a specifically documented fraud coverage option.
Official details:
4. Zurich — Cyber Insurance Policy, Concierge Suite
Zurich's Concierge Suite for small and midsized firms explicitly offers supplemental insuring agreements for social engineering fraud. Zurich also has a separate cyber policy for large and global companies, so ask for the relevant wording and endorsement for your size of business.
Best to investigate if you want cyber coverage combined with breach response and risk engineering services.
Official details:
5. AXA XL — CyberRiskConnect
AXA XL lists social engineering as an available enhancement to its North American cyber and technology insurance program. Its product materials also identify invoice manipulation and funds transfer fraud as cyber crime exposures.
Best to investigate if you need customizable cyber and technology insurance, including for professional services or technology businesses.
Official details:
6. The Hartford — Cyber Crime Insurance
The Hartford explicitly describes social engineering, invoice manipulation, business email compromise, and funds transfer fraud as potential cyber fraud coverage features. Confirm which apply to the quote and policy being offered.
Best to investigate if you want to compare a commercial cyber fraud option with broader business insurance arrangements.
Official details:
7. Sompo — Cyber and Network Risk
Sompo lists social engineering and fraudulent instructions as coverage available by endorsement.
Best to investigate if you're comparing specialty commercial cyber insurance programs and can obtain the applicable endorsement wording.
Official details:
Additional option: standalone crime insurance
If the main concern is recovering money lost to fraudulent wires or impersonation, don't limit the search to cyber insurance. A commercial crime policy with social engineering or fraudulent instruction coverage can be a stronger fit for some businesses.
Two additional providers to consider:
Beazley — Commercial Crime: Its published U.S. materials describe fraudulent-instruction coverage for transfers prompted by impersonation of a vendor, client, or authorized employee. The stated limit can reach $25 million, subject to underwriting and policy terms; out-of-band authentication requirements may apply. axaxl.comaxaxl.comwww.cyber.beazley.com.
Berkley Crime — Standalone Social Engineering Fraud Policy: Berkley advertises a standalone policy covering money and securities lost through schemes involving people posing as vendors, customers, or employees. www.berkleycrime.com.
What to compare before selecting a policy
The insurer's name alone is not enough. Ask your broker to compare these terms across the actual quotes:
Coverage feature
What to verify
Social engineering fraud
Is it included, or does it require an endorsement?
Vendor impersonation
Are fake invoices and changed payment instructions covered?
Executive impersonation
Are fraudulent CEO/CFO instructions covered?
Verification requirements
Must the employee independently verify payment instructions by phone or another channel?
Coverage limit
What is the per-claim limit and annual aggregate?
Voluntary parting exclusion
Is there an express exception for an employee deceived into sending funds?
Deductible and retention
How much does the business pay before insurance responds?
Payment recovery
Must you contact the bank immediately or exhaust recovery efforts first?
Coverage overlap
Does cyber insurance pay first, or is crime insurance primary?
My suggested starting shortlist: Coalition, Chubb, Travelers, Zurich, and AXA XL for cyber policies; Beazley and Berkley for crime-focused alternatives. This is a shortlist for obtaining quotes, not a ranking of claim-paying performance or policy quality.
One important point: a policy that covers unauthorized hacking or funds transfer fraud may still exclude a payment that an employee voluntarily authorized because of deception. Get written confirmation that the exact scenario you are worried about is covered.
I can narrow this down for your business
What type of business are you insuring, and approximately how much social engineering coverage do you need? For example, a small business seeking $250,000 in protection may have a different set of suitable options than a large company seeking $5 million or more.
