Data as of Oct 7, 2026A topic in Cyber and Professional Liability Insurance.
Reviewed by Dimitry Apollonsky
ChatGPT SearchOct 7, 2026
Yes. I found several U.S. insurers that explicitly offer social-engineering fraud / business-email-compromise (BEC) coverage in connection with cyber or crime policies.
| Insurer | How social engineering is covered | Notable point |
|---|---|---|
| Chubb | Cyber-crime coverage can include social-engineering fraud; Chubb also offers a dedicated social-engineering endorsement under Crime Insurance. | Covers scenarios such as vendor, executive, and client impersonation. |
I need a cyber insurance policy that includes protection against social engineering fraud. Can you point me toward providers?
Can you list cyber insurance options that have a provision for social engineering fraud?
| Cyber Crime coverage includes Funds Transfer Fraud and Social Engineering. |
| Specifically addresses fraudulent instructions resulting in transfer of funds. |
| Travelers | CyberRisk has dedicated Social Engineering Fraud supplements/forms. | Strong indication this is an established component of its CyberRisk underwriting. |
| Beazley | Commercial Crime policy includes fraudulent instruction coverage for social-engineering losses. | Limits advertised up to $25M; out-of-band authentication is normally required, with potential removal for strong documented controls. |
| At-Bay | Cyber policies offer Social Engineering & Invoice Manipulation coverage. | Available across all classes of business, according to At-Bay. |
| Zurich Insurance Group | Cyber policy includes supplemental insuring agreements for social-engineering fraud. | Explicitly covers fraudulent payments/manipulation of employees. |
| Hiscox | Optional cyber-crime enhancement can cover social engineering, reverse social engineering, and fraudulent funds transfer. | Particularly relevant for small businesses. |
| AIG | Crime/Fidelity coverage includes social engineering/impersonation fraud. | Specifically contemplates impostors posing as executives, employees, or business partners to transfer funds. |
| The Hartford | Cyber fraud/theft coverage includes social engineering, invoice manipulation, BEC/phishing, and funds-transfer fraud. | Hartford explicitly lists social-engineering fraud as a covered feature. |
Don't assume a standard cyber policy automatically covers a fraudulent wire. Social-engineering losses are frequently handled through a specific endorsement, a cyber-crime section, or a separate crime/fidelity policy. They can also have substantially lower sublimits than the policy's overall cyber limit.
For example, an employee receiving a fake vendor email and voluntarily wiring $250,000 is materially different from a hacker actually breaking into the company's system and initiating an unauthorized transfer. The former is classic social-engineering/payment-instruction fraud; the latter may fall under computer-fraud or funds-transfer coverage.
Also pay close attention to verification requirements. Some policies require the insured to have followed a documented callback or other out-of-band verification procedure before the fraudulent payment.
If you're shopping for this coverage, I'd prioritize asking the broker for these exact terms:
If you tell me your business size/industry and the amount of coverage you want (e.g. $250K, $1M, $5M), I can narrow this to the insurers most likely to fit and compare their social-engineering limits, deductibles, and verification requirements.
Chubb, Travelers, Hiscox, and AmTrust Financial are among the leading providers that offer social engineering fraud coverage under specialized cyber insurance policies or through cyber crime endorsements.
Navigating how these policies work requires a close look at policy structures, standard limits, and carrier requirements, as social engineering is rarely covered without specific conditions.
| Insurance Provider / Aspect | Coverage Details & Typical Limits |
|---|---|
| Chubb Cyber Insurance | Offers business and personal plans (via Masterpiece) covering fraudulently induced money transfers and social engineering. |
| Standard Sublimits | Typically capped between $50,000 and $250,000 per incident, requiring higher premiums for expanded limits. |
| Endorsement Dependency | Often structured as an optional "Cyber Crime" or "Social Engineering" endorsement rather than standard baseline protection. |
| Dual Policy Strategy | Frequently paired with a Commercial Crime Policy to cover gaps where a data breach is absent. |
Carriers will routinely deny social engineering claims if specific risk-mitigation protocols are not active during the time of the fraud. You must typically maintain:
If you'd like, share your industry and approximate annual revenue , and I can help you estimate what level of social engineering sublimit or crime endorsement your business might need.
