Several major insurance companies offer cyber insurance or commercial crime policies that can cover social engineering fraud, including business email compromise (BEC), fraudulent wire transfers, vendor impersonation, and invoice-redirection scams.
The important distinction is that social engineering fraud is not automatically covered by every cyber insurance policy. You may need a specific endorsement, and coverage limits can be substantially lower than the policy's headline limit.
Insurance companies to consider
Here are some providers to approach in the U.S., based on their published coverage offerings.
Offers social engineering fraud protection through both cyber insurance endorsements and commercial crime insurance. Published examples include executive, vendor, and client impersonation. Its crime-policy offering lists coverage up to $250,000 per occurrence, with higher limits subject to underwriting.
Explicitly advertises social engineering and invoice manipulation coverage as available for all classes of business. A good candidate to ask about fraudulent payment instructions and vendor-payment scams.
Offers social engineering as an available enhancement to its cyber and technology insurance policies. Ask about applicable sublimits and whether an employee-authorized transfer is covered.
Offers cyber crime and fraud insurance options addressing social engineering, invoice manipulation, phishing, and certain funds-transfer fraud scenarios. Exact protection depends on the policy and endorsements.
Publishes dedicated social engineering fraud supplements for its CyberRisk product, making it another carrier worth approaching through a commercial insurance agent.
Hiscox — identified in a 2026 comparison as a strong option for small-business cybercrime coverage, including social engineering and funds-transfer fraud.
Chubb ForeFront — its commercial insurance portfolio includes social engineering fraud coverage for executive, supplier, and client impersonation, including some forms of impersonation outside email.
What to ask before purchasing
When requesting quotes, ask each insurer or broker to confirm these points in writing:
Voluntary-transfer fraud: Does coverage apply when an employee is tricked into authorizing a wire transfer?
Business email compromise: Are fraudulent vendor emails, altered invoices, and compromised executive accounts covered?
Impersonation by phone or deepfake: Does coverage extend beyond email?
Limits and deductibles: What are the per-incident and annual aggregate limits specifically for social engineering?
Verification requirements: Must employees independently verify new bank details or payment instructions?
Crime versus cyber policy: Would a commercial crime policy with a social engineering endorsement provide stronger protection than the cyber policy alone?
These distinctions matter because a policy may cover the cost of investigating a cyber incident while excluding the money transferred to the fraudster.
One question that would help me narrow this down: Are you looking for coverage for a small business, a larger company, or a nonprofit—and is your main concern fraudulent wire transfers/vendor impersonation or phishing and other social engineering losses?
Carriers known to provide social engineering fraud coverage within or alongside their cyber offerings include:
Travelers CyberRisk – Features dedicated social engineering fraud coverage provisions designed to protect businesses against phishing and spear-phishing scams that manipulate employees.
Zurich Cyber Solution – Offers cyber fraud and social engineering as an optional endorsement within its modular first- and third-party cyber policy structures.
Beazley plc – Provides expanded excess and specialty cyber liability lines that address impersonation and social engineering wire-transfer scams.
Hiscox Cyber Insurance – Covers specific scenarios involving the unauthorized transfer of money or property following social engineering communications like targeted phishing attacks.
Chubb Cyber Insurance – Tailors comprehensive cyber risk stacks that frequently incorporate specialized extensions for social engineering fraud targeting vendors and employees.
AmTrust Insurance – Provides integrated commercial crime and cyber liability options that account for human error and social engineering sublimits.[]()
If you'd like to narrow this down, please let me know:
The approximate annual revenue of the business
Whether you are looking for a standalone cyber policy or an endorsement bundled with crime/liability
I can help you figure out what coverage limits make the most sense.
If you're looking for business cyber insurance that specifically covers social engineering fraud, I'd start with Hiscox, Chubb, Travelers, Coalition, and The Hartford. These are good candidates to compare, but the key is confirming that the actual policy covers fraudulent payments made by an employee who has been deceived—not just data breaches, ransomware, or unauthorized computer access.
Social engineering coverage can be especially important for business email compromise (BEC), fake vendor invoices, fraudulent wire-transfer instructions, and scams involving someone impersonating an executive. It may be included, offered by endorsement, or subject to a separate limit.
Providers to contact
1. Hiscox
(First quote to request)
A strong starting point for small businesses concerned about phishing, invoice manipulation and fraudulent transfers. A 2026 comparison ranks Hiscox highly for cybercrime and social engineering protection; confirm the precise coverage and limits available for your business.
Website:
2. Chubb
Chubb explicitly offers social engineering fraud protection through its cyber and crime insurance products. Its crime policy endorsement addresses impersonation of vendors, executives and clients, including some schemes conducted by phone or in person. The published endorsement describes coverage up to $250,000 per occurrence, with higher limits potentially available subject to underwriting.
Official details:
3. Travelers
Offers CyberRisk insurance and has a dedicated social engineering fraud supplement for applicants. It is worth requesting a quote that explicitly includes the relevant fraud coverage rather than assuming it is automatically part of the base policy.
Official details:
4. Coalition
Worth comparing if you want insurance paired with cybersecurity monitoring and risk-management services. A recent small-business comparison rates its cybercrime coverage favorably, but verify whether social engineering losses are included in your specific quote and what sublimits apply.
Website:
5. The Hartford
Another option to solicit a quote from. The Hartford describes coverage for social engineering fraud and funds-transfer fraud alongside broader cybercrime protection. Ask for the applicable policy wording and limits.
Official details:
What to verify before buying
Don't compare these policies on the headline cyber limit alone. Ask each insurer or broker to confirm the following in writing:
Social engineering fraud: Does it cover money an employee voluntarily sends after being deceived by a fake vendor, CEO or supplier?
Wire-transfer and invoice fraud: Are fraudulent bank-detail changes and business email compromise covered?
Coverage limit: What is the specific social engineering sublimit per claim and in total per policy year?
Verification requirements: Must employees independently verify payment instructions or bank-account changes?
AI and deepfake impersonation: Are voice-cloning and AI-generated impersonation scams covered, or excluded?
Crime policy versus cyber policy: Would you need a separate crime/fidelity policy or an endorsement to get the protection you need?
These distinctions matter because some policies exclude voluntary transfers or impose much lower fraud limits than the main cyber insurance limit.
I can narrow this to the best options for you
One important question: Are you buying insurance for a business or for personal/family protection?
If it's for a business, tell me what industry you're in and roughly how many employees you have. I can then narrow the list to the most relevant providers and help you identify which ones explicitly address social engineering fraud in their policy terms.
Prominent insurance carriers offering provisions or extensions for social engineering fraud include:
Travelers — Includes social engineering fraud provisions within specialized CyberRisk plans (especially tailored for tech and public entities), responding to deceptive phishing and spear-phishing tactics that trick employees into voluntary fund transfers.
Beazley — Provides extensive cyber and crime protection, including targeted excess and primary options designed to cover impersonation and social engineering scams where fraudsters manipulate staff into wiring funds.
Zurich — Offers robust cyber solutions where social engineering and cyber fraud can be integrated or added via specific policy endorsements alongside core first-party coverages.
— Features comprehensive small-business cyber policies that account for electronic identity fraud and associated financial deception risks.
Key Considerations When Buying This Coverage
Sub-limits: Standard social engineering limits are often capped between $100,000 and $250,000, even if your overall cyber policy limit is in the millions. Higher limits usually require additional underwriting and premium.
Several cyber insurance policies offer protection for social engineering fraud, where an employee is tricked into transferring money, changing vendor payment details, or disclosing funds in response to a fraudulent email, phone call, or impersonation scheme.
The key distinction is that not every cyber policy automatically covers social engineering losses. Coverage may be included, added by endorsement, or available only with a separate sublimit and specific conditions.
Below is a shortlist of insurers and cyber insurance products worth evaluating, particularly for U.S. businesses.
Cyber insurance options with social engineering fraud coverage
These are established insurers with public product information confirming social engineering or fraudulent-instruction coverage. The precise coverage, limits, and availability depend on the policy form and underwriting.
1. Coalition — Cyber insurance
(Cyber policy option)
Coalition explicitly lists coverage for funds transfer fraud and social engineering, including fraudulent instructions that result in a transfer of funds. It also lists invoice manipulation coverage.
Best to investigate if you want social engineering protection as part of a cyber-focused insurance program.
Travelers: Known for specialized small-to-midsize business cyber packages that specifically factor in social engineering and phishing vulnerabilities.[](https://www.security.org/insurance/cyber/best/)
AIG: Features extensive enterprise-grade cyber solutions (CyberEdge ) suitable for larger operations or organizations requiring high coverage ceilings.[](https://www.security.org/insurance/cyber/best/)
Chubb lists social engineering fraud as an available cyber crime endorsement. Its separate crime insurance offerings also address vendor, supplier, client, and executive impersonation. Its published crime endorsement describes coverage up to $250,000 per occurrence, with higher limits potentially available through underwriting. That figure should not be assumed to apply to every Chubb cyber policy.
Best to investigate if you need both cyber coverage and a dedicated crime insurance solution.
Travelers provides specific social engineering fraud supplements for its CyberRisk product. Its public-sector cyber offering explicitly lists social engineering fraud among its cyber crime insuring agreements. Confirm the corresponding coverage for your business's policy form.
Best to investigate if you need a traditional commercial cyber policy with a specifically documented fraud coverage option.
Official details:
4. Zurich — Cyber Insurance Policy, Concierge Suite
Zurich's Concierge Suite for small and midsized firms explicitly offers supplemental insuring agreements for social engineering fraud. Zurich also has a separate cyber policy for large and global companies, so ask for the relevant wording and endorsement for your size of business.
Best to investigate if you want cyber coverage combined with breach response and risk engineering services.
Official details:
5. AXA XL — CyberRiskConnect
AXA XL lists social engineering as an available enhancement to its North American cyber and technology insurance program. Its product materials also identify invoice manipulation and funds transfer fraud as cyber crime exposures.
Best to investigate if you need customizable cyber and technology insurance, including for professional services or technology businesses.
Official details:
6. The Hartford — Cyber Crime Insurance
The Hartford explicitly describes social engineering, invoice manipulation, business email compromise, and funds transfer fraud as potential cyber fraud coverage features. Confirm which apply to the quote and policy being offered.
Best to investigate if you want to compare a commercial cyber fraud option with broader business insurance arrangements.
Official details:
7. Sompo — Cyber and Network Risk
Sompo lists social engineering and fraudulent instructions as coverage available by endorsement.
Best to investigate if you're comparing specialty commercial cyber insurance programs and can obtain the applicable endorsement wording.
Official details:
Additional option: standalone crime insurance
If the main concern is recovering money lost to fraudulent wires or impersonation, don't limit the search to cyber insurance. A commercial crime policy with social engineering or fraudulent instruction coverage can be a stronger fit for some businesses.
Two additional providers to consider:
Beazley — Commercial Crime: Its published U.S. materials describe fraudulent-instruction coverage for transfers prompted by impersonation of a vendor, client, or authorized employee. The stated limit can reach $25 million, subject to underwriting and policy terms; out-of-band authentication requirements may apply. axaxl.comaxaxl.comwww.cyber.beazley.com.
Berkley Crime — Standalone Social Engineering Fraud Policy: Berkley advertises a standalone policy covering money and securities lost through schemes involving people posing as vendors, customers, or employees. www.berkleycrime.com.
What to compare before selecting a policy
The insurer's name alone is not enough. Ask your broker to compare these terms across the actual quotes:
Coverage feature
What to verify
Social engineering fraud
Is it included, or does it require an endorsement?
Vendor impersonation
Are fake invoices and changed payment instructions covered?
Executive impersonation
Are fraudulent CEO/CFO instructions covered?
Verification requirements
Must the employee independently verify payment instructions by phone or another channel?
Coverage limit
What is the per-claim limit and annual aggregate?
Voluntary parting exclusion
Is there an express exception for an employee deceived into sending funds?
Deductible and retention
How much does the business pay before insurance responds?
Payment recovery
Must you contact the bank immediately or exhaust recovery efforts first?
Coverage overlap
Does cyber insurance pay first, or is crime insurance primary?
My suggested starting shortlist: Coalition, Chubb, Travelers, Zurich, and AXA XL for cyber policies; Beazley and Berkley for crime-focused alternatives. This is a shortlist for obtaining quotes, not a ranking of claim-paying performance or policy quality.
One important point: a policy that covers unauthorized hacking or funds transfer fraud may still exclude a payment that an employee voluntarily authorized because of deception. Get written confirmation that the exact scenario you are worried about is covered.
I can narrow this down for your business
What type of business are you insuring, and approximately how much social engineering coverage do you need? For example, a small business seeking $250,000 in protection may have a different set of suitable options than a large company seeking $5 million or more.
