Tax-season fraud: the accounting firm cyber claim that isn't ransomware
Accounting firms over-prepare for ransomware. The annual claim that actually arrives is tax-season fraud — fake client emails, redirected refunds, and credential theft at scale.
Funds-transfer fraud, employee dishonesty and forgery — bound with the explicit social-engineering language that actually responds when the wire goes to the wrong account.
Crime insurance covers losses from fraud and theft against your business — funds-transfer fraud, employee dishonesty, forgery and computer fraud. It's the policy that most reliably hits the bank account when something goes wrong, and it overlaps heavily with cyber in modern claims.
Funds-transfer fraud — fake vendor invoices, spoofed CEO email, redirected wires — is now the single largest first-dollar commercial loss for most operators. Crime cover with explicit social-engineering language is what actually responds.
Employee dishonesty is older than the wire-fraud problem but no less real. Crime cover defends and pays for theft, embezzlement and forgery by employees with system or asset access.
Property managers, RIAs, non-profits and law firms all hold client money. Crime cover for funds held in trust is critical — and lender or grantor requirements often make it mandatory.
Most firms only buy crime properly after the first close call. The wording matters: social-engineering fraud is sub-limited or excluded in many forms unless explicitly added.
Wire fraud, fake-vendor invoices, CEO impersonation and email compromise — bound with explicit social-engineering coverage rather than a sub-limit.
Theft, embezzlement and forgery by employees with access to assets, accounts or financial systems — including former employees within the policy period.
Loss from forged or altered checks, drafts and other written instruments — including counterfeit currency in some forms.
Loss of money, securities or property from computer-system intrusion, plus loss from accepting counterfeit money orders or currency.
Crime covers losses to your business. Theft of customers' money typically sits with cyber liability or professional liability, depending on cause.
Crime requires loss tied to a specific theft event. Generic shrinkage with no traceable cause is excluded.
Most crime forms require discovery during the policy period — though many include a discovery extension. We bind forms that protect long discovery windows where relevant.
Crime and funds-transfer fraud sized to AUM and the dollars moving through the firm.
See the pageWire-fraud cover for closings, rent and vendor payments — the largest cyber/crime claim in real estate.
See the pageCrime cover for donor funds and finance email compromise — increasingly required by funders.
See the pageCrime with social-engineering paired with cyber and contingent BI for client and own-firm exposure.
See the pageWire-fraud and vendor-impersonation cover for construction draws and supplier payments.
See the pageCrime cover for client funds, trust accounts and finance-team email compromise.
See the pageMost package crime sub-limits social engineering to $50k or $100k — far below typical loss. We bind primary social-engineering limits sized to the dollars moving through your firm.
Crime and cyber overlap heavily in modern claims. We bind them so the policies overlap correctly, not so there's a gap or a fight over which one responds.
Property managers, RIAs and non-profits all need specific forms for funds held in trust or fiduciary capacity. We place the right form, not a generic commercial crime policy.
Accounting firms over-prepare for ransomware. The annual claim that actually arrives is tax-season fraud — fake client emails, redirected refunds, and credential theft at scale.
Law firms hold meaningful client money in IOLTA and trust accounts. The crime / fidelity cover on that money is often sub-limited to a token amount.
Wire-fraud losses are now the largest single cyber claim in real estate. Most crime policies sub-limit or exclude the exact scenario that creates them.
Tell us about your firm and the kind of money moving through it. We'll bind crime with primary social-engineering limits sized to your actual exposure, layered properly with cyber.