---
title: Social Engineering Fraud Coverage
description: Have you ever had to stop and ask yourself if this email, text message, or online website was actually real and not a scam? Welcome to Social Engineering!
image: https://blog.clarkeandsampson.com/hubfs/SocialEngineering-542872-edited.jpg
---

- [** ](https://twitter.com/clarkesampson)
- [** ](https://www.linkedin.com/company/clarke-%26-sampson-inc)
- [** ](https://www.facebook.com/clarkeandsampson)

[**703-683-6601](tel:17036836601) [     Client Portal](https://portal.csr24.com/mvc/6601690)

[![clarke&sampson](https://blog.clarkeandsampson.com/hubfs/Clarkeandsampson_November2018%20Theme/images/logo.png "clarke&sampson")](http://www.clarkeandsampson.com/)

- [** ](https://twitter.com/clarkesampson)
- [** ](https://www.linkedin.com/company/clarke-%26-sampson-inc)
- [** ](https://www.facebook.com/clarkeandsampson)

[**703-683-6601](tel:17036836601) [     Client Portal](https://portal.csr24.com/mvc/6601690)

# Clarke & Sampson Blog

# Social Engineering Fraud Coverage

Matt Stephens  | Friday, May 1, 2020

 Share | Facebook Twitter [Email ](mailto:?body=https://blog.clarkeandsampson.com/blog/social-engineering-fraud-coverage)

![SocialEngineering-542872-edited.jpg](https://blog.clarkeandsampson.com/hs-fs/hubfs/SocialEngineering-542872-edited.jpg?width=166&name=SocialEngineering-542872-edited.jpg)Social engineering fraud (SEF) is a type of fraud that’s become increasingly common over the last several years. However, even though many instances of this fraud transpire over email communications, it’s a company’s crime policy—not a cyber policy—that would often provide coverage in the event of an SEF loss.

That’s why it’s especially important to understand your crime policy, how it might cover SEF, why it might not, and what endorsements you might want to obtain to make sure SEF doesn’t leave your company exposed.

 

Cyber Policy vs. Crime Policy

It may seem counterintuitive, but SEF is usually **not **covered by a cyber policy. Even though this fraud often involves emails and wire transfers, cyber policies are not designed to cover them:

- **Cyber policies** cover losses that result from unauthorized data breaches or system failures. SEF actually depends on these systems working correctly in order to communicate with an organization’s employees and transfer information or funds.
- **Crime policies **cover losses that result from theft, fraud or deception. Because the underlying cause of a loss in SEF is **fraud, **a company would claim a loss under its crime policy rather than its cyber policy.

 

How Social Engineering Fraud Works

There are a number of variations on the theme, but most instances of SEF involve the following elements:

- **A targeted approach**. Criminals will research their targets, purchase authentic-looking domains, manufacture email chains and even resort to making phone calls, all in an effort to make their requests seem authentic.
- **A request. **The preparation is in service of obtaining something from the target, either money (usually in the form of a wire transfer) or information (such as a list of vendors, W-2 information, routing numbers, etc.).
- **The application of social pressure.** In order to bypass in-house safeguards and redundancies, the criminals apply pressure by imposing a time constraint, demanding secrecy or simply flattering the ego of the target by including him or her “in” on an important business transaction.
- **The disappearance of the hacker.** Once the criminals obtain what they want, they disappear with the information or money—things that the company won’t miss until it’s too late.

Areas of Cover

A standard crime or fidelity policy contains a few provisions under which an SEF claim might be filed:

- **Computer fraud**. This refers to losses stemming from the unlawful theft of money due to a “computer violation”—that is, the unauthorized entry into or deletion of data from a computer system by a third party.
- **Funds transfer fraud.** This refers to losses stemming from fraudulent instructions to transfer funds made without the insured’s knowledge or consent.

Potential Vulnerabilities

Depending upon the specific language and definitions laid out in the crime or fidelity policy, the insurer might argue that SEF is excluded from coverage for a number of reasons:

- **There was no “computer violation.” **Often, SEF doesn’t involve compromising network security in order to steal data. Instead, criminals “hack” human vulnerabilities in order to gain access. Because the system functioned as it was supposed to, and the criminal gained access due to human failure, an insurer might try to deny the claim.
- **The insured knew about and consented to the transfer. **Again, it depends on the specific language of the policy, but an insurer might argue that a SEF isn’t covered under “funds transfer fraud.” That’s because, in most social engineering scenarios, some agent of the insured willingly and knowingly authorized the transfer of funds to the intended account. Again, in SEF, the systems in place to transfer funds worked as intended; it was a human failure that resulted in the loss.
- **The voluntary parting exclusion.** Most crime policies have a voluntary parting exclusion that excludes coverage for losses that result from anyone acting on the insured’s authority to part with title to or possession of property. In other words, because the employee knowingly and willingly authorized the transfer, it wouldn’t be covered.

Social Engineering Fraud Endorsements

Because of this potential gap in coverage, some carriers have started offering SEF endorsements to their crime and fidelity policies. The insurance agreements might go by different names, but they’re all intended to make limits and liabilities explicit for both the insured and the policy issuer.

These endorsements are only offered by a handful of carriers, but with the increasing prevalence of SEF, more are likely to follow. To learn more about SEF, we have resources available for you. Ask about our “Risk Insights: Social Engineering” as well as “Risk Insights: The Fake President Fraud.”

And, to discuss your coverage options and learn what options are available to you, contact Clarke & Sampson, Inc. today **703.683.6601**. Or click the button below to fill out a online contact form! 

[![Contact Us](https://no-cache.hubspot.com/cta/default/289889/5cb3c608-dddc-4607-ae3b-a0869c773743.png)](https://cta-redirect.hubspot.com/cta/redirect/289889/5cb3c608-dddc-4607-ae3b-a0869c773743)

 Share | Facebook Twitter [Email ](mailto:?body=https://blog.clarkeandsampson.com/blog/social-engineering-fraud-coverage)

#### Contact

Clarke & Sampson, Inc

Office: 703-683-6601

Fax: 703-739-8967

228 S.Washington St. Ste. 200

Alexandria, VA 22314

[Send an Email](mailto:sjefferson@clarkeandsampson.com)

- [** ](https://www.facebook.com/clarkeandsampson)
- [** ](https://twitter.com/clarkesampson)
- [** ](https://www.linkedin.com/company/clarke-%26-sampson-inc)

The content is developed from sources believed to be providing accurate information. The information in this material is not intended as tax or legal advice. Please consult legal or tax professionals for specific information regarding your individual situation. Some of this material was developed and produced by Agency Revolution to provide information on a topic that may be of interest. Agency Revolution is not affiliated with the named representative, broker-dealer, state- or SEC-registered investment advisory firm. The opinions expressed and material provided are for general information, and should not be considered a solicitation for the purchase or sale of any security.

Copyright 2018 Agency Revolution.

[Privacy Statement](http://www.clarkeandsampson.com//legal) | [Contact Us](http://www.clarkeandsampson.com/contact-us)

![Trusted Choice](https://blog.clarkeandsampson.com/hubfs/Clarkeandsampson_November2018%20Theme/images/1.jpg)  ![Independent Insurance Agent](https://blog.clarkeandsampson.com/hubfs/Clarkeandsampson_November2018%20Theme/images/2.jpg)  ![PIA](https://blog.clarkeandsampson.com/hubfs/Clarkeandsampson_November2018%20Theme/images/3.jpg)  ![Google](https://blog.clarkeandsampson.com/hubfs/Clarkeandsampson_November2018%20Theme/images/4.png) 