Funds Transfer Fraud

Funds transfer fraud coverage responds when a criminal fraudulently instructs the insured's bank — impersonating the insured through forged, altered, or fraudulent instructions — to transfer money from the insured's account without its knowledge or consent. It is found in both crime policies and the crime module of cyber liability forms. The defining feature is that the bank is deceived directly: the fraudster sends what appears to be a legitimate transfer request, and the funds leave the account before anyone at the insured authorizes it.

For a small-business buyer, this coverage matters because business bank accounts do not carry the consumer protections individuals enjoy, so a successful fraudulent wire can permanently drain operating cash. As criminals increasingly compromise email and vendor communications, funds transfer fraud has become one of the most common and costly cyber-crime losses businesses face. The coverage restores the stolen funds up to its limit, letting a company survive an event that could otherwise be existential. Buyers should note how it differs from — and often pairs with — social engineering fraud, which covers losses where an employee is tricked into authorizing the transfer voluntarily.

A practical nuance: the two coverages hinge on who is deceived. Funds transfer fraud applies when the financial institution is fooled by fraudulent instructions purporting to come from the insured; social engineering fraud applies when the insured's own employee is manipulated into sending money to a fraudster's account. Because carriers frequently give social engineering a much lower sublimit, a claim can be denied under one agreement and only partly paid under the other. Buyers should confirm both are present, review the required callback-verification and controls conditions, and check whether third-party crime or client-funds exposures are addressed.