Your bookkeeper has worked for you for six years. She knows your vendor list, your payroll cadence, and your bank login better than you do. That trust is exactly why 95% of U.S. businesses experience some form of employee theft, and why the median loss per fraud case now tops $145,000. Most owners assume their general liability policy has this covered. It doesn't — and the gap has a name: employee dishonesty insurance, more commonly sold as a fidelity bond.
This guide explains what fidelity bonds actually cover, why they're structurally different from every other policy in your insurance binder, how much they cost, and the one place they're not optional — your 401(k) plan.
Why General Liability Won't Save You
General liability insurance exists to cover claims that a third party — a customer, a delivery driver, a visitor — was physically hurt or had property damaged because of your business. It's built around accidents. Employee theft isn't an accident; it's a deliberate act by someone already on the inside, and standard commercial policies explicitly carve it out.
Property insurance has the same blind spot. It covers a break-in, a fire, or a burst pipe. If the same cash goes missing but the person who took it had a key and an access badge, most property policies exclude it too. That's the coverage hole employee dishonesty insurance is built to close.
The distinction matters because owners often only discover it after the fact. A bookkeeper diverts vendor payments to a shell account for eighteen months, the owner files a claim against the business owner's policy (BOP), and the claim gets denied line by line because the loss was caused by an employee, not an outside criminal.
What a Fidelity Bond Actually Covers
Despite the name, a fidelity bond functions as insurance, not a surety bond in the traditional sense — the insurer pays the loss rather than guaranteeing a third party's obligation. Coverage typically extends to:
- Theft of cash, inventory, and equipment by an employee
- Forged or altered checks written against company accounts
- Fraudulent electronic funds transfers, including wire fraud initiated by staff
- Embezzlement and payroll fraud — ghost employees, inflated hours, diverted reimbursements
- Theft of securities held by the business
It applies to the full range of people on your payroll — full-time, part-time, seasonal, and temporary workers — not just senior staff with financial authority.
What It Won't Pay For
Fidelity bonds have consistent, predictable exclusions worth knowing before you assume you're covered:
- Theft or fraud by a business owner or partner (you can't bond against yourself)
- Any dishonest act the employer already knew about before purchasing the policy
- Indirect losses, like lost future income or reputational damage from the fraud becoming public
- Data breaches and computer fraud by outside hackers (that's cyber insurance's job)
- Normal wages, salary, and benefits owed to the employee
That cyber insurance boundary trips people up. Commercial crime coverage (which includes employee dishonesty) protects tangible assets — cash, inventory, securities — stolen by someone on your team. Cyber insurance protects against digital intrusion from outside your organization. A phishing email that tricks an employee into wiring money to a fraudster is often a gray area that depends on exact policy wording, so if your business does a lot of ACH or wire volume, ask your broker how each policy treats "social engineering fraud" specifically — it's frequently a named add-on rather than automatic coverage on either side.
First-Party vs. Third-Party: Who's Actually Being Protected
This is the part most owners skip past, and it changes which policy you need.
First-party coverage protects your own business. If an employee steals from you directly, this is the coverage that reimburses your company. It's usually added as an endorsement to a BOP or a standalone commercial crime policy.
Third-party coverage (the classic "fidelity bond") protects your clients from your employees. If you run a cleaning company, a home health agency, a bookkeeping firm, or any business where staff work unsupervised inside a client's home or office, a client can be victimized by someone you employ. Third-party bonds reimburse the client directly, and the insurer then pursues the employee for recovery. Many contracts — especially in janitorial services, IT support, and financial services — won't let you bid on work without proof of a third-party fidelity bond, so this often isn't a discretionary purchase; it's a condition of winning the contract.
The One Place Bonding Isn't Optional: Retirement Plans
If your business sponsors a 401(k) or any ERISA-covered retirement plan, federal law requires that everyone who handles plan funds — including you, as the plan sponsor — be covered by a fidelity bond. There is no small-plan exception and no minimum-asset threshold that lets you skip it.
The required amount is formulaic: each bonded person needs coverage equal to at least 10% of the plan assets they handle, with a $1,000 floor. Plans aren't required to carry more than $500,000 in total coverage ($1,000,000 if the plan holds employer stock). Because it's a statutory minimum rather than a market-priced risk product, it's cheap — roughly $100 for $10,000 of coverage, up to $500–$1,000 for a full $500,000, often sold in three-year terms. This ERISA bond is separate from — and doesn't substitute for — a broader commercial crime policy covering the rest of the business.
Missing this isn't a minor paperwork lapse. It's a fiduciary breach, and it's one of the more common findings when the Department of Labor audits a small plan.
What It Costs
For a typical small business — ten or fewer employees, $25,000–$100,000 in coverage — expect to pay roughly $150–$300 per year. Averaged across all small-business fidelity bond purchases, the figure lands closer to $1,000 annually once higher coverage limits and larger headcounts are factored in.
Pricing generally runs 0.2%–1% of the coverage amount per year: $100,000 in coverage might cost $200–$600 annually for a business with clean books and reasonable internal controls. The main cost levers are coverage amount, employee count, your business's financial health, and — increasingly — whether you can demonstrate basic separation of duties. Insurers ask about this because it's the single biggest predictor of a claim.
Why Weak Internal Controls Are the Real Root Cause
The ACFE's most recent Report to the Nations found that more than half of occupational fraud cases were tied to a lack of internal controls or management overriding the controls that did exist. Smaller organizations are disproportionately exposed to check tampering, expense-reimbursement fraud, and skimming — schemes that thrive specifically when one person controls too much of the money's path with no second set of eyes.
Insurance is the backstop, not the fix. The actual fix is structural: nobody should be able to both initiate and approve a payment, reconcile the bank account they also write checks from, or be the sole person who sees where every dollar goes. This is where your books themselves become a control, not just a record. Plain-text, version-controlled ledgers make this concrete in a way opaque software often doesn't — every entry is a diffable, timestamped change with an author, so a diverted payment or an altered vendor account leaves a trail that's difficult to quietly edit after the fact. Beancount.io builds on this model: transparent, auditable books where you can see exactly what changed, when, and by whom, which makes both day-to-day oversight and the eventual insurance claim (most insurers require a documented loss history) far less painful.
A Practical Checklist Before You Buy
- Confirm whether you need first-party, third-party, or both — driven by whether clients contractually require it.
- Check your 401(k) bonding status separately — this is a legal minimum, not a business decision.
- Ask what "employee" means in the policy — some exclude 1099 contractors, which matters if you rely on freelance bookkeepers or outsourced finance staff.
- Get a quote at multiple coverage tiers — the jump from $50,000 to $250,000 in coverage is usually smaller than people expect.
- Pair the bond with basic separation of duties — insurers increasingly ask about this in underwriting, and it lowers both your risk and your premium.
Keep Your Books Auditable, Not Just Insured
A fidelity bond covers the loss after theft happens. The stronger long-term defense is books that make dishonest entries hard to hide in the first place. Beancount.io gives you plain-text, version-controlled accounting — every transaction is a traceable, auditable line, not a black box — so you (and, if it ever comes to it, your insurer and your auditor) can see exactly what happened to every dollar. Get started for free and build financial records that hold up under scrutiny.