Cyber insurance for AI scams: social engineering and funds transfer fraud coverage

Why identity theft protection usually won't cover an AI scam

If you or your staff send money to a deepfake "boss" or a cloned voice, banks often treat it as a payment you authorized, so fraud claims get denied. Identity theft plans restore your personal identity; they don't replace business money sent to scammers. That loss usually needs social-engineering or funds-transfer fraud coverage, often sold as an add-on.

Social engineering fraud coverage vs. funds transfer fraud coverage

These two are easy to mix up, and the difference matters when you file a claim. Definitions vary by policy, but in general:

• Social engineering fraud coverage responds when someone on your team is tricked into sending money: a fake vendor invoice, a voice clone of the owner, a deepfake video call. The payment was "authorized," but under false pretenses.
• Funds transfer fraud coverage typically responds when a criminal moves money without your authorization, for example by breaking into your online banking and sending a transfer themselves.

Many AI scams fall under social engineering, which is the one most often missing or capped at a low sub-limit. Ask for it by name.

What else small business cyber insurance can include

Cyber policies are usually split into first-party coverage (your own costs: breach response, data restoration, business interruption, ransomware and extortion) and third-party coverage (claims against you: legal defense, settlements, and regulatory fines where insurable). The coverage cards above show what each looks like for a small business. Some policies also include access to a breach hotline and response experts, which can matter as much as the money.

Questions to ask an insurer or licensed agent

1. "Does this policy include social-engineering fraud and funds-transfer fraud, and what is the sub-limit for each?"
2. "Does it cover impersonation using AI voice clones or deepfake video?"
3. "Is there a verification requirement, such as a call-back, for social-engineering claims?"
4. "Are ransomware, extortion and business interruption included? Is there a waiting period?"
5. "What's the deductible, and does it differ by type of loss?"
6. "Who do I call first if something happens, and how fast do I need to report it?"

How to get small business cyber insurance quotes

You can request quotes directly from licensed insurers' own websites or through a licensed agent or broker. Expect an application to ask about your industry, revenue, number of employees, how many customer records you keep, and your security habits, especially multi-factor authentication, backups and a call-back rule for payment changes. Those same habits can lower your risk and sometimes your premium. Price depends on your business, the limits you choose and your controls, so the only reliable number is a real quote.

AI Shield Coverage is not an insurance agency. We don't sell, quote, compare or recommend policies. We explain the risks, and if you'd like, we point you to licensed insurers' own quote pages or connect you with licensed agencies. Any advice about a specific policy comes from them.

Cyber coverage for families

For households, personal cyber protection is often available as an add-on to home or renter's insurance. Depending on the insurer, it may help with online fraud, cyber extortion, data restoration, or identity recovery. Ask your current home or renter's insurer whether they offer it and whether it includes social-engineering losses from scam calls. Pair it with a family safe word; see our guide to AI voice clone scams.