Coverage, explained
Cyber insurance for AI scams: social engineering and funds transfer fraud coverage
When a cloned voice or a deepfake "boss" tricks someone into sending money, many policies won't pay unless the right coverage is in place. Here's what cyber insurance can include and what to ask, in plain English.
Typical cover, varies by policy
What cyber insurance can cover.
Tap any item to see what it looks like for a small business.
After an attack
Money and extortion
Ask for it by name.
Legal
Coverage, limits, and exclusions vary by carrier. Always read the policy and ask specifically about AI-driven social-engineering and deepfake fraud.
Why identity theft protection usually won't cover an AI scam
If you or your staff send money to a deepfake "boss" or a cloned voice, banks often treat it as a payment you authorized, so fraud claims get denied. Identity theft plans restore your personal identity; they don't replace business money sent to scammers. That loss usually needs social-engineering or funds-transfer fraud coverage, often sold as an add-on.
Social engineering fraud coverage vs. funds transfer fraud coverage
These two are easy to mix up, and the difference matters when you file a claim. Definitions vary by policy, but in general:
- Social engineering fraud coverage responds when someone on your team is tricked into sending money: a fake vendor invoice, a voice clone of the owner, a deepfake video call. The payment was "authorized," but under false pretenses.
- Funds transfer fraud coverage typically responds when a criminal moves money without your authorization, for example by breaking into your online banking and sending a transfer themselves.
Many AI scams fall under social engineering, which is the one most often missing or capped at a low sub-limit. Ask for it by name.
What else small business cyber insurance can include
Cyber policies are usually split into first-party coverage (your own costs: breach response, data restoration, business interruption, ransomware and extortion) and third-party coverage (claims against you: legal defense, settlements, and regulatory fines where insurable). The coverage cards above show what each looks like for a small business. Some policies also include access to a breach hotline and response experts, which can matter as much as the money.
Questions to ask an insurer or licensed agent
- "Does this policy include social-engineering fraud and funds-transfer fraud, and what is the sub-limit for each?"
- "Does it cover impersonation using AI voice clones or deepfake video?"
- "Is there a verification requirement, such as a call-back, for social-engineering claims?"
- "Are ransomware, extortion and business interruption included? Is there a waiting period?"
- "What's the deductible, and does it differ by type of loss?"
- "Who do I call first if something happens, and how fast do I need to report it?"
How to get small business cyber insurance quotes
You can request quotes directly from licensed insurers' own websites or through a licensed agent or broker. Expect an application to ask about your industry, revenue, number of employees, how many customer records you keep, and your security habits, especially multi-factor authentication, backups and a call-back rule for payment changes. Those same habits can lower your risk and sometimes your premium. Price depends on your business, the limits you choose and your controls, so the only reliable number is a real quote.
AI Shield Coverage is not an insurance agency. We don't sell, quote, compare or recommend policies. We explain the risks, and if you'd like, we point you to licensed insurers' own quote pages or connect you with licensed agencies. Any advice about a specific policy comes from them.
Cyber coverage for families
For households, personal cyber protection is often available as an add-on to home or renter's insurance. Depending on the insurer, it may help with online fraud, cyber extortion, data restoration, or identity recovery. Ask your current home or renter's insurer whether they offer it and whether it includes social-engineering losses from scam calls. Pair it with a family safe word; see our guide to AI voice clone scams.
Security software for scam protection
Security software can add a layer of protection against phishing links, malicious sites and malware on your devices.
Affiliate link: AI Shield may earn a referral fee; we are not an insurer, broker, or agent.
Frequently asked questions
What's the difference between social engineering and funds transfer fraud coverage?
Social engineering coverage generally responds when someone is tricked into sending money; funds transfer fraud coverage generally responds when a criminal moves money without your authorization. Policy wording varies, so check both.
Does regular business insurance cover AI scams?
Often not. Many general policies exclude cyber losses, and social-engineering fraud is frequently a separate add-on.
How much does cyber insurance cost?
It depends on your business size and industry. Small businesses can often find basic coverage starting around $30/month, but get a real quote.
What do insurers ask on a cyber insurance application?
Usually your industry, revenue, employee count, the kind and amount of customer data you keep, and security controls such as multi-factor authentication, backups and payment verification.
Does AI Shield Coverage sell cyber insurance?
No. We're an education and referral resource, not a licensed agency. Quotes and policies come directly from licensed insurers and agents.