Phishing is often the initial entry point for cyber attacks, leading to credential compromise, business email compromise, or account takeover. Cyber insurance can cover losses from successful phishing campaigns (such as fraudulent transfer of funds or data breaches) depending on whether social engineering fraud coverage is included. Definitions and exclusions vary significantly between policies, so clarity in policy wording and understanding coverage scope is essential.