Social Engineering Fraud

Social Engineering Fraud cover applies when staff are tricked into handing over money, securities, or property. The fraudster does not break into any system. Instead, social engineering targets human trust, not technical weakness. One common scheme is Business Email Compromise, where a criminal poses as an executive or a supplier to redirect a payment. Another is invoice fraud, where a fake invoice looks like it came from a real vendor. A third scheme is impersonation, where a criminal poses as a client, a lawyer, or an official. These scams work because they use trust and urgency, not hacking skill. In Australia, this type of fraud causes large business losses each and every year. Criminals often target accounts payable teams and the email accounts of senior executives. Cover usually requires the business to have payment verification steps already in place. Sub-limits are often lower here than for other sections of a crime policy. Most policies require direct contact with an employee, and the impersonated party must be shown to be a genuine business contact.

Social Engineering Fraud cover applies when staff are tricked into handing over money, securities, or property. The fraudster does not break into any system. Instead, social engineering targets human trust, not technical weakness. One common scheme is Business Email Compromise, where a criminal poses as an executive or a supplier to redirect a payment. Another is invoice fraud, where a fake invoice looks like it came from a real vendor. A third scheme is impersonation, where a criminal poses as a client, a lawyer, or an official. These scams work because they use trust and urgency, not hacking skill. In Australia, this type of fraud causes large business losses each and every year. Criminals often target accounts payable teams and the email accounts of senior executives. Cover usually requires the business to have payment verification steps already in place. Sub-limits are often lower here than for other sections of a crime policy. Most policies require direct contact with an employee, and the impersonated party must be shown to be a genuine business contact.