Blog

  • ERISA Bond

    Protect Your Employee Retirement Plan From Fraud and Theft

    Every company offering a 401(k) or pension plan faces a sobering risk: someone with access to those funds could steal them. That’s why federal law requires most employers to purchase an ERISA bond—a specialized form of protection that reimburses your employee benefit plan if fraud or dishonesty occurs. Without this coverage, a single act of theft could devastate your employees’ retirement savings and expose you to serious legal consequences. Understanding ERISA bond requirements isn’t just about compliance; it’s about safeguarding the financial futures of everyone who depends on your plan.

    What Is an ERISA Bond?

    An ERISA bond, officially known as an ERISA fidelity bond, is a type of insurance specifically designed to protect employee benefit plans against losses caused by acts of fraud or dishonesty. Established under the Employee Retirement Income Security Act of 1974, these bonds serve as a financial safeguard when someone responsible for managing retirement plan assets commits crimes such as theft, embezzlement, forgery, or misappropriation.

    The bond functions differently from traditional insurance. When a covered person steals from your plan, the bond pays the plan directly to restore the stolen funds—up to the bond’s coverage limit. This protection exists solely for the benefit of the plan and its participants, not for the individuals who handle the money. If someone embezzles retirement funds and the bond pays out, that person still faces criminal prosecution and must repay the bond company.

    Unlike many other insurance products, ERISA bonds must provide first-dollar coverage with no deductible. This means the plan receives reimbursement starting with the first dollar lost, ensuring maximum protection for participant assets. The bond protects against intentional acts to deprive the plan of assets, covering a broad scope of fraudulent behavior that meets the “fraud or dishonesty” standard mandated by federal law.

    Who Needs an ERISA Bond?

    The Employee Retirement Income Security Act requires virtually every private-sector employee benefit plan to maintain fidelity bond coverage. This includes 401(k) plans, pension plans, profit-sharing plans, and many health and welfare benefit plans. The law states that every fiduciary and every person who handles funds or other property of an employee benefit plan must be bonded.

    Your plan must have an ERISA bond regardless of how many participants it has or how much money it holds. Even a small business with just a handful of employees and modest plan assets faces the same bonding requirement as a large corporation with thousands of participants. The annual Form 5500 filed with the Department of Labor explicitly asks whether your plan has the required fidelity bond, and this form is signed under penalty of perjury.

    However, some plans are exempt from the bonding requirement. Completely unfunded plans—those that pay benefits directly from an employer’s general assets without any segregated fund—don’t need ERISA bonds. Plans not subject to ERISA Title I, such as government plans and certain church plans, also fall outside the bonding requirement.

    Understanding Coverage Amounts

    ERISA establishes a specific formula for determining how much bond coverage your plan needs. The required amount equals at least 10 percent of the plan funds handled, calculated as of the beginning of the plan year. For example, if your plan held $2 million in assets at the start of the year, you need at least $200,000 in bond coverage.

    The law sets both a floor and a ceiling on these amounts. The minimum bond amount is $1,000 per plan, ensuring even the smallest plans have meaningful protection. The maximum required bond amount is $500,000 for most plans. However, if your plan holds employer securities—stock issued by the company sponsoring the plan—the maximum increases to $1 million.

    These limits apply per plan, not per person. If one person handles funds for multiple plans, each plan must be bonded for the appropriate amount based on its own assets. Plans can voluntarily purchase higher coverage amounts if fiduciaries determine that additional protection serves the plan’s best interests, and the plan can pay for this enhanced coverage using plan assets.

    As plan assets grow over time, your bond amount should increase accordingly. Some providers offer automatic inflation adjustments through policy endorsements, ensuring your coverage remains adequate as your plan grows without requiring constant manual adjustments.

    ERISA Bond vs Fiduciary Liability Insurance

    Many plan sponsors confuse ERISA fidelity bonds with fiduciary liability insurance, but these products serve completely different purposes and both may be necessary for comprehensive protection.

    An ERISA fidelity bond protects the plan against losses from theft, fraud, embezzlement, and other dishonest acts committed by people who handle plan assets. The bond responds when someone intentionally steals from the plan or commits fraud. It reimburses the plan for stolen money, ensuring participants don’t lose their retirement savings to criminal acts.

    Fiduciary liability insurance, in contrast, protects fiduciaries and sometimes the plan itself against losses caused by unintentional mismanagement or breaches of fiduciary duty. This coverage applies when a fiduciary makes poor investment decisions, fails to follow plan documents, or otherwise violates their duties through negligence rather than intentional wrongdoing. The insurance might cover legal defense costs and damages awarded in lawsuits alleging fiduciary breaches.

    These different coverage areas mean your plan likely needs both protections. The fidelity bond won’t help if someone sues you for making imprudent investment choices, and fiduciary insurance won’t cover you if someone embezzles plan funds. Directors and officers insurance policies sometimes include fidelity bond provisions, but these may not meet all ERISA requirements. You must carefully review any combined policies to ensure they provide the mandated first-dollar coverage with no deductible for fraud and dishonesty.

    Who Must Be Bonded: Understanding “Handling”

    The Department of Labor has established detailed criteria for determining who “handles” plan funds and therefore needs bonding coverage. The central question is whether a person has a realistic opportunity to steal plan funds in the ordinary course of their everyday duties. If someone could feasibly take money in their normal work activities, they must be bonded.

    Handling includes several specific activities. Anyone with physical contact with cash, checks, or similar property handles plan funds. Those with power to transfer funds from the plan to themselves or third parties also qualify as handlers. Individuals who can negotiate plan property, such as mortgages, real estate titles, or securities, meet the definition. Having disbursement authority, check-signing power, or supervisory responsibility over activities that require bonding all constitute handling.

    Plan funds include all assets the plan uses or might use to pay benefits. This encompasses contributions from all sources, plan investments including real estate and closely-held securities, and any cash or property held for distributions. The definition extends to assets held indirectly through common or collective trusts or investment funds deemed to hold plan assets under ERISA. However, mutual funds and investment funds that don’t hold plan assets under ERISA don’t require bonding for their managers.

    Inside your organization, the plan trustee, administrator, and any employees with access to plan funds typically need bonding coverage. Outside service providers, such as third-party administrators and investment advisors, must also be bonded if they or their employees handle your plan’s funds. Service providers can maintain their own ERISA bonds or can be added to your plan’s bond, and you should verify that all service providers who need bonding actually have appropriate coverage.

    Exemptions From Bonding Requirements

    Certain regulated financial institutions don’t need ERISA bonds even when handling plan funds. Banks and insurance companies acting as fiduciaries are exempt if they’re organized under federal or state law, subject to governmental examination or supervision, and meet specific capital requirements. Trust companies and similar banking institutions also qualify for exemption when they meet regulatory standards, even if they’re not acting as fiduciaries.

    SEC-registered broker-dealers don’t need ERISA bonds if they’re already bonded under rules established by FINRA or another self-regulatory organization. These exemptions recognize that heavily regulated financial institutions already have substantial bonding or capital requirements providing similar protections.

    Some fiduciaries also escape bonding requirements. While ERISA technically requires every fiduciary to be bonded, the Department of Labor applies the same handling standard to fiduciaries as to everyone else. A fiduciary who doesn’t handle plan funds doesn’t need a bond. For example, a consultant who provides nondiscretionary investment advice but never touches plan assets typically doesn’t require bonding coverage.

    Even with these exemptions, plan sponsors should obtain written confirmation from any service provider claiming exemption status. This documentation protects you if the Department of Labor questions your bonding arrangements during an audit.

    Common Misconceptions About ERISA Bonds

    Many plan sponsors fall into compliance traps because they misunderstand how ERISA bonds work. Understanding these common misconceptions can help you avoid costly mistakes.

    One prevalent myth suggests that fiduciary insurance automatically satisfies the ERISA bond requirement. As explained earlier, these serve different purposes. Your fiduciary liability insurance protects against unintentional mismanagement, while the fidelity bond covers intentional theft and fraud. You need both types of coverage. Even if your directors and officers insurance includes some fidelity provisions, carefully verify that it provides the first-dollar coverage with no deductible that ERISA mandates.

    Another misconception holds that small plans don’t need bonds or that plans below audit thresholds are exempt. In reality, ERISA requires fidelity bonds for most retirement plans regardless of size. The plan audit requirement applies to plans with 100 or more participants, but bonding applies to nearly all plans. A tiny plan with three participants and $50,000 in assets needs a bond just like a major corporate plan with thousands of participants and billions in assets.

    Some plan sponsors believe they can easily obtain retroactive coverage if they discover they’ve been operating without a bond. Unfortunately, most states prohibit insurers from issuing retroactive fidelity bonds. If a Department of Labor audit reveals you lacked proper bonding, you’ll need to document your attempts to comply and maintain proper coverage going forward, but you probably can’t go back in time and create coverage for past years.

    Many assume their ERISA bond automatically covers cybersecurity issues and electronic fraud. While some bonds include cyber coverage, others don’t. The growing prevalence of social engineering scams, payment instruction fraud, and computer theft makes cyber coverage increasingly important. Don’t assume your basic fidelity bond protects against these modern threats. Review your policy carefully and consider adding specific cyber deception or payment instruction fraud coverage if it’s not included.

    Finally, some plan sponsors think all fidelity bonds are created equal. The Department of Labor actively audits plans and has found that many industry-standard bonds use narrow “theft” language that doesn’t satisfy ERISA’s broader “fraud or dishonesty” standard. Cheaper isn’t always better when it comes to fidelity bonds. A non-compliant bond exposes trustees to losses and potential claims of breach of fiduciary duty.

    Cybersecurity and Modern Coverage Considerations

    Traditional ERISA bonds were designed for an era when theft meant someone walking away with a physical check or forging a signature. Today’s threats look very different. Social engineering scams trick employees into wiring funds to fraudulent accounts. Hackers compromise computer systems to divert plan assets. Sophisticated phishing schemes impersonate executives to authorize fake transactions.

    The Department of Labor has responded to these emerging risks by issuing cybersecurity guidance for plan sponsors. This guidance emphasizes the need for robust cybersecurity programs and may implicitly recognize that traditional fidelity bonds don’t fully address electronic threats.

    Many modern ERISA bond products now offer cyber deception or payment instruction fraud coverage as additions to standard fidelity protection. This coverage responds when scammers use social engineering, pretexting, phishing, or other electronic confidence tricks to mislead employees into transferring plan assets. Because these schemes often don’t involve actual hacking of computer systems and the fund transfers are technically voluntary, traditional crime policies may not cover them.

    Additional third-party crime coverages available beyond typical fidelity bonds include computer and funds transfer fraud, depositors forgery or alteration, and money orders and counterfeit currency protection. Some policies also include investigative expense sublimits covering the costs of determining whether a loss occurred and calculating its amount.

    When evaluating ERISA bond options, specifically ask providers whether their coverage includes social engineering fraud and other cyber-related losses. If not included, determine whether you can add this coverage. Given the increasing frequency and sophistication of electronic fraud targeting retirement plans, comprehensive cyber protection has become essential rather than optional.

    How to Get an ERISA Bond

    Obtaining an ERISA bond follows a straightforward process. You start by applying through a surety company or insurance provider that’s listed on the Department of the Treasury’s Listing of Approved Sureties. The application typically requires information about your plan, including the number of participants, total plan assets, and types of investments held.

    Next, you’ll receive a quote based on your plan’s characteristics. The premium is usually a small fraction of the total bond amount, making ERISA bonds relatively affordable compared to other insurance products. Plans holding only standard qualified assets managed by reputable financial institutions typically receive the most favorable rates.

    After reviewing and accepting the quote, you pay the premium. Many providers now offer instant issuance capabilities, allowing you to purchase and download your bond immediately. Some offer multi-year policies with options for annual installments or prepayment, often with discounts for longer terms.

    Finally, you file the bond with your plan records and ensure it’s properly documented. The bond should specifically name your plan as the insured party. Swiftbonds can help streamline this entire process, offering quick quotes and efficient procurement for plans of all sizes seeking compliant ERISA fidelity coverage.

    Swiftbonds LLC
    Voted 2025 Surety Bond Agency of the Year
    4901 W. 136th Street
    Leawood KS 66224
    (913) 214-8344
    https://swiftbonds.com/

    Practical Compliance Steps

    Maintaining proper ERISA bond coverage requires ongoing attention. Start by conducting a comprehensive review of who handles your plan funds. Look first at internal personnel—officers, directors, and employees with plan access. Then examine external parties, including investment managers, plan administrators, recordkeepers, and any other service providers with the ability to move plan assets.

    Verify that your bond amount reflects your current plan assets. Calculate 10 percent of the plan’s value as of the beginning of the plan year and ensure your coverage meets or exceeds this amount, subject to the applicable maximum. Remember to increase coverage as your plan grows.

    Review your bond annually before filing Form 5500. The form explicitly asks about fidelity bond coverage and must be signed under penalty of perjury. Answering incorrectly can trigger audits and penalties.

    Keep documentation of your bonding arrangements in your plan files. Maintain copies of the bond itself, premium payment receipts, and any correspondence with the bond provider. If service providers maintain their own bonds covering your plan, obtain certificates of coverage and file them with your records.

    Consider bundling your ERISA bond with fiduciary liability insurance and cyber liability coverage for comprehensive protection. Many providers now offer package deals that address all three risk areas while potentially reducing overall costs.

    Work with bond providers and insurance professionals who understand ERISA’s specific requirements. General commercial crime policies or standard fidelity bonds may not meet the law’s mandates for first-dollar coverage, no deductible, and the specific fraud or dishonesty standard.

    Frequently Asked Questions

    What happens if we don’t have an ERISA bond?

    Operating without a required ERISA bond violates federal law and constitutes a breach of fiduciary duty. If the Department of Labor discovers this during an audit, you’ll face enforcement action requiring you to obtain proper coverage immediately. If plan assets are stolen while you lack coverage, fiduciaries may be personally liable for the losses. Courts can order fiduciaries to reimburse the plan for losses that would have been covered by a bond. The consequences range from correcting the violation and obtaining coverage to potentially paying hundreds of thousands of dollars in unrecovered losses.

    Can the plan pay for the bond using plan assets?

    Yes. ERISA explicitly allows plans to pay for fidelity bonds using plan assets because the bond protects the plan, not the individuals who handle the funds. The bond exists to safeguard participant retirement savings, making it an appropriate plan expense. Many plans routinely pay bond premiums from plan assets alongside other administrative expenses like recordkeeping fees and audit costs.

    How much do ERISA bonds cost?

    ERISA bonds are typically quite affordable relative to the coverage they provide. Premiums usually represent a small fraction of the bond amount—often just a few hundred dollars annually for standard coverage amounts. Plans holding only traditional qualified assets through reputable custodians generally receive better rates. Plans with significant non-qualifying assets like real estate or collectibles may face higher premiums. Three-year policies often provide discounts compared to annual renewals.

    What’s the difference between qualifying and non-qualifying assets?

    Qualifying assets include standard retirement plan investments held by reputable financial institutions, such as mutual funds, stocks, bonds, and savings accounts. These assets are relatively liquid and easy to value. Non-qualifying assets include items like real estate, artwork, collectibles, and closely-held securities. If your plan holds more than 5 percent in non-qualifying assets, obtaining an ERISA bond becomes more complex and may require higher coverage amounts or specialized underwriting.

    Do we need separate bonds for multiple plans?

    Each plan must have adequate coverage based on its own asset value. You can obtain a blanket bond covering multiple plans as long as each plan can recover up to its required amount. For example, if you have three plans each requiring $100,000 in coverage, a $100,000 blanket bond won’t suffice—you need $300,000 to cover all three plans adequately. Some employers maintain separate bonds for each plan while others use blanket coverage, depending on their specific circumstances and available options.

    What if our third-party administrator or investment advisor already has a bond?

    Service providers can maintain their own ERISA bonds that cover your plan, or you can add them to your plan’s bond. Either approach works as long as the coverage meets ERISA requirements. Always obtain written confirmation that the service provider’s bond actually covers your plan and meets the mandated standards. Don’t simply assume they’re properly bonded. Many plan sponsors verify service provider bonding annually and maintain documentation in plan files.

    How does the bond process work if someone steals from our plan?

    If you discover theft or fraud, immediately notify the bond company and file a claim. The bond company investigates the claim to verify that a covered loss occurred and determine the amount. If the claim is valid, the bond pays the plan up to the coverage limit. The plan receives reimbursement, restoring the stolen funds to protect participant accounts. Meanwhile, the person who committed the theft faces criminal prosecution and must repay the bond company for any amounts paid out. The bond protects the plan, not the wrongdoer.

    Can we cancel or reduce our bond coverage?

    You cannot eliminate ERISA bond coverage entirely while your plan remains subject to ERISA. You can only cancel the bond if your plan terminates or becomes exempt from ERISA requirements. However, you should adjust coverage amounts as your plan assets change. If plan assets decline significantly, you might reduce coverage to match the new required amount. If assets grow, you must increase coverage accordingly. Always maintain at least the minimum required coverage based on your current plan assets.

    Protecting What Matters Most

    Employee benefit plans represent decades of savings and the retirement security of countless workers. ERISA’s bonding requirement recognizes that even well-intentioned organizations face risks from dishonest individuals who might exploit their access to these funds. By maintaining proper fidelity bond coverage, you fulfill your legal obligations while demonstrating your commitment to protecting participant assets.

    The relatively small cost of an ERISA bond provides enormous value when measured against the potential devastation of a major theft. First-dollar coverage with no deductible means your plan and its participants receive immediate protection without having to absorb any initial losses. This coverage works alongside your fiduciary liability insurance and cybersecurity measures to create comprehensive risk management.

    Don’t wait for a Department of Labor audit to discover bonding deficiencies. Review your current coverage today, verify that it meets all ERISA requirements, and ensure every person who handles plan funds is properly bonded. Your employees’ retirement security depends on it.

    Five Fascinating Facts About ERISA Bonds

    The Department of Labor processes thousands of ERISA bond-related compliance issues annually, with inadequate coverage amounts being the most common violation rather than complete absence of bonds. Many employers have bonds but fail to increase coverage as plan assets grow, leaving significant gaps in protection.

    ERISA bonds originated from union corruption concerns in the 1950s and 1960s, when Congressional investigations revealed widespread theft from union pension funds by organized crime figures and corrupt union officials. The bonding requirement was specifically designed to address this rampant theft that was devastating worker retirement security.

    Courts have ruled that ERISA bonds cannot cover losses from market downturns or poor investment performance, no matter how severe. The “fraud or dishonesty” requirement means the bond only responds to intentional wrongdoing, not to negligent or even grossly negligent investment decisions that lose money. This distinction has led to major litigation when plan sponsors tried to claim bond coverage for investment losses.

    Some ERISA bonds include coverage for losses occurring during a “discovery period” after the bond expires, protecting plans against delayed discovery of theft that occurred while coverage was active. This retroactive discovery feature can be crucial since sophisticated fraud schemes sometimes remain hidden for years before detection.

    The required coverage amounts have remained unchanged since 2006 despite significant inflation in plan assets over nearly two decades. The $500,000 and $1 million maximums made more sense when established but now represent a smaller percentage of many large plans’ total assets, leading some plans to voluntarily purchase excess coverage beyond the required amounts.