Most business owners trust the person who runs their payroll, and that trust is usually earned. It’s also exactly what embezzlement depends on. Payroll fraud rarely looks like theft. It looks like a little extra overtime, a former employee who never came off the system, or a bank account number that quietly changed. If it happened to you, would your embezzlement coverage pay, and would the limit be enough?
The numbers are hard to ignore. The Association of Certified Fraud Examiners’ Occupational Fraud 2026: A Report to the Nations studied 2,402 cases and found a median loss of $104,000, with a typical scheme running 12 months before anyone caught it. Organizations with fewer than 100 employees had the highest median loss of any size group: $126,000.
How Payroll Fraud Usually Happens
- Ghost employees: paychecks to someone who doesn’t work for you, often a former employee left on the system.
- Padded hours: overtime or hours that were never worked, approved by the same person who enters them.
- Quiet raises: pay-rate or bonus changes made without the owner’s sign-off.
- Payroll taxes that never arrive: taxes withheld from paychecks but not sent to the IRS or the state.
A changed direct-deposit account requested by a fake “employee” email is a different risk, covered differently. We explained it in Social Engineering Fraud: Would Your Policy Pay?
Your Usual Policies Probably Won’t Pay
General liability covers injury and damage you cause to others, not money stolen from you. Many business owners policies include little or no employee theft coverage, or only a small limit by endorsement. And if you sponsor a 401(k), the ERISA bond protects the plan’s assets, not your operating accounts. The coverage built for this is a commercial crime policy and its Employee Theft insuring agreement.
The Details That Decide a Claim
- The limit: because schemes often run a year or more, size it to what could leave over a year, not one payroll.
- Who counts as an employee: an outside payroll company usually isn’t one. Ask whether your policy covers theft by your payroll service.
- Notice deadlines: crime policies set strict deadlines for notice and proof of loss. Report as soon as you discover a loss.
- Prior knowledge: once you learn an employee has been dishonest, coverage for that person typically ends, even if you keep them on.
Controls That Catch It Early
The ACFE found three weaknesses behind 70% of frauds: missing internal controls, controls that were overridden, and no management review. A few habits close those gaps:
- Review the payroll register yourself every pay period.
- Separate the person who adds employees or changes pay from the person who approves payroll.
- Confirm every direct-deposit change by phone, using a number you already have.
- Check your IRS and state tax accounts each quarter to confirm deposits arrived.
Crime insurance applications often ask about these controls, so they matter to underwriters too.
Find Out Before You Need It
We’ll review your current business insurance, show you whether employee theft is covered and for how much, and tell you plainly what we find. Book a 15-minute consultation.