The Threat Inside Your Business
When business owners think about theft, they usually picture a break-in. Someone forcing a door, taking equipment, maybe emptying the register. That kind of loss is real, and it is covered by a standard commercial property policy. But it is not the kind of theft that does the most damage to small businesses. That distinction belongs to the people on the payroll.
The Association of Certified Fraud Examiners released its 2026 Report to the Nations in May, examining 2,402 cases of occupational fraud investigated by Certified Fraud Examiners across 143 countries. The findings are consistent with what the data has shown for years, but the numbers remain striking. Small businesses, defined as organizations with fewer than 100 employees, account for 21 percent of all occupational fraud cases. The median loss once a scheme is uncovered is $141,000. And losses from employee theft run roughly 15 times higher than losses from external theft.
CFEs estimate that organizations lose approximately 5 percent of revenue to fraud each year. For a Seguin business doing $2 million in annual revenue, that is $100,000 in potential exposure, and the actual loss from a single scheme can far exceed the median. Twenty percent of cases in the 2026 study involved losses exceeding $1 million.
How It Happens
The most common forms of occupational fraud in small businesses are not sophisticated. They are ordinary financial transactions manipulated by someone who has access, trust, and time.
Billing fraud is the most prevalent scheme. An employee creates a fictitious vendor, submits invoices for goods or services that were never delivered, and approves the payments. In a small business where one person handles both accounts payable and vendor management, this can run undetected for years.
Check tampering involves an employee intercepting, forging, or altering checks. This can mean writing checks to themselves from the company account, altering the payee on legitimate checks, or forging signatures. In businesses that still rely heavily on paper checks, the opportunity is persistent.
Expense reimbursement fraud is common across every industry. Inflated mileage, personal purchases submitted as business expenses, duplicate receipts, fictitious travel, the schemes vary but the pattern is the same: small amounts, repeated over time, that add up.
Payroll fraud includes ghost employees, unauthorized pay raises, falsified overtime, and commission manipulation. In businesses where payroll is managed by a single employee with minimal oversight, the opportunity for this kind of scheme is significant.
What makes these losses particularly painful is how long they run before being detected. Most occupational fraud schemes are not discovered by an audit. According to the ACFE report, tips remain the most common detection method, which means many schemes operate quietly for months or years before someone notices something is off and says something about it.
Why Your Current Policy Probably Does Not Cover This
This is the coverage gap that surprises most business owners. General liability insurance covers third-party bodily injury and property damage claims. Commercial property insurance covers physical damage to your building and contents, including losses from burglary and theft by outsiders. Neither was designed to cover financial losses caused by a trusted employee on the inside.
The logic from the insurer’s perspective is straightforward: the person causing the loss is someone the business chose to hire, gave access to its financial systems, and trusted with its assets. That is a fundamentally different risk than a stranger breaking in, and it requires a different policy to cover it.
Some Business Owner’s Policies include a small amount of employee dishonesty coverage, but the limits are often $5,000 to $25,000, which is nowhere near adequate for a real employee theft loss. A median loss of $141,000 will blow through that sublimit before the investigation is even complete.
What Crime Insurance Covers
Crime insurance, also called fidelity coverage, is the policy specifically designed to cover losses from employee dishonesty, forgery, theft of money and securities, computer fraud, and funds transfer fraud. A comprehensive crime policy typically includes several coverage parts.
Employee theft coverage is the core component. It covers direct financial loss resulting from theft by an employee, including money, securities, and property. This is the coverage that responds when an employee embezzles funds, steals inventory, or manipulates financial records for personal gain.
Forgery or alteration coverage covers losses from forged or altered checks, drafts, promissory notes, or similar instruments. If an employee forges a company check or alters a legitimate one, this coverage responds.
Computer fraud coverage covers losses from the use of a computer to fraudulently transfer money or property. As more transactions move digital, this component has become increasingly important.
Funds transfer fraud coverage covers losses from fraudulent instructions directing a financial institution to transfer money from the business’s account. This is related to but distinct from computer fraud, and it is relevant to businesses that make regular wire transfers or ACH payments.
Standalone crime insurance policies are often surprisingly affordable relative to the exposure they cover. For many small businesses, annual premiums start at a few hundred dollars for coverage limits of $100,000 to $500,000. Given the median loss figures in the ACFE report, the cost-benefit analysis is not close.
Internal Controls That Close the Gap
Insurance covers the financial loss. Internal controls reduce the likelihood that the loss happens in the first place. For small businesses in Seguin and Guadalupe County, where staffing is lean and one person often wears multiple hats, implementing basic controls can meaningfully reduce fraud exposure.
Separate duties. The single most effective internal control is separating the person who approves a transaction from the person who executes it. If the same employee who enters invoices also cuts the checks, there is no check on that process. Even in a small office, having a second person review and approve payments before they go out introduces a layer of accountability that deters most schemes.
Require dual authorization for payments above a threshold. Any payment above a defined amount, say $2,500 or $5,000, should require two signatures or two approvals. This does not slow operations meaningfully, but it eliminates the ability of any single person to move large sums without oversight.
Review bank statements and reconciliations personally. Business owners who never look at their own bank statements are the most vulnerable to check tampering and unauthorized payments. A monthly review of statements and reconciliations, even a quick one, catches anomalies that automated systems miss.
Conduct surprise audits. The ACFE data consistently shows that surprise audits and job rotation reduce both the frequency and duration of fraud. Even the knowledge that a surprise review could happen at any time changes behavior.
Establish a reporting mechanism. Since tips are the most common way fraud is detected, giving employees a way to report concerns, whether through a direct line to the owner, an anonymous hotline, or a trusted third party, increases the likelihood that a scheme is caught early.
A Small Change That Closes a Real Gap
Most business owners do not think about employee theft until it happens to them. And by the time it is discovered, the loss has usually been accumulating for months or years. The combination of a crime insurance policy and basic internal controls is a small investment relative to the exposure, and it addresses a risk that general liability and commercial property were never built to handle.
At Donegan Insurance, we include crime and fidelity coverage in every commercial insurance review. We help Seguin business owners understand what their current policy does and does not cover, and we make sure the gap between employee dishonesty exposure and actual coverage is closed before a loss forces the conversation.
If your current policy does not include specific crime or fidelity coverage, it is worth asking what would actually happen if an employee theft showed up at your business. Contact Donegan Insurance to find out.
Call 830-303-8300 or request a consultation online.
