Start with the precise question
Commercial crime insurance can address specific dishonest acts and financial losses described in the issued form, such as employee theft, forgery, computer fraud, or funds-transfer fraud. The policy’s coverage grants, definitions, exclusions, conditions, limits, and sublimits determine the questions to ask after an event.
The policy title is only a label. Begin by describing the event or operating change in plain language, then identify the property, people, contract, money, data, or service involved. A useful review separates what happened from what the business hopes a policy will do. That keeps the conversation focused on the issued form and the facts that can be supported.
Describe the operations behind the exposure
A business may face employee theft, altered payment instructions, forged checks, vendor impersonation, misuse of money or securities, fraudulent invoices, or a compromise of payment credentials. The loss mechanism and the person who authorized the transfer can be important facts.
Write a short account description that names the locations, customers, vendors, employees, property, and contracts involved. Include the date the exposure began and any change from the prior year. An underwriter or policy reviewer cannot reliably infer those facts from an industry label, a certificate, or an old declaration page.
Gather the records before comparing terms
Collect banking records, payment approvals, accounting entries, original communications, employee roles, vendor verification records, security logs, internal controls, date of discovery, recovery steps, prior incidents, and all current crime and cyber declarations.
Use original documents where possible. A policy review is stronger when the dates, legal entities, values, and responsibilities in the operating records match the submission and the policy. If a document is missing, log the gap rather than filling it with an assumption.
Read the policy terms in context
Compare employee-dishonesty, forgery, computer-fraud, funds-transfer-fraud, social-engineering, money-and-securities, third-party, discovery, and reporting wording. Review employee definitions, voluntary-parting exclusions, retentions, sublimits, proof-of-loss conditions, and the relationship between crime and cyber forms.
Read the declarations, policy form, endorsements, and any applicable schedule together. A limit, endorsement title, certificate description, or broker email does not replace the issued wording. Note the page or endorsement that creates each conclusion and list any language that requires a follow-up question.
Work through a realistic scenario
Test this question with one actual business scenario rather than a generic example. For what does commercial crime insurance cover, identify the trigger date, the exact location or account involved, the entity that owns the affected property or owes the service, and the contract or operating record that explains the relationship. Then write down the claimed loss or requirement without changing its language. That description makes it possible to tell whether the review is about first-party property, third-party liability, professional services, employment, funds, data, or a contract promise.
Build a short chronology from the first relevant business change through the current question. Include the policy effective date, acquisition or project date where relevant, change in operations, communications, incident or request, and every notice or document already sent. A chronology does not decide coverage, but it often exposes missing records, a policy-period issue, or a contract deadline that would be invisible in a single summary.
Break the financial and operational impact into parts
Do not use one total amount or broad label for every consequence. Separate direct repair or replacement, property of others, lost sales or rent, payroll, extra expense, customer credits, professional remediation, legal demand, or a funds-transfer amount as applicable. Each category can be governed by a different definition, deductible, limit, waiting period, valuation rule, or exclusion. A business may face employee theft, altered payment instructions, forged checks, vendor impersonation, misuse of money or securities, fraudulent invoices, or a compromise of payment credentials. The loss mechanism and the person who authorized the transfer can be important facts.
For each category, record the source document and the person who can explain it: invoice, payroll report, rent roll, system log, contract, inventory schedule, repair estimate, bank record, or signed statement of work. Keep estimates dated and show the assumptions behind them. This gives the business a disciplined basis for a policy or contract discussion without presenting an early calculation as a final claim value.
Ask form-level follow-up questions
Use the policy comparison to ask narrow questions: which entity is an insured; which scheduled location, vehicle, service, or property is involved; which exclusion or condition applies; whether a sublimit, deductible, retention, or waiting period changes the result; and whether an endorsement modifies the base form. Compare employee-dishonesty, forgery, computer-fraud, funds-transfer-fraud, social-engineering, money-and-securities, third-party, discovery, and reporting wording. Review employee definitions, voluntary-parting exclusions, retentions, sublimits, proof-of-loss conditions, and the relationship between crime and cyber forms.
If an agreement requires a certificate, additional-insured status, a waiver, a specific limit, or a notice provision, identify the exact clause and its deadline. Keep the answer tied to the issued form or endorsement, not a general assurance. Where the contract asks for more than the policy can show, record that mismatch for the business and its counsel before a deadline turns it into an operating problem.
Separate contracts, controls, and insurance
A customer agreement, lease, vendor agreement, employment policy, safety procedure, or payment-control process can create duties that a policy does not automatically mirror. Review the document that created the obligation alongside the policy. Route legal interpretation to counsel and operational decisions to the people responsible for the work.
Do not convert a certificate request, audit response, vendor promise, or internal procedure into a coverage conclusion. The record should identify who requested the term, when it is needed, and whether the issued documents actually show it. Map the money movement and verification process before selecting a policy to review. Similar fraud labels can hide different policy definitions, so the transaction record must lead the analysis.
Keep a usable review record
Keep a payment-control map, bank instructions, vendor callback procedures, dual-approval evidence, account-change logs, incident diary, recovery correspondence, and notices submitted under each potentially relevant policy.
Set a future review trigger for the next contract, new location, equipment purchase, staffing change, loss, financing event, vendor change, or renewal. A dated file gives the business a way to compare the next decision with the operations and terms that existed when this one was made.
Questions to bring to the coverage review
- What exact event, activity, or contract requirement is being evaluated?
- Which entity, location, people, property, data, or funds are involved?
- Which issued policy form, endorsement, declaration, and schedule need to be read?
- What operating record supports each material fact?
- What remains unresolved, and who owns the next question?
- Have future change triggers been recorded before renewal?