Social Engineering Fraud is Surging. Your Insurance Assumptions May Be Wrong.
Expertise
January 9, 2026

Social engineering has always been about people. What is different now is the payoff. More attacks aim to move money, not just steal data. One convincing email can redirect a vendor payment, drain a treasury account, or trigger an urgent wire that never should have left the building.

This is not a side issue for Chief Information Security Officers (“CISOs”) and their teams. You are accountable for business resilience. Social engineering fraud is a business loss that often enters through security channels and then lands as a financial event. It can bypass the incident patterns your playbooks are designed to catch. It can also reveal a second issue: teams assume insurance will cover the loss, then discover the coverage picture is more complicated than expected.