Does Cyber Insurance Cover Wire Fraud From a Fake Supplier Email Scam?
Often, but only if the right endorsement is in place. When a scammer impersonates a food supplier or vendor by email and convinces your bookkeeper to redirect a payment, that is a social-engineering or business email compromise loss, and it is typically covered under a funds-transfer-fraud or social-engineering endorsement attached to a Cyber Liability policy, not automatically under the base policy.
How a Spoofed Supplier Email Wire Fraud Scam Actually Works
A restaurant's accounts payable contact receives an email that looks exactly like it came from a regular food or beverage supplier, often using a spoofed domain that is one letter off from the real one. The email requests that an upcoming invoice be paid to "updated" bank account details. Nothing about the request looks unusual because the invoice amount, the supplier name, and the tone all match past correspondence. The payment goes out, and days later the real supplier calls asking why they have not been paid.
Business Email Compromise (BEC): Why the FBI Classifies This as Cybercrime
This is classified as business email compromise, one of the largest loss categories tracked in the FBI IC3 2024 Internet Crime Report, which breaks out BEC losses separately and shows real dollar figures running into the billions annually across victims of all sizes. The FTC's guidance on recognizing and avoiding phishing scams describes the exact pattern: a convincing, well-timed impersonation that exploits a routine business process rather than a technical system flaw.
Social Engineering and Funds-Transfer-Fraud Endorsements: What They Cover
Because no system was hacked and no data was technically stolen, base cyber policies do not automatically cover the lost funds. Coverage for this specific loss comes from a social-engineering or funds-transfer-fraud endorsement, which most cyber carriers offer as an add-on with its own sub-limit, often lower than the overall policy limit. Confirm this endorsement is on your policy specifically, since "cyber liability" as a category name does not guarantee it is included by default.
Gift Card Fraud: A Related Scam Targeting a Different Restaurant Asset
Fake supplier emails target your accounts payable process. A related but distinct fraud vector targets a different asset entirely, your gift card and loyalty program, covered in Does Cyber Insurance Cover Gift Card or Loyalty Program Fraud. Both rely on deception rather than a system breach, which is why they are underwritten and triggered differently than a data breach claim.
Get restaurant insurance built around how you actually operate.
Tell us your concept, your coverage questions, and your state — and we'll put together the coverage that actually applies.
Get a Cyber Liability Quote