What Is an ERISA Fidelity Bond?

An ERISA fidelity bond protects the plan from dishonest people who can reach plan money or property.

It does not protect a fiduciary from a bad investment decision. It does not pay a claim merely because plan fees were excessive. It is not general liability insurance.

The covered risk is narrower: loss caused by fraud or dishonesty by a person who handles plan funds or property.^[1]

That distinction determines who needs to be covered, how much coverage is required and why a policy labeled "crime insurance" is not automatically an ERISA-compliant bond.

Key Takeaways

• ERISA Section 412 generally requires bonding for every person who handles funds or other property of an ERISA-covered employee benefit plan unless an exemption applies.^[1]
• Bonding follows handling functions, not fiduciary status alone.
• A fiduciary who never handles plan funds may not need to be bonded.
• A nonfiduciary employee or service-provider worker can require bonding if that person's authority creates a risk of dishonest loss to the plan.^[1]
• The ordinary required amount is at least 10% of the funds handled in the preceding year.^[1][2]
• The bond cannot ordinarily be less than $1,000 per plan for a person with handling functions.^[1]
• The ordinary maximum required amount is $500,000 per plan official per plan.^[1][2]
• For a plan that holds employer securities, the maximum required amount rises to $1 million.^[1][2]
• Employer securities held only through a broadly diversified fund such as a mutual or index fund do not necessarily cause the plan to be treated as holding employer securities for this rule.^[1]
• The bond must protect against fraud or dishonesty without a deductible or similar feature that shifts part of the covered loss back to the plan.^[1]
• The plan must be named or otherwise clearly identified as an insured so it can make a claim.^[1]
• The surety generally must appear on the U.S. Treasury's approved-surety list, subject to the applicable DOL rules.^[1]
• Fiduciary liability insurance is different coverage and does not satisfy ERISA Section 412.^[1]

The Bond Protects the Plan

The simplest way to avoid confusion is to identify the insured interest.

ERISA fidelity bond

Protects:

the employee benefit plan

against covered losses caused by fraud or dishonesty by people handling plan assets.^[1]

Fiduciary liability insurance

Generally addresses:

claims involving breaches of fiduciary responsibility

subject to the policy's terms.^[1]

Those are different risks.

A person can steal money without the core issue being a negligent fiduciary process.

A fiduciary can breach the duty of prudence without stealing anything.

One policy should not be assumed to cover the other event.

What Counts as Fraud or Dishonesty?

DOL guidance describes the required bond as protecting against dishonest or fraudulent acts involving plan funds or property.^[1]

Examples include:

• theft
• embezzlement
• forgery
• misappropriation
• wrongful conversion
• wrongful abstraction
• willful misapplication

The plan does not have to prove that the person personally profited in every covered circumstance.^[1]

The key issue is whether the dishonest conduct caused a covered loss.

Who Must Be Bonded?

The answer is not:

"all fiduciaries."

The answer is:

people who handle plan funds or other property, unless an exemption applies.^[1]

DOL calls these people plan officials for bonding purposes.

They commonly include people with functions involving:

• receipt of plan money
• safekeeping
• disbursement
• transfers
• investment authority
• final approval over transactions involving plan assets.^[1]

A Fiduciary May Not Need a Bond

Suppose a benefits committee member has fiduciary responsibility for reviewing plan communications but has no authority to:

• direct investments
• approve distributions
• transfer money
• control property
• supervise anyone performing those functions

Fiduciary status alone does not automatically create the Section 412 bond requirement.^[1]

The handling test still controls.

A Nonfiduciary Can Need Bonding

Reverse the facts.

An employee has no discretion over plan design or investment policy.

But the employee can:

• sign checks from a plan account
• initiate transfers
• direct disbursements

That person may be handling plan funds and require bonding even if the employee is not a fiduciary for other purposes.^[1]

The bond rule is about access and loss exposure.

"Handling" Means More Than Touching Cash

DOL's handling test is broader than physical custody.^[1]

A person can handle plan funds by having:

• physical custody or control
• power to transfer assets
• authority to negotiate plan property
• disbursement authority
• authority to sign checks
• supervisory or decision-making responsibility over activities that require bonding.^[1]

The practical test is:

Could this person's duties allow fraud or dishonesty to cause a loss to the plan?

If yes, bonding deserves analysis.

Example: Investment Committee Never Touches the Account

Assume:

• corporate trustee holds all plan assets
• investment committee chooses the investment managers
• trustee must follow the committee's final directions

The committee members never log into the custody account.

They never touch a check.

They can still be handling plan funds because their investment decisions are final and control what happens to plan property.^[1]

Custody and control are different concepts.

Recommendations Alone Can Be Different

Change one fact.

The committee only recommends investment changes.

A separate fiduciary:

• reviews the recommendation
• has final authority
• can reject it

DOL says the recommending committee members generally are not handling funds solely because of those recommendations when someone else makes the final decision.^[1]

The difference is not how influential the committee feels.

It is who has final authority.

Service Providers Can Need Bonding

A third-party administrator, adviser or other service provider is not automatically required to be bonded merely because it serves the plan.^[1]

Ask what the natural persons working for the provider can actually do.

If they can:

• transfer plan money
• authorize payments
• direct asset movement
• exercise other handling authority

bonding can be required.^[1]

If the provider only performs non-handling functions, Section 412 does not impose bonding solely because the provider has a contract with the plan.

Entity Names Do Not Solve the Handling Test

Suppose the recordkeeper is:

ABC Retirement Services, Inc.

The bonding rule applies to the natural persons performing handling functions on behalf of the entity.^[1]

A compliance review should therefore ask:

• Which employees can move money?
• Which employees can authorize payments?
• Which positions control disbursement?
• Does the provider's bond actually cover those functions for this plan?

Checking only the vendor's corporate name is incomplete.

Some Financial Institutions Have Exemptions

ERISA and DOL regulations contain bonding exemptions for specified institutions and circumstances.^[1]

Examples can include qualifying:

• banks
• insurance companies
• registered broker-dealers
• certain regulated financial institutions

The exemptions are technical.

Do not infer:

"Our custodian is a bank, so everybody connected with the plan is exempt."

An institution's exemption does not automatically extend to unrelated employer personnel who handle plan funds.

The Ordinary Bond Calculation

The general rule is:

10% of funds handled in the preceding reporting year.^[1][2]

Then apply the statutory:

• minimum
• maximum

Minimum

$1,000

General maximum

$500,000

Maximum for plans holding employer securities

$1,000,000.^[1][2]

This is calculated for each plan official with respect to each plan in which that person has handling functions.

Example: $80,000 Handled

Funds handled:

$80,000

Ten percent:

$8,000

Required amount under the ordinary rule:

$8,000

The $1,000 minimum does not matter because 10% is already above it.

Example: The $1,000 Minimum

Funds handled:

$5,000

Ten percent:

$500

ERISA's minimum applies.

Required amount:

$1,000.^[1]

The formula is not simply:

10% no matter what.

Example: $2 Million Handled

Funds handled:

$2,000,000

Ten percent:

$200,000

If the ordinary rules apply, required bond amount:

$200,000

That is below the $500,000 cap.

Example: General $500,000 Cap

Funds handled:

$9,000,000

Ten percent:

$900,000

If the plan does not hold employer securities and no separate enhanced requirement applies, the ordinary maximum required amount is:

$500,000.^[1][2]

A plan can voluntarily purchase more.

ERISA simply does not ordinarily require more under the basic Section 412 formula.

Employer Securities Can Raise the Cap to $1 Million

For a plan that holds employer securities within the applicable ERISA definition, the maximum required bond amount becomes:

$1,000,000.^[1][2]

Example:

Funds handled:

$12 million

Ten percent:

$1.2 million

Plan holds qualifying employer securities.

Ordinary Section 412 maximum required amount:

$1 million

Not Every Trace of Employer Stock Triggers the $1 Million Cap

This point is easy to overstate.

DOL's bonding guidance explains that a plan is not treated as holding employer securities for the enhanced cap merely because the only employer securities are embedded inside a broadly diversified pool such as a mutual fund or index fund.^[1]

That makes sense.

A participant owning an S&P 500 index fund can indirectly hold shares of the employer if the employer is in the index.

That is different from the plan directly holding employer securities as a plan asset.

Coverage Is Based on the Preceding Year

The bond amount generally looks back to:

the funds handled in the preceding reporting year.^[1]

That means the compliance process should revisit the amount.

A bond that was sufficient when a plan had:

$3 million

of assets or handling exposure may be too small after several years of:

• contributions
• market growth
• mergers
• added plans
• changed responsibilities

Buying a bond once and never recalculating it is weak administration.

Multiple Plans Complicate the Math

One person can handle funds for several plans.

One bond can also insure several plans.^[1]

The critical requirement is that each plan be able to recover the amount it would have needed if separately bonded.

Example:

Plan official handles:

• Plan A: $100,000
• Plan B: $500,000

Ten-percent amounts:

• Plan A: $10,000
• Plan B: $50,000

If both are insured under one bond, the arrangement must provide enough protection for the required exposure of each plan.^[1]

A single blanket dollar limit should not accidentally make the plans compete for inadequate coverage after one loss.

The Plan Must Be an Insured

DOL guidance says the plan whose funds are handled must be:

• specifically named, or
• otherwise identified clearly enough

that the plan can make a claim after a covered loss.^[1]

An employer's generic crime policy does not automatically satisfy that requirement.

The plan needs enforceable protection.

An Employer Crime Policy Can Work—If Modified Correctly

ERISA allows flexibility in bond form.^[1]

A plan can potentially be added to an employer's:

• commercial crime policy
• blanket bond
• other qualifying arrangement

The policy may need an:

ERISA rider

or comparable modification so that it satisfies Section 412.

The title of the policy is not the compliance test.

Read the coverage.

No Deductible Against the Plan

A compliant ERISA fidelity bond cannot use a deductible or similar device that transfers part of a covered fraud or dishonesty loss back to the plan.^[1]

Suppose:

• theft loss: $100,000
• policy deductible: $25,000
• plan absorbs first $25,000

That structure does not satisfy the Section 412 requirement for the covered exposure merely because the total policy limit is high enough.

A cheap premium obtained by making participants bear the first layer of theft loss defeats the purpose of the bond.

The Surety Must Be Acceptable

DOL states that the bond generally must be placed with a surety or reinsurer named on the U.S. Treasury's approved-surety list, subject to the applicable regulations.^[1]

This is another reason not to buy the first product labeled:

ERISA bond

from an unknown provider.

The surety matters.

A Service Provider Can Buy Its Own Bond

ERISA does not require the plan itself to purchase every required bond.^[1]

A service provider can maintain a separate bond that protects its plan clients.

The plan fiduciary still needs to confirm:

• the provider is actually covered
• this plan is actually insured
• the amount is sufficient
• the surety is acceptable
• the terms comply with ERISA

"Vendor says it is bonded" is not the same as verifying the bond.

Can the Plan Pay the Premium?

Yes.

DOL says a plan can pay the cost of a proper Section 412 bond from plan assets because the bond protects the plan rather than relieving plan officials of their obligations.^[1]

The expense still falls within ordinary fiduciary standards.

A fiduciary should not overpay simply because the expense is permitted.

Fidelity Bond vs. Fiduciary Liability Insurance

Buying one should never be treated as buying the other.

Fiduciary Liability Insurance Is Optional

DOL expressly states that fiduciary liability insurance is not required by ERISA Section 412.^[1]

A plan or fiduciary can choose to purchase it.

If plan assets pay for fiduciary insurance, ERISA Section 410 imposes additional considerations involving insurer recourse against the fiduciary for a fiduciary breach.^[1]

That issue is separate from the fidelity bond.

Commercial Crime Insurance Is Broader but Not Automatically Compliant

Commercial crime coverage can protect an employer against risks such as:

• employee theft
• forgery
• computer fraud
• funds-transfer fraud

It can overlap with ERISA fidelity coverage.

The overlap does not guarantee compliance.

Check whether the policy:

• names or identifies the plan
• covers required plan officials
• uses an approved surety
• provides the required amount
• avoids a prohibited deductible
• includes required discovery protection.^[1]

An ERISA rider often exists for exactly this reason.

Cyber Insurance Is Another Separate Layer

Cyber insurance can address risks such as:

• data breach
• ransomware
• network interruption
• incident response
• cyber liability

A fidelity bond may cover some dishonest acts involving plan property, depending on facts and terms.

It is not a substitute for a dedicated cyber-risk analysis.

INV-075 explains why cybersecurity is now part of prudent service-provider oversight.

The One-Year Discovery Requirement

ERISA bonding rules require protection for losses discovered during a specified period after the bond ends.

DOL guidance describes a required:

one-year discovery period

for losses that occurred during the term of the bond.^[1]

This becomes important when a plan changes carriers.

A replacement policy should not accidentally create a gap for theft that occurred under the old bond but was discovered later.

Small-Plan Audit Waiver: The Important Exception to the Simple 10% Rule

A small pension plan can sometimes avoid the annual independent audit otherwise attached to Form 5500 reporting if it satisfies DOL's small-plan audit-waiver conditions.

One of those conditions can create an enhanced bond requirement.^[1][2]

If non-qualifying plan assets exceed:

5% of total plan assets

the bond can need to cover:

100% of the value of the non-qualifying assets

to preserve the audit waiver.^[1][2]

That can be far larger than 10%.

Example: Small Plan With Non-Qualifying Assets

Assume:

• total plan assets: $2 million
• non-qualifying assets: $300,000
• non-qualifying percentage: 15%

The ordinary Section 412 formula might point toward a lower number depending on funds handled.

But if the plan wants to rely on the small-plan audit waiver, DOL's enhanced rule can require bonding of at least:

$300,000

for the non-qualifying assets.^[1][2]

This is not a general replacement of Section 412.

It is an added condition tied to avoiding the audit.

What Are Non-Qualifying Assets?

The small-plan audit-waiver rule has a specific definition.

The analysis can turn on whether assets are held by or reflected through qualifying institutions or structures, and whether participants receive specified statements.

Examples requiring closer review can include:

• certain private investments
• unusual self-directed assets
• property not held through qualifying regulated institutions
• assets lacking the prescribed independent evidence

Do not classify an asset from its investment label alone.

The custody and reporting structure matter.

Why This Rule Exists

The small-plan audit waiver removes an independent audit.

DOL compensates for that reduced independent scrutiny by imposing protections around asset custody, participant information and bonding.

If too much of the plan sits outside qualifying institutional structures, stronger bonding can become the price of keeping the audit waiver.

That trade-off is substantive, not paperwork.

Bonding Appears in Form 5500 Compliance

Form 5500 financial schedules include fidelity-bond information for plans subject to the reporting requirements.^[2][3]

That makes the bond part of the plan's annual compliance record.

A mismatch between:

• reported plan assets
• people handling those assets
• bond amount

can be visible to regulators.

A Practical Annual Bond Review

Do this before treating last year's bond as current.

Identify everyone with handling authority

Include:

• employer personnel
• committee members
• trustee personnel where not exempt
• service-provider personnel where applicable

Map the authority

Who can:

• move money
• approve distributions
• sign checks
• direct investments
• authorize transfers?

Calculate prior-year exposure

Apply the 10% rule, minimum and applicable cap.

Check employer securities

Determine whether the $1 million maximum applies.

Check the small-plan audit waiver

If relying on it, test the percentage of non-qualifying assets.

Read the actual policy

Confirm:

• insured plan
• covered positions or people
• surety
• amount
• deductible
• discovery period

A certificate showing only a coverage limit is not a complete review.

Five Bonding Mistakes Worth Catching

1. Bond amount never updated

Plan grew; policy did not.

2. New committee member has final investment authority but is not covered

Titles changed more slowly than responsibilities.

3. Service provider says "bonded" but the plan is not an insured

Vendor protection and plan protection are not automatically the same.

4. Crime policy has a deductible

That can fail ERISA's no-deductible requirement for the statutory bond exposure.^[1]

5. Small plan relies on audit waiver while holding too many non-qualifying assets for ordinary bond coverage

The enhanced rule can be missed because the basic 10% formula looks satisfied.^[1][2]

Frequently Asked Questions

What is an ERISA fidelity bond?

It is the bond required under ERISA Section 412 to protect a covered employee benefit plan from losses caused by fraud or dishonesty by people who handle plan funds or property.^[1]

Does every 401(k) need an ERISA fidelity bond?

Most funded ERISA-covered 401(k) plans have people who handle plan funds and therefore have bonding requirements. Specific exemptions can apply to certain persons or institutions.^[1]

Does every fiduciary have to be bonded?

No. Fiduciaries generally require bonding only when they handle plan funds or property and no exemption applies.^[1]

Can someone who is not a fiduciary need to be bonded?

Yes. Bonding depends on handling authority, not fiduciary status alone.

How much fidelity bond does a 401(k) need?

The general rule is at least 10% of funds handled in the preceding year, with a $1,000 minimum and ordinarily a $500,000 maximum per plan official per plan.^[1][2]

When does the $1 million maximum apply?

It applies to a plan that holds employer securities within the applicable ERISA definition.^[1][2]

Does an S&P 500 fund holding my employer's stock trigger the $1 million cap?

Not merely for that reason. DOL states that a plan is not treated as holding employer securities for this enhanced cap when the only employer securities are held as part of a broadly diversified fund such as a mutual or index fund.^[1]

Can an ERISA fidelity bond have a deductible?

Not for the required coverage if the deductible shifts a covered fraud or dishonesty loss back to the plan.^[1]

Is fiduciary liability insurance the same as an ERISA fidelity bond?

No. Fidelity bonding protects the plan against fraud or dishonesty by people handling assets. Fiduciary liability insurance addresses a different class of risk and is not required by Section 412.^[1]

Can the plan pay for the fidelity bond?

Yes. DOL permits a proper Section 412 bond to be purchased with plan assets.^[1]

Can a service provider carry the bond instead?

Yes, if its bonding arrangement properly protects the plan and satisfies the ERISA requirements for the people and functions involved.^[1]

Does the bond have to come from an approved company?

Generally yes. The surety must satisfy DOL's requirements, which ordinarily include being on the Treasury Department's approved-surety list.^[1]

Why would a small plan need more than 10% bonding?

A small pension plan using the annual audit waiver can face an enhanced bonding requirement when non-qualifying assets exceed 5% of total plan assets.^[1][2]

The Check That Prevents Most Bonding Errors

Ignore job titles for a moment.

List every person who can cause plan money or property to move.

Then ask:

• Can this person transfer it?
• Can this person authorize its transfer?
• Can this person decide how it is invested?
• Can this person approve a disbursement?
• Can this person supervise someone whose handling decision is final?

That is where bonding starts.

The coverage amount comes second.

Sources & References

1. U.S. Department of Labor: Field Assistance Bulletin 2008-04 — ERISA Fidelity Bonding Requirements
2. U.S. Department of Labor: Fiduciary Investigations Program — Bonding Computation
3. U.S. Department of Labor: Form 5500 Series
4. U.S. Department of Labor: Meeting Your Fiduciary Responsibilities

Educational Disclaimer

ROIStreet publishes educational content about retirement-plan administration and ERISA. This article is not legal, insurance, fiduciary or compliance advice. Bond requirements depend on plan structure, assets, handling authority, institutional exemptions, policy terms and the specific people performing plan functions.

The ROIStreet Reader Promise

We strive to explain before we evaluate, present evidence before opinions, discuss risks alongside potential benefits, distinguish facts from analysis, and correct material errors transparently.

Our purpose is to help readers better understand investing—not to tell them what to do.