Every employer that sponsors a 401(k) needs an ERISA fidelity bond, and almost every employer that sponsors a 401(k) also needs something the bond does not provide. The bond is required by law and protects the plan from dishonesty. Fiduciary liability insurance is optional and protects the people who make plan decisions. Sponsors routinely buy one, assume it does the job of the other, and find out during an audit or a claim that they were uninsured for the exposure that actually mattered.
This is not a paperwork issue. It is one of the few places in retirement plan administration where a coverage gap is both easy to find and easy to fix, which is exactly why the Department of Labor asks about it on the annual return.
The Two Coverages Are Not Interchangeable
Start with the distinction, because everything else follows from it.
1. The ERISA fidelity bond protects the plan
ERISA section 412 requires that every person who “handles” plan funds or other property be covered by a bond against loss caused by fraud or dishonesty. The insured party is the plan, not the employer and not the individual. If a payroll clerk diverts deferrals, the bond makes the plan whole. It is closer to an employee-dishonesty bond than to insurance in the ordinary sense — and because the plan is the beneficiary, the bond may be paid from plan assets.
2. Fiduciary liability insurance protects the fiduciaries
Fiduciary liability insurance responds to claims that a fiduciary breached a duty — imprudent investment monitoring, unreasonable fees, a failure to follow plan terms. No honesty violation is required; ordinary carelessness is the point. This coverage is not mandated by ERISA, and because it protects individuals rather than the plan, it is generally an employer expense, not a plan expense. If your only coverage is the required bond, your committee members are personally exposed to precisely the claims that get filed.
Who Actually Has to Be Bonded
“Handling” funds is broader than signing checks. It generally reaches anyone with physical contact with plan assets, authority to direct disbursements, signature authority, or decision-making power over how funds move — including people who could divert funds without another person’s cooperation. Practically, that often means:
- Officers and owners who sign or approve plan disbursements
- Payroll and HR staff who transmit deferrals and set up withholding
- Trustees named in the plan document, and anyone acting for the trustee
- Committee members with authority over distributions or transfers
- Third parties who handle plan funds, unless they are separately bonded or exempt
Two traps. First, sponsors bond “the company” and assume individuals are covered — check whether the bond names the plan as insured and covers persons by position or by name, and whether new hires are automatically picked up. Second, sponsors assume the recordkeeper’s bond covers their staff. It does not; it covers the recordkeeper’s people. Your internal staff still need coverage, and the division of duties should be written down the way you would document any other plan governance process.
How Much Bond Is Enough
ERISA sets the required bond amount as a percentage of the funds handled during the preceding plan year, subject to a statutory minimum per plan and a maximum — with a higher maximum when the plan holds non-qualifying employer securities. Because those figures are indexed and fact-specific, confirm the current numbers with your bonding agent rather than reusing a figure someone quoted years ago.
What matters operationally is the mechanic most sponsors miss: the bond amount is recalculated every year. A plan that grows, adds a participating employer from a controlled group, or absorbs assets in a merger can outgrow a bond that was correct when it was purchased. A stale bond amount is a genuine violation even though nothing was stolen.
Where the DOL Sees Your Answer
The Form 5500 asks whether the plan was covered by a fidelity bond and for the amount. A blank, a “no,” or an amount that looks small next to reported assets is a low-cost screening signal — the kind of inconsistency that invites a letter. Because the plan sponsor signs that return under penalty of perjury, the bond question belongs on the same pre-signature review as everything else. If you are not sure who reviews it at your company, start with who signs the Form 5500 and then with what that person should actually review before signing it.
A Coverage Self-Check Sponsors Can Run This Quarter
- Locate the current bond and confirm the plan is a named insured.
- Confirm the coverage period is current and note the renewal date.
- Recompute the required amount from last year’s funds handled and compare it to the bond’s face amount.
- List everyone who handles plan funds today — including recent hires and anyone who gained signature authority — and confirm the bond’s language reaches them.
- Confirm the carrier is on the Treasury’s list of approved sureties.
- Check whether the bond excludes anyone it should not, and whether it names people who have left.
- Separately confirm whether you carry fiduciary liability insurance, who is insured, and what the limits and exclusions are.
- Save the bond, the amount calculation, and the invoice in your fiduciary file with the date of review.
Run this alongside your normal audit readiness work. If the plan is above the participant-count threshold that triggers an independent audit, your auditor will ask for the bond anyway, and audit support goes faster when the file already exists.
Where Sponsors Get Hurt
- Bond lapsed at renewal because it sat with a general business policy nobody reviewed.
- Bond amount never updated after asset growth or a plan merger.
- Only the owner is covered; the payroll staff who actually transmit deferrals are not.
- Fiduciary liability premiums paid from plan assets — a settlor-type expense charged to the plan, which is its own problem alongside other prohibited transaction risks.
- Assuming the bond covers investment-selection claims. It does not.
- No documentation, so a correct answer on the return cannot be supported.
What You Can Delegate — and What You Cannot
You can delegate the calculation, the annual recheck, the recordkeeping and the reporting. You cannot delegate the decision to buy coverage, the choice of limits, or the settlor decision about who pays. Those stay with the employer, the same way plan design choices do.
What you can move off your desk is the administrative burden and, critically, the named-fiduciary role itself. Admin316 does what most providers decline to do: we accept the ERISA 402(a) named fiduciary appointment in writing, alongside 3(16) plan administration — so the person tracking your bond, your notices and your filings is contractually accountable for them, not just helping. If you want to see how that changes your own exposure, compare it with your current ERISA plan administrator arrangement and with the plan administrator vs. trustee split in your document.
Book a Fifteen-Minute Coverage Review
Bring your bond, your last Form 5500 and your list of people who touch plan funds. We will tell you where the gap is.
