Who We Insure
Broker-Dealer Insurance: FINRA Fidelity Bonds, Outage Losses and Suitability Claims
Broker-dealer insurance starts with a rule rather than a risk assessment: FINRA requires most member firms to carry a fidelity bond, and the rest of the program is built around that requirement. For a retail trading app the real exposures sit beyond the bond — an outage during a volatile session that locks customers out of positions, an arbitration claiming an options approval or a margin call was handled unsuitably, an account-takeover campaign that drains customer balances, and a regulatory examination that turns into an enforcement action over disclosures or order handling.
Why broker-dealers & trading apps carry specialized insurance
Trading apps compress all of that into a product that moves fast. Customers are retail and numerous, regulators examine gamification, payment for order flow, and crypto features as closely as traditional suitability, and the technology is the firm, so a software failure is a securities failure. Broker-dealer forms and technology forms each cover part of this and exclude the rest. This guide covers the fidelity bond, broker-dealer professional liability (E&O), cyber for outages and account takeover, D&O for the holding company and its officers, and EPLI, plus what clearing firms, banking partners, and regulators require and what underwriters ask about controls.
Who this guide is for
Written for founders, chief compliance officers, financial and operations principals, and general counsel at FINRA-member broker-dealers, retail trading and investing apps, and fintechs that own or are acquiring a broker-dealer. Self-clearing and introducing broker-dealers serving retail investors through a mobile app; Fintech platforms that own a broker-dealer subsidiary to offer brokerage, fractional shares, or options alongside banking features; Institutional and alternative-trading-system operators with technology-driven execution; Not for investment advisers without a broker-dealer — the wealth management and RIA guides cover advisory firms.
The risk profile of a broker-dealer or trading app
Claims against a broker-dealer come through FINRA arbitration, regulatory examinations, and the firm's own systems. Trading apps add scale: an error that touches one customer in a branch model touches a hundred thousand in an app. Key exposures: Customer arbitration claims over suitability, Regulation Best Interest, options and margin approvals, and failures to execute during outages or trading halts; Regulatory examinations and enforcement over disclosures, order routing and payment for order flow, supervision, communications with the public, and digital engagement practices; Platform outages and order-handling errors in volatile markets, with customer loss claims that aggregate quickly; Account takeover, credential stuffing, and fraudulent ACH and wire activity, with the firm absorbing customer losses it cannot recover; Employee dishonesty, forgery, and trading-account manipulation — the risks the fidelity bond exists for; Securities and investor claims against the holding company and its officers after a funding round, an outage, or an enforcement action.
FINRA Fidelity Bond for broker-dealers & trading apps
FINRA's fidelity bond rule requires member firms that carry customer accounts or otherwise meet the rule's conditions to maintain a blanket fidelity bond with a minimum amount tied to net capital and specific insuring agreements, including employee dishonesty, forgery, and securities loss. The bond is a crime policy in a form FINRA accepts, and the firm must report cancellations and deductible changes. Social-engineering and funds-transfer fraud coverage are usually added by endorsement because the base bond does not contemplate them.
Broker-Dealer Professional Liability (E&O) for broker-dealers & trading apps
E&O responds to customer arbitration and litigation over how the firm handled accounts, orders, recommendations, and disclosures, and it pays defense costs that in FINRA arbitration arrive early and in volume. For a trading app the form must cover technology failures as professional services — an outage that prevented a sale is both — and must not exclude self-directed accounts, options, margin, or digital assets if the firm offers them.
Cyber Liability for broker-dealers & trading apps
Account takeover is the dominant cyber loss for retail brokerages, and the firm usually reimburses customers whether or not it was negligent. Cyber covers incident response, customer notification under the amended Regulation S-P requirements, business interruption from outages, extortion, and third-party liability. Underwriters focus on multi-factor authentication, device binding, withdrawal controls, and the firm's reimbursement policy.
Directors & Officers Liability for broker-dealers & trading apps
The holding company and its officers face investor claims, regulatory investigations, and, for firms with public or widely held shares, securities class actions after outages or enforcement actions. D&O must coordinate with the E&O form so that a regulatory matter that names both the firm and individuals is not disputed between carriers, and it should include investigation costs with a meaningful sublimit.
Employment Practices Liability (EPLI) for broker-dealers & trading apps
Registered representatives, engineers, and operations staff bring discrimination, harassment, and wrongful-termination claims, and departures of licensed staff generate disputes over compensation and customer relationships. EPLI covers the employment claims and should be written with the firm's headcount and state footprint in mind.
Contract and certificate requirements
Clearing firms require introducing brokers to carry E&O and a fidelity bond at stated limits and to indemnify the clearing firm for customer claims and errors; the clearing agreement usually also sets cyber expectations. Banking and payments partners require cyber and crime evidence and audit rights. Regulators require the fidelity bond itself and ask about E&O during membership and continuing-membership applications. Vendor agreements with order-management, market-data, and cloud providers allocate outage liability narrowly, which leaves the broker-dealer holding customer claims the vendor will not pay. The E&O and cyber policies should be sized against that gap.
What coverage costs
E&O pricing for a broker-dealer depends on customer count and account types, the products offered — options, margin, crypto, fractional shares — revenue and net capital, the number of registered representatives, examination and arbitration history, and the maturity of supervision. Self-directed retail apps are priced on scale and outage risk rather than on recommendation risk, but the market treats digital engagement features as a suitability exposure. Fidelity bond pricing follows the required amount, net capital, and controls. Cyber pricing turns on customer balances, authentication and withdrawal controls, and account-takeover loss history. D&O pricing reflects capital raised, ownership, regulatory history, and any public-company exposure.
What underwriters will ask for
Broker-dealer underwriters start with the regulatory file and the technology stack and work outward from there. Have ready: FINRA membership agreement, business lines approved, clearing arrangement, and the most recent examination letters and responses; Customer counts, account types, assets held, and the products offered, including options approval levels, margin, and digital assets; Written supervisory procedures, communications review, and digital engagement practices in the app; Outage history, incident response plan, and the vendors behind order management, market data, and hosting; Authentication, device, and withdrawal controls, account-takeover losses, and the customer reimbursement policy; Arbitration and litigation history, fidelity bond claims, and net capital computations.
Illustrative example: The outage on the busiest day
During a sharp market move, the app's order-routing service fails for ninety minutes. Customers unable to close positions file arbitration claims for their losses, and a regulator opens an inquiry into business continuity planning and customer communications during the event. Broker-dealer E&O defends the arbitration claims and pays awards within its limit, provided the form covers technology failures as professional services. Cyber responds to the firm's own interruption losses under its system-failure trigger, and D&O's regulatory coverage handles the inquiry.
Illustrative example: The credential-stuffing campaign
Attackers use passwords leaked from unrelated breaches to log into several thousand accounts, link new bank accounts, and withdraw funds before the pattern is detected. The firm reimburses customers under its policy and faces a notification obligation and a regulatory question about its authentication controls. Cyber funds the forensic investigation, customer notification, and regulatory defense, and reimburses customer losses the firm pays where the policy's funds-transfer fraud or customer reimbursement coverage applies. The fidelity bond does not respond to third-party theft from customer accounts unless an employee was involved.
Illustrative example: The options approval that should not have been granted
A customer approved for advanced options strategies through an automated questionnaire suffers a large loss and claims in arbitration that the approval process was unsuitable and the risk disclosures inadequate. The claim cites the app's engagement features as encouraging the trading. E&O defends the arbitration and covers any award within the limit. The approval logic, the disclosures, and the supervision record of the automated process are the evidence. D&O may be implicated if a regulator examines the firm's digital engagement practices as a result.
What does broker-dealer insurance cost?
Pricing follows customer count and account types, products offered, revenue and net capital, registered representative headcount, examination and arbitration history, outage history, and the controls around authentication and supervision. As of 2026, retail trading apps are priced primarily on scale, technology failure, and account-takeover exposure, and the E&O and cyber components move the total most.
Is a fidelity bond required for every broker-dealer?
FINRA requires a blanket fidelity bond for member firms that meet the rule's conditions, which covers most firms carrying customer accounts, with a minimum amount tied to the firm's net capital requirement. Firms should confirm the current rule and their own membership agreement, because the required amount and insuring agreements are specific.
Does broker-dealer E&O cover losses from an app outage?
Only if the form treats technology failures as part of the professional services definition and does not exclude system failures or self-directed accounts. Many broker-dealer forms were written for recommendation-based firms, so a trading app needs the technology language negotiated explicitly or a combined E&O and Tech E&O form.
Who pays when a customer's account is taken over?
Usually the firm reimburses the customer and recovers what it can, which is often nothing. Cyber coverage with customer-reimbursement or funds-transfer fraud language responds to the firm's loss; the fidelity bond responds only when an employee was involved. Authentication controls decide both the claim and the renewal.
Does the holding company need D&O if the broker-dealer carries E&O?
Yes. E&O responds to customer claims about the broker-dealer's services; D&O responds to investor, securities, and regulatory claims against the company and its directors and officers. Regulatory investigations often name both, so the two policies should be placed together and their allocation terms aligned.
Are crypto trading features covered?
Not automatically. Many E&O and cyber forms exclude digital assets or sublimit them, and the fidelity bond may not treat them as securities or property. If the app offers crypto, the exposure should be disclosed and the exclusions negotiated, and the custody arrangement reviewed for its own insurance.
Caveats and common gaps
FINRA's fidelity bond requirements are specific to the rule and the firm's net capital; confirm them directly rather than relying on a summary. E&O forms vary in how they treat technology failures, self-directed accounts, options, margin, and digital assets. Cyber customer-reimbursement coverage is not standard and carries sublimits. Regulatory coverage under D&O and E&O funds defense, not fines or disgorgement.
Related guides
Insurance for Fintech SaaS Companies — the fintech platform program this page extends · Insurance for Hedge Funds & Investment Managers — managers of pooled vehicles rather than customer accounts · Fintech industry overview · Insurance for Digital Asset Platforms — exchanges and custodians outside the broker-dealer model · Insurance for Boutique Investment Banks & M&A Advisors · Crime and employee dishonesty coverage · Cyber liability coverage
Frequently asked questions
What does broker-dealer insurance cost?
Pricing follows customer count and account types, products offered, revenue and net capital, registered representative headcount, examination and arbitration history, outage history, and the controls around authentication and supervision. As of 2026, retail trading apps are priced primarily on scale, technology failure, and account-takeover exposure, and the E&O and cyber components move the total most.
Is a fidelity bond required for every broker-dealer?
FINRA requires a blanket fidelity bond for member firms that meet the rule's conditions, which covers most firms carrying customer accounts, with a minimum amount tied to the firm's net capital requirement. Firms should confirm the current rule and their own membership agreement, because the required amount and insuring agreements are specific.
Does broker-dealer E&O cover losses from an app outage?
Only if the form treats technology failures as part of the professional services definition and does not exclude system failures or self-directed accounts. Many broker-dealer forms were written for recommendation-based firms, so a trading app needs the technology language negotiated explicitly or a combined E&O and Tech E&O form.
Who pays when a customer's account is taken over?
Usually the firm reimburses the customer and recovers what it can, which is often nothing. Cyber coverage with customer-reimbursement or funds-transfer fraud language responds to the firm's loss; the fidelity bond responds only when an employee was involved. Authentication controls decide both the claim and the renewal.
Does the holding company need D&O if the broker-dealer carries E&O?
Yes. E&O responds to customer claims about the broker-dealer's services; D&O responds to investor, securities, and regulatory claims against the company and its directors and officers. Regulatory investigations often name both, so the two policies should be placed together and their allocation terms aligned.
Are crypto trading features covered?
Not automatically. Many E&O and cyber forms exclude digital assets or sublimit them, and the fidelity bond may not treat them as securities or property. If the app offers crypto, the exposure should be disclosed and the exclusions negotiated, and the custody arrangement reviewed for its own insurance.
This material is general educational information, not legal, tax, or insurance advice. Coverage availability, policy terms, and regulatory requirements vary by state, carrier, and applicant.