A fake invoice or hacked email can send a payment to a criminal. It can also lock project files with ransomware or expose customer details before a job starts.
For a sole trader or small contractor, the cost is not just lost money. It can delay work, leave suppliers unpaid and keep you off site.
Trades & contractors cyber insurance can help after a hacked email, ransomware attack or stolen customer data. It may pay for response help, data recovery, downtime and some financial losses.
Public liability and contractors’ all risks cover different losses. The cover you need depends on your trade, systems, payments and policy terms.
Why trade businesses need cyber cover and how it fits with other policies
Cyber liability insurance matters when a digital problem can cost money or delay a job. It also matters when customer information could be exposed.
A sole trader with one email account may face less risk than a larger contractor. A larger firm may have staff, cloud accounts and supplier payments. Neither is safe from phishing.
Builders, electricians, plumbers, roofers and HVAC firms often fear falls, damaged pipes or stolen tools. Those risks are real. But a false bank-details email can also send thousands of pounds to a criminal.
Cyber liability insurance can help after a digital incident. Public liability, professional indemnity and contractors’ all risks cover different losses.
Those other policies may cover injury, property damage, poor advice or physical works. One policy does not replace another because it has a high limit.
It is like buying a van lock and expecting it to insure the van.
Email is a common route for phishing. Phishing is a message that tricks someone into sharing a password or making a payment.
Online banking, cloud accounts, estimating apps and shared project folders can all be hit. One stolen password can be enough.
Customer names, addresses, phone numbers and property access details are personal data. A loss, wrong send or criminal access may be a data breach under UK GDPR.
Choose a cyber limit for the largest likely loss, not turnover alone. Include a large supplier payment, system repair and several weeks of delayed jobs.
You may also need to tell affected customers about a breach.
Insurers often ask about multi-factor authentication, or MFA. MFA needs a second identity check, such as a phone code.
The National Cyber Security Centre recommends MFA, updates and backups. Its guidance is on the NCSC website.
- Turn on MFA for email, banking, accounting and project software accounts.
- Test backups by restoring a file, rather than assuming the backup works.
- Verify payment changes by phone, using a known contact number.
- Record key controls so proposal form answers stay accurate and consistent.
Risks and costs by trade in the UK
The right policy depends on your trade, payment methods and client data. UK cyber insurance costs can vary a lot.
A sole trader with basic cover may see annual quotes between £75 and £250. A small trades firm may see between £250 and £1,000.
A contractor with staff or higher limits may see between £1,000 and £5,000 or more. These are market guides, not promised prices.
Insurers look at turnover, staff numbers, data held and past incidents. They also assess limits, excess, payment checks and cyber safety.
Your payment process can affect both price and claim terms.
| Trade | Common digital risk | Cover to check | Possible exclusion |
|---|
| Builder or roofer | Supplier invoice diversion | Social engineering fraud | No independent payment check |
| Electrician or plumber | Lost customer call-out data | Breach response and legal costs | Known breach before cover began |
| HVAC contractor | Ransomware locks scheduling | Data recovery and business interruption | Waiting period not met |
| IT contractor | Client claim after service failure | Cyber and professional indemnity | Contractual liability not insured |
Invoice fraud affects site payments
The most common error is treating an email reply as proof of a real change. Call a known supplier contact using your existing number.
Do not use a number shown in the new email. A criminal may control that number too.
Ransomware can stop planned work
A policy may fund forensic checks, specialist response and data recovery. It may also fund extortion support and extra costs.
It may cover lost income where the wording includes business interruption. You must also prove the loss.
A typical cyber incident route1. Fake email arrives2. Password or payment is given3. Systems or funds are affected4. Insurer’s response team helps contain loss
Report a suspected attack early. This may help stop payments and limit data loss.
A real claim can show why an extension matters more than the headline limit. A builder gets a fake supplier invoice after a criminal enters a genuine email thread.
The criminal changes the bank details. The accounts team pays £8,500 for materials.
The supplier has not been paid, and delivery is delayed. Invoice diversion or social engineering cover may help with the transfer.
That cover only helps if the policy includes it. The business must also meet any payment check rules.
Fast reporting can make a real difference.
A separate ransomware claim may hit an HVAC firm’s scheduling software. It may also lock customer records and job files.
Data recovery and business interruption cover may then respond. The policy wording decides what is paid.
What cyber cover pays for and excludes
A policy can pay for specialist help and listed financial losses after a covered event. The headline limit is not the full picture.
Check smaller limits, known as sub-limits. Check invoice fraud, data recovery, business interruption and legal costs.
Business interruption cover pays only when a covered cyber event causes proven lost income or extra cost. It often starts after a waiting period.
Waiting periods can run between 6 and 24 hours. The indemnity period may run between 3 and 12 months.
The indemnity period is how long you can claim losses.
Cyber insurance suits trades that use email, online banking or digital records. It does not replace cover for injury, poor work or damaged property.
Cover that needs a wording check
Cyber crime or social engineering cover may pay for an authorised payment made after deception. This differs from a criminal taking money straight from your account.
Each policy can define these losses in different ways. Read the wording before you rely on this cover.
Exclusions that catch contractors out
Physical damage is often outside cyber insurance. A hacked control system may damage plant, tools, contract works or a client’s building.
Contractors’ all risks or another specialist policy may then be needed. Cyber cover alone may not pay for that damage.
A policy with cyber liability insurance can protect a contractor from claims by others. This may apply when a digital incident causes someone else a loss.
For example, customer records may go to the wrong recipient. A client may complain about data handling or seek compensation after a UK GDPR breach.
Subject to the wording, cover may include a 24/7 helpline and forensic support. It may also include a breach plan, legal advice and notification costs.
It can also include defence costs.
This third-party cover differs from restoring your own files. It deals with effects on customers, clients and other people.
Frequently asked questions
Does cyber insurance cover a fake invoice?
It may cover a fake invoice through social engineering or payment diversion fraud cover. That extension must be included.
Many policies require an independent check of changed bank details. Check by phone before you pay.
How much does cyber insurance cost in the UK?
A sole trader may see quotes between £75 and £250 a year. Firms with staff and higher limits may pay £1,000 to £5,000 or more.
Turnover, data, past claims, controls, limits and excess affect the price.
Does public liability cover a hacked email?
No, public liability usually covers accidental injury or property damage to third parties. It does not usually pay for IT checks, ransomware, stolen data or false transfers.
Does cyber insurance cover ransomware?
It may cover incident help, data recovery, extortion support and business interruption. Check the waiting period, sub-limits and security rules first.
Do IT contractors need cyber and professional indemnity?
Often, yes, because the policies cover different losses. Cyber cover may respond to a breach or attack on your systems.
Professional indemnity may respond when your advice or service causes a client financial loss.
Choose cover that matches how you trade
A useful cyber policy should match how money, data and work move through your firm. For UK trades, check invoice fraud, ransomware response, data recovery and downtime.
For contractors using email and online payments, cyber cover works best with payment checks, tested backups and suitable trade policies.
Cyber cover may be less relevant if your business has no email, banking or digital records. That is now rare for most trades.
It will not answer needs for injury, property damage, poor workmanship, tools or contract duties. Those risks may need other policies.
Ask for quotes only after listing your payment methods and key systems. Then compare the policy wording, sub-limits, excess and security conditions.
