Funds-transfer verification (call-back rule)
In one sentence
A rule that any payment or bank-detail change is confirmed by phone at a known number before money moves.
This procedure requires verifying any new payee, bank-detail change, or unusual payment request by calling a previously known number, never one from the request itself. It's free, one page, and prevents the most common small-business loss outright.
Why it's on your cyber insurance application
A named question on crime/funds-transfer supplements; documenting it can be a coverage condition.
How the Readiness Check scores it
The free Check asks the same question a carrier will. Here it is, why it's asked, and the fix if today's honest answer is no. The full application question list has the rest.
Funds-transfer controls
Before changing bank details or sending an unusual payment, do you verify by phone using a known number?
Why carriers ask: Funds-transfer fraud is the single most common small-business loss type. A documented call-back verification procedure is cheap and prevents it, and some carriers require it for full FTF coverage.
If the answer is no: Institute the call-back rule today and tell every person who can move money. It's free and it prevents the most frequent claim type outright.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, that document is:
Guides that cover this
Cybersecurity 101: the basic precautions insurers actually notice
A plain-English starter guide to the cybersecurity basics that move the needle on a cyber insurance application: MFA, EDR, tested backups, patching, email protection, training, and a written incident response plan — most fixable in an afternoon.
Cyber insurance for construction contractors: what carriers require in 2026
Contractors face the same seven cyber insurance requirements as everyone else, plus sharper questions about wire fraud, because construction's payment flows make it a top target for funds-transfer fraud. Here's the contractor-specific readiness list.
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.