What Every Law Firm Should Know About Trust Account Coverage
Summary
Trust account theft and mismanagement are among the most serious risks law firms face. Understanding how insurance does and does not protect your client funds is critical.
Client trust accounts are a fundamental aspect of legal practice and one of its most regulated areas. Every attorney who handles client funds is subject to strict rules governing how those funds are held, managed, and disbursed. When something goes wrong with a trust account, whether through theft, fraud, or mismanagement, the consequences can include bar discipline, malpractice claims, criminal prosecution, and the destruction of a firm's reputation. Understanding how insurance applies to trust account risks is essential for every law firm.
IOLTA Requirements and Regulatory Framework
Interest on Lawyers' Trust Accounts programs exist in every state, requiring attorneys to deposit client funds that are nominal in amount or expected to be held for a short period into pooled interest-bearing accounts. The interest earned is remitted to the state's IOLTA program to fund legal aid services. While the IOLTA structure serves an important public purpose, it also creates a complex regulatory framework that firms must navigate carefully.
Every state has specific rules about which funds must go into IOLTA accounts versus individual client trust accounts, how records must be maintained, and how frequently accounts must be reconciled. Violations of these rules, even unintentional ones, can trigger bar disciplinary proceedings. More importantly from an insurance perspective, the way a firm manages its trust accounts directly affects its insurability and the scope of coverage available.
Carriers view trust account management as a key underwriting factor. Firms that can demonstrate rigorous trust account procedures, including three-way reconciliation, dual signatory requirements, and regular internal audits, are viewed as lower risks and receive more favorable terms. Firms with a history of trust account irregularities may face exclusions, higher premiums, or difficulty finding coverage at all.
Fidelity Bonds and Crime Coverage
A fidelity bond, sometimes called employee dishonesty coverage, protects a firm against theft by its own employees or partners. This is a distinct coverage from professional liability insurance and is critically important for firms that handle client funds. If a bookkeeper embezzles from the firm's trust account, or a partner misappropriates client funds, a fidelity bond responds to reimburse the stolen amounts.
Without a fidelity bond, the firm is directly liable to the affected clients for the full amount of the misappropriated funds. Depending on the amount involved, this exposure can be existential. Fidelity bonds are relatively inexpensive compared to the risk they mitigate, and every firm that handles client funds should carry one.
When purchasing a fidelity bond, pay attention to the coverage limit, which should reflect the maximum amount of client funds your firm holds at any given time. Also review the definition of covered employees to ensure it includes partners, associates, and any non-attorney staff with access to trust account functions. Some policies require that the firm have specific internal controls in place as a condition of coverage, such as dual authorization for disbursements over a certain amount.
Get a free coverage review
Tell us about your firm and we'll compare your current program against best practices -- no cost, no obligation.
Trust Account Theft Exclusions in Malpractice Policies
One of the most important and frequently misunderstood aspects of law firm insurance is how malpractice policies treat trust account losses. Most legal malpractice policies are designed to cover claims arising from professional negligence in the delivery of legal services. They are not designed to cover theft, fraud, or criminal acts.
If a firm's trust account is compromised by a cyber attack, such as a business email compromise scheme that redirects a wire transfer, the malpractice policy will generally not respond. This is a cyber insurance claim, not a malpractice claim. If an employee embezzles funds from the trust account, the malpractice policy will not respond because the loss arises from criminal conduct, not professional negligence. This is a fidelity bond claim.
If an attorney makes a negligent error in disbursing trust account funds, such as releasing funds to the wrong party or disbursing before a check clears, the malpractice policy may respond because the loss arises from a professional error. However, even in these scenarios, coverage is not guaranteed. Some malpractice policies contain specific exclusions for claims arising from the handling of client funds or trust account activities. Others limit coverage for claims involving conversion of client property.
The critical takeaway is that no single insurance policy covers all trust account risks. A comprehensive approach requires three layers: a malpractice policy for professional errors, a fidelity bond for employee theft, and a cyber policy for technology-enabled fraud. Firms that rely solely on their malpractice policy for trust account protection have significant coverage gaps.
Sizing Your Coverage Appropriately
Determining the right amount of trust account-related coverage requires an honest assessment of your firm's exposure. Start by calculating the maximum amount of client funds your firm holds at any given time across all trust accounts. This figure should inform the limits on your fidelity bond.
For cyber coverage, consider the largest single wire transfer your firm handles and ensure your social engineering or funds transfer fraud coverage is adequate to cover that amount. Many cyber policies sublimit this coverage, so you may need to negotiate higher sublimits or purchase additional crime coverage.
For malpractice coverage, consider how trust account errors could generate claims. A real estate firm that handles closings may face claims involving hundreds of thousands of dollars in misapplied funds. A personal injury firm that disburses settlements may face claims from clients alleging errors in lien calculations or distribution amounts. Your malpractice limits should account for these potential claim scenarios.
Practical Steps for Trust Account Risk Management
Beyond insurance, firms should implement robust trust account procedures that reduce the likelihood of losses and demonstrate good-faith compliance to insurers and regulators. Perform three-way reconciliations monthly, comparing the bank statement, the individual client ledgers, and the trust account check register. Require dual authorization for all disbursements above a specified threshold. Segregate duties so that the person who initiates disbursements is not the same person who reconciles the accounts.
Conduct quarterly internal audits of trust account activity and maintain complete records of all deposits, disbursements, and transfers. Train all staff with trust account access on the firm's procedures and on common fraud schemes targeting trust accounts. Document everything, and keep your records for the period required by your state bar rules, which is typically five to seven years.
Trust account management is one of the highest-stakes aspects of running a law firm. The insurance implications are complex and require a multi-layered approach. Work with a broker who understands the interplay between malpractice, fidelity, and cyber coverage to ensure your firm has no gaps in its trust account protection.
Frequently asked questions
Does my malpractice insurance cover theft from my firm's trust account?
What is a fidelity bond and does my law firm need one?
How often should my firm reconcile its trust accounts?
Key terms
Need help evaluating your program?
Get a free coverage review -- we'll compare your current insurance against best practices for your firm size and practice areas.