A 401(k) surety bond is the ERISA fidelity bond that federal law requires almost every private-sector retirement plan sponsor to carry. It protects the plan’s money from theft or fraud by anyone who handles those funds, and it must be written for at least 10% of the funds handled during the prior plan year, with a minimum of $1,000 and a maximum of $500,000 (or $1,000,000 if the plan holds employer securities). If a covered person steals from the plan, the surety pays the plan back directly.
What the Bond Protects Against
ERISA Section 412 requires every plan fiduciary and every person who handles plan funds or property to be bonded against losses caused by fraud or dishonesty. That language reaches theft, embezzlement, forgery, misappropriation, and any scheme in which plan assets end up somewhere they shouldn’t because someone acted dishonestly.
The bond exists for the plan’s benefit, not the sponsor’s. If a trustee steals $50,000 from the retirement fund, the surety reimburses the plan for that loss. That is a narrower job than many sponsors assume. The bond does not cover honest mistakes, bad investment picks, or lawsuits alleging mismanagement; those risks belong to fiduciary liability insurance, which is voluntary and pays the fiduciary rather than the plan. Only the fidelity bond is required by federal law, and carrying a general commercial crime policy on the business usually does not satisfy the requirement, because that policy names the company as the insured party rather than the plan itself.
Who Has To Be Covered
The requirement follows the money. Anyone whose role creates a risk that plan assets could be lost through dishonesty has to be bonded. Federal regulations define “handling” broadly, and the Department of Labor treats the following as handling:
- Receiving cash, checks, or similar property on behalf of the plan.
- Having the ability to transfer funds from the plan to yourself or a third party, including through electronic systems.
- Holding signing authority over checks or the power to negotiate securities or mortgage documents.
- Approving or directing disbursements from the plan.
- Supervising anyone who does any of the above.
In a typical company, the plan administrator, the trustees, and the HR or payroll staff who process contributions or distributions all fall inside that definition. Someone who only enters data and cannot actually move money may not need bonding, especially where internal controls make the risk of loss negligible.
Outside Vendors
Third-party administrators, recordkeepers, and investment advisors are not automatically exempt. If their employees handle plan funds, those employees must be bonded, either under the vendor’s own fidelity bond or under the plan’s. Confirm this in writing before assuming a service provider is covered.
Some regulated financial institutions get an exemption. Banks authorized to exercise trust powers, insurance companies, and registered broker-dealers subject to their own self-regulatory bonding requirements do not need separate ERISA fidelity bond coverage, provided they meet the statutory conditions on supervision and capital.
Plans That Don’t Need a Bond
Several categories of plan sit outside the bonding mandate:
- Unfunded plans that pay benefits entirely from the employer’s or union’s general assets, with no separate trust or fund holding participant money.
- Church plans and governmental plans, which are outside ERISA Title I altogether.
- Owner-only plans, such as a solo 401(k) covering only the business owner and their spouse. If that plan later covers a non-owner employee, ERISA Title I applies and a bond becomes mandatory.
- The regulated financial institutions described above, for their own employees who handle plan assets.
The Secretary of Labor also has authority to exempt plans where other bonding arrangements or the plan’s overall financial condition adequately protect participants.
How Much Coverage the Plan Needs
The bond amount is set at the start of each plan year and must equal at least 10% of the funds handled during the prior reporting year. A plan whose covered individuals handled $800,000 last year needs a bond of at least $80,000. New plans without prior-year data use estimated funds for the current year.
Two limits frame that calculation:
- A floor of $1,000, regardless of plan size.
- A ceiling of $500,000 for most plans, or $1,000,000 for plans that hold employer securities (such as company stock) and for pooled employer plans.
The cap matters at scale. A plan with $20 million in assets still only needs a $500,000 bond under the standard rule, even though 10% of that figure would be $2 million. That keeps premiums manageable, but it also means the bond will not cover a catastrophic loss dollar for dollar.
The amount is fixed at the beginning of each year, so mid-year growth does not force a mid-year adjustment. A plan that grows sharply can end up technically underbonded until the next renewal, which is why an annual coverage review is worth building into the calendar.
Non-Qualifying Assets Change the Math
Plans holding investments without a readily determinable market value, such as real estate, limited partnerships, private notes, or collectibles, face an extra rule. When more than 5% of a small plan’s assets fall into this category, the plan must either obtain a bond equal to at least 100% of those non-qualifying assets or have an independent auditor examine its financial statements each year. This requirement can push the bond above the usual $500,000 cap.
Buying the Bond and Keeping It Current
The bond must be written by a corporate surety authorized to write federal bonds under Treasury approval. The Department of the Treasury publishes the approved list in Circular 570. A bond from a company not on that list does not satisfy ERISA, so check the list before you buy.
The application itself is short. A surety typically asks for:
- The legal name of the retirement plan and the employer’s EIN.
- Total plan assets, usually pulled from the most recent Form 5500.
- The number and roles of the people who handle plan funds.
Premiums are modest. A new plan with less than $100,000 in assets can expect to pay roughly $100 per year, with cost scaling up gradually as the plan grows. Some bonds include an inflation guard rider that adjusts coverage automatically to stay at 10% of beginning-of-year assets, which helps close gaps between annual renewals.
Two details on paperwork. First, the plan itself must be named as the insured party, not the sponsor or the administrator. Second, the plan administrator reports the bond and its amount on Form 5500, Schedule H (Line 4e) for large plans or Schedule I for smaller ones.
What Happens if You Don’t Carry One
Operating without the required bond is a breach of fiduciary duty under ERISA. The Department of Labor can sue the responsible fiduciary to compel compliance, ask a court to order the bond in place, and in some cases seek to remove the plan administrator and install an independent trustee.
The personal exposure is the sharper risk. If someone steals plan assets during a period when no bond was in force, the fiduciary who should have secured the bond can be held personally liable for that loss and may owe the money out of their own pocket. And because Form 5500 asks directly about fidelity bond coverage, a missing bond is visible to regulators without a field audit; a DOL or IRS review that catches the gap will require immediate correction at minimum.