What Is a Fidelity Bond for 401(k)? Coverage, Limits, and Form 5500

A fidelity bond for a 401(k) plan is an insurance policy that reimburses the plan when someone who handles its money steals or misuses it. ERISA Section 412 requires every person who handles plan funds to be covered by one, and the bond must equal at least 10% of the funds that person handled during the prior plan year.¹ The bond names the plan itself as the insured, and operating a plan without one is a federal violation in its own right.

One quick clarification, because these get mixed up: a fidelity bond pays the plan back for losses from dishonest acts like theft, embezzlement, or forgery. Fiduciary liability insurance is a different product that protects individual fiduciaries when they’re sued for breaching their duties, even where no fraud occurred. ERISA requires the bond. It does not require fiduciary liability insurance.²

Who Has to Be Bonded

Every fiduciary and every person who handles funds or other property of the plan must be bonded.¹ Under the Department of Labor’s regulations, a person “handles” plan funds when their duties create a risk of loss through fraud or dishonesty. That covers physical contact with cash or checks, check-signing or transfer authority, power to direct disbursements, and decision-making authority over plan investments.³

Purely clerical work under close supervision, where fiscal controls make the risk of loss negligible, sits outside the requirement.³

Third-Party Service Providers

Bonding isn’t limited to your own employees. A third-party administrator, recordkeeper, or investment advisor who handles plan funds must also be bonded. The provider can carry its own bond naming your plan as insured, or you can add the provider to the plan’s existing bond. Either way, the fiduciaries who hired the provider need to verify that bonding is in place.²

Plans and Institutions That Are Exempt

Not every plan needs a bond. Completely unfunded plans that pay benefits directly from the employer’s or union’s general assets don’t need one. Plans not subject to ERISA Title I at all, such as government plans and church plans, are also outside the rule. Certain regulated financial institutions, including banks, insurance companies, and registered broker-dealers, are exempt from bonding when they handle plan funds, provided they meet the conditions in the DOL’s regulations.²

How Much Coverage the Plan Needs

Each bonded person must be covered for at least 10% of the funds they handled during the preceding plan year, with a statutory floor of $1,000 and a ceiling of $500,000. The ceiling rises to $1,000,000 if the plan holds employer securities or is a pooled employer plan.¹

In practice: a plan with $3 million in assets and a trustee who can access all of it needs at least $300,000 of coverage on that trustee. If the plan grows to $8 million, the required bond hits $500,000, the statutory cap for plans without employer securities. Recalculate at the start of each fiscal year.²

Brand-New Plans

A new plan has no prior year to measure against. The $1,000 statutory minimum applies from day one. Most administrators estimate the plan’s expected first-year assets and bond at 10% of that estimate, since coming in short once contributions begin flowing would itself be a compliance failure.²

Non-Qualifying Assets and the Audit Waiver

Small plans that want to use the audit waiver face a stricter rule when more than 5% of their assets are “non-qualifying.” Non-qualifying assets are investments not held by a regulated financial institution: direct real estate, private equity, or closely held company stock, for example. Once a plan crosses the 5% threshold, anyone who handles the non-qualifying assets must be bonded for 100% of the value of those assets, not 10%.⁴

The enhanced coverage runs to the full value of the non-qualifying assets, not just the portion above 5%. An existing bond can satisfy this if its coverage amount is large enough, but the administrator has to verify the math.

The No-Deductible Rule

An ERISA fidelity bond cannot carry a deductible or any similar feature that shifts risk back to the plan within the required coverage amount. The bond has to pay from the first dollar of loss up to the bonded amount. A policy with a $5,000 deductible on the required coverage does not satisfy ERISA.⁵

Deductibles are allowed only on coverage above the required amount. If a plan official must be bonded for $300,000 and you buy a $500,000 bond, a deductible may apply to the extra $200,000, but the first $300,000 must be deductible-free.⁵

Buying the Bond

The bond must name the plan as the insured. Not the employer, not the individual fiduciary. It’s there to make the plan whole, and it doesn’t shield the wrongdoer from personal liability to the plan.²

The surety issuing the bond must hold a certificate of authority from the Secretary of the Treasury. The authorized sureties are published annually in the Federal Register, and DOL regulations at 29 CFR 2580.412-21 require the plan administrator to confirm the surety’s authorization at purchase and, if the bond term runs longer than a year, at the start of each reporting year.³

Either the employer or the plan can pay the premium. Paying from plan assets is permitted because the bond protects the plan.² Many service providers carry their own bonds and fold the expense into their fees.

To get a quote, you’ll typically need the plan’s EIN, the total value of plan assets, the number of individuals who need coverage, and a description of the assets the plan holds, including whether employer securities are involved. Annual premiums are modest for most plans, often a few hundred dollars for smaller ones.

Reporting the Bond on Form 5500

Every year the plan administrator reports bond coverage on Form 5500. Large plans use Schedule H, Line 4e; small plans use Schedule I, Line 4e. You check whether the plan is covered and enter the total coverage amount.⁶ Schedule A is not used for fidelity bond coverage.

What Happens If a Plan Skips the Bond

Operating without a fidelity bond is unlawful under the statute. It’s also unlawful for anyone with authority over plan operations to permit an unbonded person to handle funds.¹

The consequences run in a few directions. A missing or insufficient bond shows up as a compliance deficiency on Form 5500. Willful failure to report required information is a criminal offense under ERISA Section 501.⁶ If someone actually steals from an unbonded plan, the fiduciaries who let that person handle funds without coverage face personal liability for the loss the bond would have paid.

1
Office of the Law Revision Counsel. 29 USC 1112 – Bonding
2
U.S. Department of Labor. Protect Your Employee Benefit Plan With an ERISA Fidelity Bond
3
eCFR. 29 CFR Part 2580 – Temporary Bonding Rules
4
U.S. Department of Labor. Frequently Asked Questions on the Small Pension Plan Audit Waiver Regulation
5
U.S. Department of Labor. Field Assistance Bulletin No. 2008-04
6
U.S. Department of Labor. 2024 Instructions for Form 5500