The Requirement Most Small Businesses Miss
Ask a small business owner whether their 401(k) administrator is properly bonded and you’ll often get a blank look. Not because they’re being careless, but because ERISA bonding is one of those specific regulatory requirements that’s genuinely easy to miss unless someone has specifically flagged it for you.
ERISA stands for the Employee Retirement Income Security Act of 1974. It’s the federal law that governs employer-sponsored retirement plans — things like 401(k) plans, pension plans, profit-sharing plans, and other qualifying retirement benefit plans. Among the many requirements it lays out is a bonding requirement that applies to anyone who “handles” the funds or other property of a plan.
If you have a qualifying retirement plan at your business and someone at your company — a manager, a plan administrator, an officer, a controller, anyone — has the ability to move, disburse, or otherwise exercise control over plan assets, that person is required to be covered by an ERISA fidelity bond. The bond is there to protect the plan and its participants (your employees) from losses caused by fraud or dishonesty by the people managing the plan.
Uncle Sheldon helps businesses make sure they’re properly covered. This isn’t the most exciting topic in the insurance world, but getting it wrong creates real compliance exposure and that’s something worth avoiding.
What the Law Actually Requires
The bonding requirement is found in Section 412 of ERISA, and the rules are fairly specific.
Every person who handles funds or other property of an employee benefit plan covered by ERISA must be bonded. The required bond amount is at least 10% of the amount of funds the person handles, subject to a minimum of $1,000 and a maximum of $500,000 per plan. If the plan holds employer securities (stock in the sponsoring company), the maximum goes up to $1,000,000 for those who handle those assets.
The bond amount is based on the amount handled during the preceding plan year. As plan assets grow, the required bond amount grows with them. As of the most recent update to the regulations, the maximum for most plans is $500,000 — meaning that if a plan administrator handles more than $5 million in plan assets, the required bond is capped at $500,000.
The bond is a fidelity bond specifically — it protects against losses caused by fraud or dishonest acts by the bonded person. This is distinct from fiduciary liability insurance, which covers negligence and breach of fiduciary duty. These are two different things, and having one does not substitute for the other.
The plan itself is the named insured on the bond, not the employer or the administrator personally.
Who “Handles” Plan Funds
The definition of “handling” under ERISA regulations is broader than just cutting checks. According to the Department of Labor, a person handles funds if they have physical contact with the money, securities, or other property of the plan, OR if they have the power or authority to disburse, transfer, or exercise control over the funds.
This includes:
People who physically receive contributions and deposit them into the plan. Plan administrators who can initiate distributions or wire transfers. Employees who can access and control plan accounts. Officers who have signatory authority over plan accounts. Plan trustees, whether they’re internal employees or external fiduciaries.
It generally does not include clerical staff who simply process transactions under close supervision without meaningful control over the funds, or service providers like third-party administrators and investment advisers who have their own separate bonding requirements.
If you’re not sure whether someone at your company meets the definition of “handling” plan funds, that’s worth working through carefully. Underbonding is a compliance issue.
The Difference Between ERISA Bonds and Fiduciary Liability Insurance
This is one of the most common points of confusion in the retirement plan world. An ERISA bond and fiduciary liability insurance are two different products that serve different purposes. Having one does not mean you have the other.
An ERISA fidelity bond protects the plan from losses caused by dishonest or fraudulent acts by plan officials. It’s required by law. The bond pays out when a covered person steals from the plan or commits fraud against it.
Fiduciary liability insurance protects plan fiduciaries — typically the employer and plan administrators — from claims that they breached their fiduciary duties under ERISA. These are the negligence-type claims: imprudent investment decisions, failure to follow the plan document, conflicts of interest, inadequate monitoring of service providers, failure to properly communicate with plan participants. Fiduciary liability is not required by law but it’s strongly advisable, especially for employers sponsoring plans with significant assets.
A plan could suffer a loss from dishonesty (ERISA bond covers it) or from fiduciary negligence (fiduciary liability insurance covers it). These are different scenarios and they need different protections.
Some employers purchase both, which makes sense if you take your fiduciary obligations seriously and want protection on both sides of the risk. But make sure you have the ERISA bond first because it’s the one the law requires.
The Plans Covered by the Bonding Requirement
ERISA covers a broad range of employee benefit plans, not just the most common 401(k). The bonding requirement applies to plans that are covered by ERISA’s provisions, which include:
Defined contribution plans — 401(k) plans, profit-sharing plans, money purchase pension plans. Defined benefit pension plans. Employee Stock Ownership Plans (ESOPs). 403(b) plans sponsored by qualifying non-profit organizations. Health and welfare benefit plans covered by ERISA.
Plans that are generally not subject to ERISA (and therefore not subject to the bonding requirement) include governmental plans, church plans that haven’t elected ERISA coverage, and purely individual arrangements like IRAs that aren’t employer-sponsored.
If you’re not sure whether your plan is subject to ERISA’s bonding requirement, the safest thing to do is ask. Most qualified retirement plans sponsored by private sector employers are subject to ERISA.
What a Bond Claim Actually Looks Like
An ERISA bond claim arises when a bonded plan official commits fraud or a dishonest act against the plan. Common scenarios include:
An employee who has access to plan contribution accounts diverts contributions to a personal account rather than properly depositing them. A plan trustee approves distributions to nonexistent participants and pockets the funds. A person with access to plan accounts manipulates transactions for personal gain.
The bond pays for the loss to the plan — the actual amount that was stolen or fraudulently taken. The bonded individual remains personally liable to repay the surety, and criminal charges are typically also involved in these situations.
These situations are not common. Most plans never experience a dishonesty loss. But ERISA bonding exists because when it does happen, it can be significant, and the plan participants — real employees counting on those funds for retirement — are the ones who suffer the loss without the bond in place.
DOL Audits and What They Look For
The Department of Labor has the authority to audit employee benefit plans for ERISA compliance, including compliance with the bonding requirement. Plan audits look at a range of compliance issues, and bonding is one of the items on the checklist.
If an audit finds that a plan required to be bonded wasn’t bonded, or was bonded at an inadequate amount, the plan administrator faces potential civil penalties and is required to correct the deficiency. The consequences of non-compliance are real.
Plan audits are triggered by a variety of factors, including random selection, complaints from plan participants, certain events like plan terminations, and patterns in Form 5500 filings that raise questions. Being in compliance before an audit happens is always the better position to be in.
Form 5500 — the annual reporting form filed by most ERISA-covered plans — includes questions about bonding. Errors or missing information on Form 5500 can themselves flag compliance issues.
How Much Does an ERISA Bond Cost
ERISA fidelity bonds are generally not expensive. Because the required amounts are capped (typically $500,000 maximum, $1,000 minimum) and the bond is specifically a fidelity instrument for a defined purpose, pricing tends to be straightforward.
For most small to mid-sized plans, an ERISA bond can cost a few hundred dollars annually. Larger plans requiring bonds at or near the $500,000 maximum will pay more, but the cost is still modest relative to the compliance exposure of not having the bond.
The cost of the bond can be paid by the plan (out of plan assets) if the plan document permits it, or by the plan sponsor. Which approach is appropriate depends on the plan document terms and the employer’s preferences.
Getting This Right Is Easier Than You Think
One of the things that makes ERISA bonding feel complicated is that it touches legal, HR, and insurance considerations simultaneously. Plan sponsors often aren’t sure who is responsible for making sure the bond is in place — the HR department, the plan administrator, the employer’s insurance broker, the third-party administrator?
In practice, maintaining the bond is typically the responsibility of the plan sponsor (the employer), though it’s common for the third-party administrator or an insurance broker to assist with obtaining and renewing it. The important thing is that someone has their eye on it and that the bond is in place, at the right amount, continuously while the plan is active.
When plan assets grow, the required bond amount needs to be reviewed. A plan that had $800,000 in assets at the start of the plan year required a bond of $80,000. If plan assets grew to $3 million the following year, the required bond increases to $300,000. It’s worth checking your plan’s asset levels annually and confirming that your bond amount remains compliant.
Working Through This With Uncle Sheldon
We help businesses get their ERISA bonding sorted out. Whether you’re a small employer who just realized you might not have the right coverage in place, a plan administrator reviewing your compliance posture, or a new business setting up a retirement plan for the first time — we can help you find the right bond and make sure you understand what you have.
We’re an independent agency and we work with multiple carriers. We’re real people who will take the time to understand your plan structure and what’s required. If you need to figure out the right bond amount, whether your current bond is adequate, or whether your plan is even subject to ERISA’s bonding requirement, we’re a good place to start that conversation.
If we can help you find what you need, we will. And if your situation calls for something we can’t handle, we’ll try to point you in the right direction. That’s how we work.
Reach out to Uncle Sheldon and let’s make sure your retirement plan compliance is in good shape.