Fraudsters Use Our Name To Reach Policyholders.

A plain summary of who each rule covers, taken from the official page. Not legal advice. Your legal team decides what applies to you.

• Why are insurers copied?

  Policyholders expect messages about claims and payments, and trust the brand. A copy of a claims page collects logins or payments.

• Does DORA apply to insurers?

  EIOPA lists insurance companies among the entities DORA covers. Your legal team confirms how it applies to your firm.

• Can fake ads be removed?

  We prepare the evidence for the ad platform. The platform decides.

• Do you name groups that target insurance?

  No. We name a group only when a government or standards source links it to the sector.

• What is voice phishing against policyholders?

  Voice phishing is phone calls that pose as the insurer to get payment or personal details. Policyholders act on messages that look like they come from their insurer, so the call feels trusted. Watching for brand impersonation gives insurers notice early.

• What are fraudulent payment requests in insurance?

  They are messages that look like they come from a broker or a senior person and ask for a transfer. They rely on the same trust that policyholders and brokers place in your brand.

• Why do brokers and claims handlers matter for cyber risk?

  Brokers, claims handlers and outsourced IT hold your data and connect to your systems. A weakness at one of them can reach you. The Supply Chain and Vendor Risk use case shows which suppliers expose you.

• How are fake insurer websites found and removed?

  Brandefense Phishing Monitoring and Domain Abuse finds fake insurer sites and look-alike domains. It also helps get them removed. The takedown service is a managed service that gets fake domains, accounts, apps and ads removed.

• What does the NAIC Insurance Data Security Model Law ask for?

  It is a model law that US states adopt in their own versions. It asks licensees to run an information security program, to oversee their third-party service providers and to tell the state commissioner within 72 hours of determining that a cybersecurity event has occurred, where the model's criteria are met. Check the version in your state.

• How would an insurer learn that policyholder data is being sold?

  Dark Web Monitoring alerts you when policyholder or staff data tied to you is offered in criminal markets. Insurers hold a lot of customer data, so this is a common target. Early notice gives your team time to respond.