BOXX Insurance Launches AI and Deepfake Coverage in Cyberboxx Business Policy

In a bold response to the rapidly evolving landscape of cyber threats, BOXX Insurance, a global leader in cyber insurance and part of the Zurich Insurance Group, has announced the introduction of affirmative coverage for AI and deepfake-related incidents within its Cyberboxx Business policy. This groundbreaking endorsement aims to eliminate the ambiguity that has long existed in cyber insurance policies concerning AI-driven incidents, marking a significant evolution in how the industry addresses these emerging risks.

As businesses increasingly turn to technology to enhance operations, the rise of artificial intelligence (AI) has brought about new vulnerabilities, particularly in the realm of social engineering and security failures. The new coverage is designed to provide clarity and assurance to customers and brokers alike, addressing what BOXX has termed the "grey zone" in current cyber policy language. Amidst a backdrop of escalating fraud and cybercrime, this endorsement not only signifies a proactive approach to underwriting but also reflects a growing recognition of the complexities that AI introduces into the insurance landscape.

The Changing Landscape of Cyber Insurance

Since the start of 2026, the cyber insurance market has witnessed a notable divide in how insurers are approaching coverage of AI-related threats. While some carriers have opted to explicitly exclude AI-generated deepfake fraud from their standard social engineering coverage, BOXX Insurance has chosen to take a different path. By updating its policy language to explicitly include coverage for losses stemming from AI-generated impersonation—such as voice cloning and video deepfakes—BOXX is positioning itself as a leader in addressing the nuanced risks that businesses face today.

The Rise of AI-Driven Threats

Recent statistics highlight the urgency of this issue. According to Cisco's 2025 Cybersecurity Readiness Index, an alarming 86% of U.S. business leaders responsible for cybersecurity reported experiencing at least one AI-related incident within the past year. This rapid evolution from theoretical risk to practical threat underscores the need for insurance products that keep pace with the changing dynamics of cybercrime.

Understanding the Coverage and Its Benefits

BOXX's new AI and deepfake coverage is designed to work in conjunction with its existing First Party Each and Every Loss feature. This feature reinstates the policy’s aggregate limit of liability after each cyber incident, ensuring that businesses maintain coverage for the remainder of the policy term. This is particularly crucial in an environment where the frequency and sophistication of cyber threats are on the rise.

• Increased Protection: The new coverage addresses direct losses from AI-driven attacks, ensuring businesses are protected against emerging fraud tactics.
• Dynamic Policy Adjustments: BOXX’s underwriting efforts are continuously adapting to the evolving nature of cyber threats, providing businesses with relevant and effective coverage.
• Comprehensive Risk Mitigation: With the implementation of this endorsement, businesses can better navigate the complexities of cyber risk in the age of AI.

Erik Tifft, the global head of underwriting at BOXX Insurance, emphasized the importance of this update, stating, "Threat actors are exploiting trusted relationships among employee and executive networks which can result in handing over credentials or misdirecting payments without an actual breach." This highlights the shifting nature of social engineering attacks and underscores the significance of having robust coverage that addresses these new realities.

The Broader Context: Cyber Fraud Trends

As the number of AI-driven threats continues to rise, the overall landscape of fraud in the United States has become increasingly alarming. The Federal Trade Commission (FTC) reported that consumers lost an estimated $3.5 billion to imposter scams in 2025, a staggering increase that nearly tripled losses since 2020. Overall reported fraud losses surged to approximately $16 billion in 2025, marking the highest figures on record and a 25% increase from the previous year.

Regulatory Developments

The climbing trend of fraud losses has prompted regulatory responses, with several state insurance regulators adopting the National Association of Insurance Commissioners' (NAIC) model bulletin on the use of artificial intelligence by insurers. This initiative sets clear expectations for AI governance frameworks at both the underwriting and claims levels. Additionally, the Insurance Services Office has issued general liability exclusions pertaining to AI exposure, effective from January 2026. These regulatory measures aim to delineate coverage parameters, addressing the same ambiguities that BOXX’s new endorsement seeks to clarify.

Market Dynamics and Competition

The cyber insurance market in the U.S. has seen a shift in concentration, with the top ten cyber writers holding a 51% market share at the end of 2025, down from 69% in 2019. This decline in concentration suggests a more competitive environment for businesses seeking cyber insurance, as more insurers enter the market and offer a wider range of products. As a result, decisions like BOXX’s affirmative AI endorsement are unfolding in a landscape that offers businesses greater choice in how their cyber exposures are covered.

Key Takeaways

• BOXX Insurance has introduced affirmative coverage for AI and deepfake-related incidents in its Cyberboxx Business policy.
• 86% of U.S. business leaders have reported AI-related cybersecurity incidents in the past year.
• Fraud losses in the U.S. reached a record $16 billion in 2025, prompting regulatory responses.
• The U.S. cyber insurance market is becoming more competitive, providing businesses with diverse coverage options.

Frequently Asked Questions

What are AI and deepfake risks in cybersecurity?

AI and deepfake risks in cybersecurity refer to the use of advanced artificial intelligence technologies to create convincing impersonations of individuals. These threats can manifest as voice cloning or video deepfakes, which cybercriminals exploit to deceive employees and executives into revealing sensitive information or authorizing fraudulent transactions. The sophistication of these techniques poses significant challenges for traditional security measures, necessitating tailored insurance coverage that comprehensively addresses these emerging risks.

How does BOXX Insurance’s new coverage differ from traditional cyber insurance policies?

BOXX Insurance’s new coverage differs from traditional cyber insurance policies by explicitly including losses related to AI and deepfake incidents, which many conventional policies have excluded. This affirmative coverage aims to provide clarity and assurance to businesses facing the evolving landscape of cyber threats, addressing the unique challenges posed by AI-driven attacks that are often not covered under standard social engineering provisions.

What should businesses consider when evaluating cyber insurance options?

When evaluating cyber insurance options, businesses should consider several factors, including the specific risks they face, the comprehensiveness of the coverage offered, and the insurer's reputation for handling claims. Additionally, businesses should closely examine policy language to ensure it adequately addresses emerging threats like AI and deepfakes. Seeking guidance from insurance professionals can also help organizations make informed decisions about their cyber insurance needs.