Illegal Activities Insurance Exclusion: What Your Policy Won’t Cover

Think your insurance will pick up the tab if someone in your business breaks the law?
Think again.
Illegal-activities exclusions are the clauses insurers use to say “we won’t pay” for losses tied to criminal, fraudulent, or intentionally wrongful conduct.
This post cuts through the legal mumbo-jumbo to show what those exclusions actually bar, which policy definitions matter, and where courts draw the line between criminal acts and covered negligence.
Read on to learn the common gotchas, who faces the biggest risk, and three practical checks to avoid a surprise claim denial.

Core Explanation of Illegal Activities Exclusion Clauses in Insurance Policies

Illegal activities exclusions are the parts of your insurance contract that say “we won’t pay” when losses come from illegal, criminal, or intentionally wrong behavior. That includes defense costs, settlements, and judgments. Insurers write these clauses in because they don’t want to endorse crime, they want to prevent people from gaming the system, and they’re trying to keep premiums low by cutting out exposure to deliberate lawbreaking. Courts mostly agree. Letting insurance pay for intentional crimes would basically turn policies into crime-subsidy programs and force everyone else to foot the bill through higher premiums.

You’ll see language like “dishonest, fraudulent, criminal or malicious acts,” “intentional illegal conduct,” or “willful misconduct.” Some policies go broad with “criminal acts,” others narrow it down to stuff done “with intent” or “knowingly.” The exact wording matters a lot. Courts draw lines between a conviction and an allegation, between the duty to defend you and the duty to actually pay, between acts that were intentionally unlawful and just negligent violations of law.

In a clergy-abuse case involving the Archdiocese of St. Paul and Minneapolis (documented June 26, 2015, with related materials dated July 10, 2015), insurers used criminal-acts exclusions to deny coverage against an estimated $2.7 billion in national abuse-related liabilities. The Archdiocese had only $27 million in assets. That’s what happens when exclusions kick in on catastrophic exposures.

These exclusions usually apply to:

• Fraud and embezzlement – Deliberate lies, forgery, or stealing money or property.
• Intentional violent crimes – Assault, battery, hiring someone to commit violence.
• Deliberate property destruction – Arson, vandalism, sabotage done on purpose.
• Organized criminal schemes – Racketeering, money laundering, participating in criminal enterprises.
• Intentional statutory violations – Knowingly operating without licenses, permits, or breaking regulatory law.

Definitions and Term Interpretation Within Illegal Activities Exclusions

Policy definitions control whether an exclusion actually fires. The term “Insured” might rope in employees, officers, directors, volunteers, or contractors, which expands or shrinks who’s covered and whose criminal acts can void protection. “Professional Services” definitions decide whether misconduct during contracted work falls inside or outside coverage boundaries.

In Aptuit, LLC v. Columbia Casualty Co. (decided May 8, 2014), the court enforced an exclusion that said, “Coverage does not apply to any professional liability based on or arising out of a dishonest, fraudulent, criminal or malicious act by any Insured.” The policy defined “Insured” to include employees performing “pre-clinical research and other professional services for the pharmaceutical/biotechnology industry” and services performed “for a fee [or other remuneration].” Justice Ramos rejected the employer’s argument that criminal conduct by an employee should fall outside “professional services.” The policy didn’t include any limiting language tying exclusion activation to employer knowledge, and the criminal data alteration happened during paid professional work.

Term variations across policy forms change coverage outcomes in big ways. An exclusion requiring “intentional” conduct might preserve coverage for reckless or negligent illegal acts, while a blanket “criminal acts” exclusion applies no matter what your intent was. In Aptuit, the definitions of “Insured” and “Professional Services” were the deciding factors. The policy didn’t give any limiting language based on employer knowledge, and the employee’s fraud occurred within the scope of paid professional services. The court granted summary judgment to the insurer on most claims.

Insurance Coverage Denial Scenarios Related to Criminal or Unlawful Acts

Insurers deny claims when a criminal adjudication establishes the insured’s illegal conduct. That means a trial verdict, court ruling, regulatory ruling, or legal admission. In Aptuit, the employee was criminally prosecuted and convicted in Scotland for altering pre-clinical research data. After the conviction, the insurer moved for summary judgment to disclaim coverage under the criminal-acts exclusion. The policy stated the insurer would “provide the Insured with a defense…unless or until the dishonest, fraudulent, criminal or malicious act has been determined” by one of those adjudicatory thresholds. Once Scotland’s court convicted the employee, the insurer invoked the exclusion and shifted the burden to the policyholder to show that client claims arose from something other than the employee’s fraud.

Factual questions can preserve partial coverage. Justice Ramos denied summary judgment on some client claims because they might arise from “factual errors” rather than “exclusively [the employee’s] fraudulent conduct.” Where a complaint or claim alleges both negligent errors and fraudulent acts, courts require depositions and discovery to figure out whether the loss is truly “based on or arising out of” criminal conduct or whether a covered, non-criminal theory of liability is viable.

This distinction matters. A civil claim for professional negligence remains covered, while the identical claim recharacterized as fraud would be excluded.

Mixed allegations require courts to parse whether the claim’s foundation is criminal or negligent. If the underlying complaint pleads only negligence, breach of contract, or regulatory non-compliance without alleging intent to defraud, the insurer’s duty to defend typically remains until the insurer proves criminal conduct through trial, regulatory action, or admission. In clergy-abuse litigation, insurers argued that sexual abuse by clergy constituted intentional criminal acts excluded under “intentional acts” and “criminal conduct” clauses. Yet coverage litigation turned on whether policies’ duty-to-defend provisions required insurers to fund defense until criminal adjudication, and whether abuse claims could be framed as negligent supervision or institutional failure rather than solely as the perpetrator’s crime.

Differences Across Insurance Types When Applying Illegal Acts Exclusions

Policy type determines how illegal-acts exclusions operate and what alternative coverage might apply. General liability policies exclude intentional criminal acts but still cover negligent acts that cause harm, allowing coverage for unintended consequences of otherwise lawful conduct. Professional liability and errors-and-omissions policies frequently include broad exclusions for “dishonest, fraudulent, criminal or malicious acts,” yet negligent errors, omissions, and unintentional regulatory violations remain covered. Directors-and-officers policies often exclude fraud and illegal personal profit but may allow indemnity for innocent directors or for acts not yet finally adjudicated as criminal.

Automobile liability policies exclude intentional wrongdoing by the driver. Using the vehicle as a weapon to harm another person triggers the exclusion, while negligent operation causing injury remains covered. Property insurance excludes intentionally caused damage, such as arson or vandalism by the insured, but covers theft by third parties and accidental damage. Workers’ compensation generally covers workplace injuries regardless of employee negligence, but when an employee’s criminal act causes injury to a co-worker, coverage may be complicated by whether the act occurred within the scope of employment or was purely personal criminal conduct.

• Auto insurance – Intentional use of vehicle to injure excluded; negligent accidents covered; DUI-related crashes often covered despite criminal charge, because most auto policies don’t exclude all illegal acts, only intentional harm.
• General liability – Intentional criminal acts excluded; negligent acts causing bodily injury or property damage covered; distinction turns on whether insured intended the harm or only the act.
• Professional liability (E&O) – Fraud, intentional misrepresentation, and criminal acts excluded; negligent errors, omissions, and unintentional statutory violations covered; definitions of “professional services” and “insured” are decisive.
• Directors & Officers (D&O) – Fraud, illegal personal profit, and knowingly wrongful acts excluded; claims alleging negligent mismanagement or breach of fiduciary duty covered; some policies provide coverage pending final adjudication or for innocent directors via severability clauses.
• Property – Intentionally caused damage excluded (arson, vandalism by insured); theft by third parties and accidental damage covered; criminal acts by employees may trigger separate crime/fidelity coverage.
• Crime/Fidelity insurance – Designed to cover employee theft, fraud, embezzlement, and dishonest acts that liability policies exclude; the coverage solution when liability policies deny claims based on illegal-acts exclusions.

Legal Interpretation: How Courts Evaluate Criminal-Acts Exclusions

Courts apply the doctrine of contra proferentem, which means they read ambiguous exclusionary language against the insurer and in favor of coverage. But that rule doesn’t override clear, unambiguous policy terms. When exclusion language explicitly bars coverage for “dishonest, fraudulent, criminal or malicious acts” without qualification, courts enforce the exclusion as written. Ambiguity arises when policy definitions conflict, when the exclusion’s scope is unclear, or when the policy imposes procedural conditions (such as requiring a final adjudication) before the exclusion applies.

Burden of proof typically rests on the insurer to demonstrate that the exclusion applies. The insurer must show that the loss arose from conduct meeting the exclusion’s criteria (intentional, criminal, fraudulent, or malicious) and that the conduct was performed by an “Insured” as defined in the policy. In Aptuit, the insurer met that burden by presenting the Scottish criminal conviction and showing that the employee was an “Insured” performing “Professional Services” when he altered data. Courts also examine timing: whether the criminal conviction, regulatory ruling, or legal admission occurred before or after the claim, and whether the policy period covers the wrongful act or the claim itself.

Separation-of-insureds (severability) clauses can preserve coverage for innocent co-insureds even when one insured commits a crime. In D&O policies, for example, a fraud committed by one officer may not void coverage for other directors if the policy includes severability language treating each insured separately for purposes of exclusions. When the policy defines “Insured” broadly and contains no severability clause, one person’s crime can eliminate coverage for the entire entity.

Duty to Defend vs. Duty to Indemnify

The duty to defend is broader than the duty to indemnify and is triggered by allegations in the complaint. If a complaint alleges only negligence or non-criminal wrongdoing, the insurer must defend even if the insurer suspects underlying criminal conduct, until the exclusion is established by trial verdict, regulatory ruling, or legal admission. In Aptuit, the policy required the insurer to “provide the Insured with a defense…unless or until the dishonest, fraudulent, criminal or malicious act has been determined” by formal adjudication. Courts interpret this language to mean insurers owe defense costs while criminality remains unresolved, but may disclaim indemnity once exclusion is proven.

Where complaints mix criminal and non-criminal theories, insurers commonly defend under a reservation of rights, funding the defense while preserving the right to deny indemnity later if criminal conduct is established. Policyholders should respond promptly to reservation-of-rights letters, obtain coverage counsel, and document defenses, lack of intent, and mitigating facts that could preserve indemnity coverage or limit the scope of exclusion.

Exceptions and Gray Areas in Illegal Activities Exclusions

Lack of criminal intent (mens rea) can preserve coverage for acts that were illegal but not intentional or knowing. An unintentional violation of a statute, such as unknowingly breaching a licensing requirement or negligently failing to meet a regulatory standard, remains covered under most policies unless the exclusion explicitly sweeps in all illegal acts regardless of intent. Policies that exclude only “intentional,” “knowing,” or “willful” misconduct leave room for coverage when the insured’s conduct was negligent, reckless, or done without awareness of its illegality.

Negligent-but-illegal acts often remain covered. A contractor who negligently violates a building code, a healthcare provider who unintentionally breaches patient-privacy regulations, or a business that inadvertently fails to obtain a required permit typically retains coverage because the conduct lacked intent to break the law. Courts examining whether a claim “arises out of” criminal acts will ask whether the claim’s foundation is the illegal conduct itself or a separate, covered negligent act that happened to violate law.

• Negligent-but-illegal conduct – Unintentional statutory violations, accidental regulatory breaches, and negligent failure to comply with law typically remain covered if exclusion requires intent.
• Claims lacking intent – When the insured didn’t know the act was illegal or didn’t intend the harmful result, coverage may survive even if the act technically violated criminal law.
• Mixed allegations (civil + criminal) – Complaints alleging both fraud and negligence require factual development; courts may find duty to defend for negligence claims even when criminal allegations are also present.
• Innocent insured protections – Severability clauses and “innocent insured” endorsements can preserve coverage for co-insureds who didn’t participate in, know about, or benefit from the criminal conduct.

Extortion and ransom payments present a notable exception. Some insurers continue to pay ransoms for physical kidnap-and-ransom incidents and for ransomware crypto demands, even though paying ransoms may fund criminal or terrorist activity. Coverage for these payments reflects economic expediency and market practice, but ethical and legal concerns remain. Paying ransoms is described as short-term expedient yet problematic, and future legal or market changes could eliminate this exception.

In Aptuit, the court refused to infer that employer lack of knowledge should limit the exclusion, because the policy contained no such limiting language. Other policies, particularly D&O and employment-practices policies, may include knowledge requirements or “innocent insured” protections that prevent one person’s crime from eliminating coverage for others.

Practical Steps for Policyholders to Mitigate Illegal-Acts Exclusion Risk

Immediately preserve all policy documents, endorsements, binders, and communications with the insurer. Note dates of incidents, charges, regulatory actions, and criminal proceedings. Review the exact wording of illegal-acts exclusions: look for terms such as “intentional,” “knowing,” “willful,” “criminal,” “dishonest,” “fraudulent,” or “malicious,” and check whether the exclusion requires a final adjudication (trial verdict, court ruling, regulatory ruling, or legal admission) before it applies.

Check policy definitions of “Insured,” “Professional Services,” “Occurrence,” “Loss,” and “Claim.” Assess whether the policy includes separation-of-insureds or severability clauses that might preserve coverage for innocent co-insureds. Evaluate the insurer’s duty-to-defend versus duty-to-indemnify provisions. Expect insurers to issue reservation-of-rights letters when criminal allegations surface, and respond promptly with coverage counsel to preserve defenses and document non-criminal theories of liability.

1. Preserve notice and documents early – Provide timely notice of claims or potential claims to insurers, even if criminal charges are pending; late notice can void coverage independently of exclusions.
2. Review exclusion wording and definitions – Identify whether the exclusion requires intent, knowledge, or a final adjudication; confirm which individuals or entities are “Insureds” and whether their acts can void coverage.
3. Document internal controls and ethics programs – Maintain written compliance policies, audit trails, quality-assurance records, and internal investigations to support claims of negligence or error rather than intentional fraud.
4. Assess excess and umbrella policies – Check whether higher-layer policies contain different exclusion language, broader coverage, or higher limits that might apply if primary coverage is denied.
5. Track procedural thresholds for exclusion activation – Monitor criminal trials, regulatory proceedings, and settlement negotiations; exclusions may not apply until a verdict, regulatory ruling, or legal admission formally establishes criminal conduct.
6. Coordinate legal and coverage counsel – Obtain separate coverage counsel to evaluate whether complaints trigger duty to defend based on pleading allegations versus underlying facts; litigation discovery can create coverage-preserving factual questions and support claims of mixed civil and criminal liability.

Consider purchasing or reviewing crime/fidelity coverage and specific endorsements to cover employee dishonesty, theft, or fraud that liability policies exclude. Negotiate policy language at procurement or renewal to clarify whether exclusions require employer knowledge, a criminal conviction, or a regulatory determination before exclusion applies, and to add severability or innocent-insured protections.

Business-Level Implications: Illegal Acts Exclusions in Commercial Settings

Illegal-acts exclusions incentivize firms to implement security measures, internal controls, ethical policies, and compliance programs to reduce criminal risk. Insurers exclude coverage for crimes to prevent moral hazard (the risk that insured parties will take fewer precautions against illegal conduct if they know insurance will pay) and to avoid subsidizing fraud, embezzlement, or intentional harm through premium pools funded by law-abiding businesses. Fraud-prevention rationales drive exclusions: insurers seek to reduce incentive for staged losses, deliberately criminal acts, and fraudulent claims by making coverage unavailable for such conduct.

Premium affordability depends on excluding criminal acts. Including intentional crimes in coverage would significantly increase insurer exposure and require higher premiums across all policyholders, shifting the cost of deliberate wrongdoing onto businesses that follow the law. Exclusions also reflect deference to the legal system. Criminal conduct is treated as the remit of law enforcement and the judiciary, not insurers, and allowing coverage would blur the line between civil risk transfer and criminal accountability.

Firms should review policy wording to confirm whether kidnap-and-ransom and cyber-extortion or ransomware payments are covered or excluded, and should evaluate whether coverage for such payments aligns with their legal and ethical risk tolerance. Businesses operating in high-risk sectors (financial services, healthcare, pharmaceuticals, construction) should assess whether crime/fidelity coverage and employment-practices liability policies fill gaps left by illegal-acts exclusions in primary liability policies.

Litigation Strategies in Disputes Involving Illegal-Acts Exclusions

Expect insurers to reserve rights and defend under reservation until criminality is formally established by trial verdict, regulatory ruling, or legal admission. Track those procedural thresholds and press for fact development when complaints are ambiguous. Where underlying complaints mix criminal and non-criminal allegations, policyholders should create factual questions through depositions, discovery, and expert testimony to establish whether claims arise from non-criminal mistakes, negligence, or covered errors rather than exclusively from fraudulent or criminal conduct.

Challenge exclusion ambiguity by arguing that policy language is susceptible to multiple reasonable interpretations and should be construed in favor of coverage. In Aptuit, the insured argued unsuccessfully that criminal conduct by an employee unknown to the employer should fall outside “professional services,” but the court found no ambiguity in the policy’s broad definitions. More ambiguous policy language (such as exclusions that don’t define “criminal acts” or that include conditional language tied to conviction or adjudication) creates stronger grounds to preserve coverage until the insurer meets its burden of proof.

• Create factual questions (negligence vs. fraud) – Use discovery to show that claims can arise from negligent errors, unintentional statutory violations, or third-party conduct rather than solely from the insured’s intentional crime.
• Pursue parallel coverage under crime/fidelity or excess policies – When primary liability coverage is denied, evaluate whether crime/fidelity policies cover employee dishonesty or whether excess/umbrella layers have different exclusion language.
• Leverage reservation-of-rights dynamics – Insurers defending under reservation owe duty-to-defend costs; policyholders should document all non-criminal theories of liability, preserve settlement options, and obtain coordinated legal and coverage counsel to maximize defense funding and preserve indemnity potential.

Where exposures are significant and exclusionary language is broad, evaluate third-party indemnities, bonding, tolling agreements, and alternative dispute resolution to manage litigation costs and coverage uncertainty. Monitor criminal trials, regulatory proceedings, and settlement negotiations closely. Exclusions may not apply until a formal adjudication, and interlocutory defenses (challenging the sufficiency of criminal charges, pursuing plea agreements that avoid convictions, or negotiating regulatory settlements that don’t include findings of criminal conduct) can preserve coverage by preventing the procedural threshold from being met.

Final Words

We unpacked how illegal‑acts exclusions work: why insurers use them, the typical wording you’ll see, and real cases that show where claims get denied.

We covered how definitions, timing, and policy type change outcomes, plus the gray areas and practical steps to reduce risk.

Read the exclusion, check definitions, get written answers, and consider crime/fidelity cover. Understanding illegal activities insurance exclusion helps you spot red flags and choose coverage that actually protects you when it matters.

FAQ

Q: What are examples of insurance exclusions?

A: Examples of insurance exclusions include intentional or criminal acts (fraud, arson), preexisting medical conditions, wear-and-tear, war or nuclear risks, and named-peril gaps like flood or earthquake in standard policies.

Q: What is something illegal for insurance companies to do?

A: Something illegal for insurance companies to do is knowingly misrepresent policy terms or deny payment without a reasonable investigation; unfair claim practices and discriminatory cancellations also violate consumer protection laws.

Q: What is an example of action over exclusion?

A: An example of an action that triggers an exclusion is deliberate criminal conduct — for example arson, staged theft, or fraud — which insurers commonly exclude and may use to deny coverage or seek recovery.

Aaron Watson

Check out these blog posts also:

Earthquake Exclusion in Homeowners Insurance: What’s Not Covered What Is an Insurance Policy Exclusion and How It Affects Your Coverage Exclusions in Medicare Supplement Policies: What’s Not Covered Negotiating Exclusions with Insurance Company: Proven Tactics That Work