Cyber extortion and ransomware cover for individuals
Personal cyber cover is now often bundled into home insurance rather than sold as its own policy. Here is what it typically pays for, and what it usually does not.
Ransomware and online extortion used to be discussed almost entirely as a business problem — a company's servers locked, a ransom demanded in cryptocurrency. Individuals are now a target too, through compromised personal devices, cloud accounts and increasingly convincing phishing and impersonation scams, and personal insurance has started to catch up, though usually as a feature bundled into an existing policy rather than a standalone product.
Why this shows up inside home insurance, not as its own policy
The Monetary Authority of Singapore treats cyber resilience as a standing supervisory priority for financial institutions, reflecting how central digital channels have become to everyday financial life and how quickly the threat evolves. That same shift shows up downstream in consumer products: several insurers have added a personal cyber protection benefit to their home insurance plans rather than launching a separate cyber policy for individuals, on the reasoning that most personal cyber losses (a compromised email account, a fraudulent online transaction, a scam) are a variation on the same "loss to your household" risk that home and contents insurance already exists to cover.
MSIG's HomeEasy plan is a concrete example of this pattern: it includes a personal cyber protection benefit covering online theft or fraud up to a stated sum insured, sitting alongside more familiar contents and liability benefits in the same policy. The specific sum insured and definition of what counts as a covered cyber loss is set by each insurer's own policy wording and product tier, and changes as insurers revise their offerings — treat any figure you see in a brochure as specific to that plan at that time, not as a market standard.
What this kind of cover typically responds to
Coverage design varies by insurer, but personal cyber benefits bundled into home or standalone policies generally cluster around a few kinds of loss:
- Unauthorised online transactions or fraud, where money is taken from an account through a scam, a compromised login or a fraudulent transaction the policyholder did not authorise.
- Cyber extortion, where a criminal threatens to lock, expose or damage the policyholder's data or device unless a payment is made — the ransomware scenario specifically.
- Costs of recovery, which can include restoring data, resetting compromised accounts or, in some policies, professional IT assistance to clean an infected device.
- Identity theft-related costs, in policies that extend this far, such as costs incurred proving your identity was misused.
What this cover usually does not do
- It rarely, if ever, promises to reimburse a ransom payment directly as a standing feature, and even where a policy is silent on this, paying a ransom carries its own legal and practical risks worth considering independently of insurance.
- It does not replace basic digital hygiene. Cover is typically conditional on reasonable care — using updated software, not sharing passwords, reporting a loss promptly — and a claim can be reduced or declined if the loss resulted from clearly avoidable negligence, in the same way a burglary claim can be affected by an unlocked door.
- Business use is usually excluded. A personal cyber benefit inside a home policy is sized for a household, not a business run from home; a freelancer or small business owner handling client data or payments needs a separate, business-appropriate cyber policy, not an assumption that their home policy extends to work use.
What to check before assuming you are covered
- Does your home insurance already include a personal cyber benefit, and what is the sum insured — many policyholders do not realise this benefit exists until they read the schedule closely.
- What specific events are named — online fraud, extortion, identity theft — rather than assuming "cyber" as a heading covers everything digital.
- Is there a requirement to report the incident within a set time, and to the police or a specific authority, before a claim can proceed.
- Does the benefit sit inside your home policy, or would you need a separate standalone cyber product, particularly if you work from home or handle sensitive data personally.
Where to look for current options
Personal cyber benefits are a relatively new and fast-changing corner of the market, and the sums insured and definitions differ meaningfully between insurers. Our gap check is a reasonable starting point for seeing whether your existing home or contents policy already includes this benefit before assuming you need to buy something new.
Talk to an advisor
Whether your existing home policy already covers online fraud and extortion, and whether that is enough for how you actually use the internet and handle money online, is worth a specific conversation. A licensed advisor can check your current schedule for this benefit. Find one through the portal's advisor directory, or ask our assistant whether a policy you hold includes personal cyber protection.
Sources
This content is educational information from a licensed advisor, not financial advice. Product details vary by insurer — verify specifics with an advisor.
