A pink insurance card is not, by itself, proof that coverage is valid. Ontario’s regulator, FSRA, warns that people impersonating licensed brokers or agents can sell counterfeit policies and insurance cards that leave buyers uninsured. FSRA’s fraud guidance.

Independent checks are more reliable than a low price, a friend’s referral or a reassuring chat conversation.

1. Check the licence and the contact details

Check insurance brokers and brokerages in the Registered Insurance Brokers of Ontario directory. For insurance agents and insurers, use the public registry links on FSRA’s website.

Match the name, company and current licence status. Finding a real licence does not prove the person messaging you owns that identity. Obtain contact details independently from the company’s official website or a reliable registry and call the business to verify the person.

2. Confirm the policy directly

Using the insurer’s official contact number, verify the policy number, insured vehicle, policyholder and effective date. A screenshot, payment receipt or familiar company logo does not replace this check.

Documents may be electronic or printed. Not having an app account is not proof of fraud. What matters is that the real company can confirm the coverage and provide the appropriate documents. If you are waiting for final paperwork on a new policy, confirm that coverage has actually been bound and when it begins.

3. Pause if something does not add up

Pressure to transfer money immediately, refusal to name the insurer, inconsistent details, an unclear payee or an unexplained “special internal deal” all deserve further checking.

A low quote is not proof of fraud, and a payment method alone does not establish it. Do not pay an unverified individual or unfamiliar account. Confirm the authorized payment process with the licensed business and keep a formal receipt.

When comparing prices, compare liability limits, deductibles, optional protection, listed drivers and vehicle use too. Less coverage is not the same as a better price for equivalent protection.

If you have paid or suspect fraud

• Preserve advertisements, messages, receipts, insurance documents and contact details.
• Contact the insurer whose name appears on the documents. Do not drive until you have confirmed legally required coverage is valid.
• If money was transferred, contact the financial institution that handled it promptly and ask what action is possible. Recovery is not guaranteed.
• Report the matter to local police and the Canadian Anti-Fraud Centre, and to FSRA or RIBO where appropriate.
• Do not send more money to someone promising to recover your loss for a fee. Canadian Anti-Fraud Centre guidance.

A company logo, insurance card and personal referral can be starting points, but they cannot replace independent verification.

A-Z Insurance can help explain insurance documents and coverage. Call 905-707-2929 or email info@azinsure.ca.

Online bookings, electronic payments and customer records can make cyber risk part of everyday life for an Ontario small business. The Insurance Bureau of Canada (IBC) highlights customer data, electronic payments and digital infrastructure as areas of cyber exposure. Start with the systems and information your business depends on, then compare the actual insurance wording. IBC’s business cyber-risk guide.

1. Does the policy cover your recovery costs and claims from others?

Ask your broker to separate the costs of getting your own business back on its feet from liability claims brought by other people. Potential coverages include breach investigation, customer notification, data restoration and legal expenses. The precise protection depends on the contract.

IBC describes stand-alone cyber policies, cyber endorsements and limited protection within some traditional business policies. Ask which arrangement you are being quoted, and what its exclusions leave you to manage. IBC’s business coverage guide.

2. What has to happen before downtime is covered?

List the services that would stop you taking orders, booking appointments or issuing invoices if they became unavailable. Include outsourced systems such as cloud software and payment services.

Ask whether the quoted protection covers an incident affecting your own systems, an incident at a service provider, or both. Chubb’s Canadian product overview, for example, lists service-provider business interruption as an optional coverage. That is a useful reason to check the relevant clause in each quote. Chubb’s Canadian cyber coverage overview.

Also ask how lost income is calculated, which extra expenses qualify, whether a waiting period applies, and how long the policy will pay after a covered interruption.

3. Would a fraudulent payment instruction be covered?

An email impersonating a supplier can ask staff to send a legitimate invoice payment to a different account. The Canadian Anti-Fraud Centre warns businesses about this form of payment redirection. Confirm changed payment instructions through a trusted contact method before sending money. Canadian Anti-Fraud Centre’s business fraud guidance.

Ask specifically about social engineering, computer fraud and funds-transfer fraud, and which policy would respond. Intact lists these as separate insuring agreements within its crime offering. The label “cyber insurance” alone leaves important questions unanswered. Intact’s crime coverage overview.

4. Who helps with an incident, and what would you pay?

Before choosing a quote, ask for clear answers to these practical questions:

• What is the overall limit, and are there lower limits for particular losses?
• Which deductible or retention applies to each coverage?
• Do investigation, legal and notification costs reduce the amount left for other claims?
• Who is the incident-response contact, and when must you notify the insurer?
• Does the insurer need to approve specialists or spending in advance?

Incident support can be an important part of the product. For example, Intact’s privacy-breach offering describes access to specialist assistance, alongside specified remediation, business interruption and legal expense coverages. Check the services included in your own proposal. Intact’s privacy-breach coverage overview.

Ask who will help assess applicable privacy obligations. For organizations subject to PIPEDA, certain breaches must be reported to the Privacy Commissioner and affected individuals notified when there is a real risk of significant harm. Obtain advice promptly if an incident occurs. Privacy Commissioner’s breach-reporting guidance.

5. Can you verify the security answers on the application?

Have the person responsible for your IT check the application before it is submitted. Describe what is in place today and identify anything still being implemented.

Prepare information about multi-factor authentication, software updates, backups and recovery testing, employee training, and the systems managed by outside providers. The Government of Canada’s small-business guide provides practical steps in these areas. It is a preparation resource; the insurer sets its own application and underwriting requirements. Get Cyber Safe’s small-business guide.

Keep a written incident-response plan and an accessible offline copy of essential contacts. The Canadian Centre for Cyber Security recommends planning who will respond and considering insurance for response and recovery activities. Cyber Centre’s baseline controls.

Bring the business details to your review

Bring your current policies, the services you rely on and your verified security information to A-Z Insurance. We can help you frame the coverage questions and review available commercial insurance options.

General information checked October 13, 2026. Insurer examples illustrate coverage questions; availability and eligibility require confirmation. Actual protection depends on the issued policy, endorsements, limits, exclusions and claim circumstances. This article is general information and does not replace legal or cyber-security advice.