Running an Online Store Without This Insurance Is Riskier Than Most Ecommerce Sellers Realize

Yes, absolutely. Every ecommerce business — from a solo Etsy seller to a multi-million dollar Amazon brand — needs insurance. At minimum, product liability insurance is essential for any seller shipping physical goods, and cyber insurance is essential for any business that collects customer data or processes payments online. Legal liability does not require a physical storefront to attach.

Online sellers typically need: (1) General Liability / Product Liability Insurance, (2) Cyber Liability Insurance, (3) Commercial Property Insurance for inventory, (4) Business Interruption Insurance, and (5) an Umbrella policy as they scale. Marketplace sellers on Amazon additionally need an occurrence-based CGL policy naming the platform as an additional insured.

In most jurisdictions, general business insurance is not legally mandated for online sellers. However, marketplace platforms like Amazon contractually require it once you exceed their sales thresholds. Additionally, if you employ staff, workers’ compensation insurance is legally required in most U.S. states and many other countries regardless of whether you operate online or offline.

No. Personal homeowner’s or renter’s insurance policies explicitly exclude business activities and business property. A claim arising from your ecommerce operations — including product liability claims from customers, theft of business inventory, or cyber breaches of your store — would be denied under a personal policy. You need dedicated commercial business insurance.

A Business Owner’s Policy (BOP) bundles Commercial General Liability insurance and Commercial Property insurance into a single, cost-efficient package. For most small-to-mid-size ecommerce businesses, a BOP plus a standalone Cyber Liability policy represents the most cost-effective starting insurance program. BOPs are typically available to businesses with annual revenues under $5M and are not available for the highest-risk product categories.

Yes. Amazon requires commercial liability insurance — which must include product liability coverage — for all sellers once they exceed $10,000 in monthly sales. The minimum coverage is $1,000,000 per occurrence. The policy must be occurrence-based (not claims-made), and Amazon must be named as an additional insured. This requirement applies to all Amazon marketplace regions globally.

If Amazon requests proof of insurance and you cannot provide a compliant Certificate of Insurance, Amazon may suppress your listings, place your account under review, or suspend your selling privileges entirely. Reinstatement can take days to weeks, causing significant revenue loss. Additionally, you remain personally financially liable for any product claims during the uninsured period.

Amazon carries its own liability insurance as a corporation, but it does not extend meaningful protection to third-party sellers on its marketplace. Amazon’s insurance protects Amazon — not you. Following several U.S. court rulings establishing Amazon’s co-liability for marketplace products, Amazon has both strengthened its own defenses and tightened seller insurance requirements. Sellers remain independently liable and need their own coverage.

Shopify does not contractually require sellers to carry business insurance as a condition of operating a store. However, Shopify’s Terms of Service place full legal compliance responsibility on merchants. Practically, any serious Shopify store processing customer payments and shipping physical goods needs general liability, cyber liability, and commercial property coverage to operate safely.

Yes. Walmart Marketplace requires third-party sellers to maintain commercial general liability insurance with minimum limits of $1,000,000 per occurrence and $2,000,000 aggregate. Walmart must be named as an additional insured, and sellers must submit a COI during the onboarding process and upon request at any time. The requirements are very similar to Amazon’s mandate.

Yes, in most jurisdictions. As the seller of record — the business that listed and sold the product to the consumer — you bear independent product liability regardless of who manufactured the item. This applies to wholesale resellers, private label sellers, and dropshipping businesses alike. If the original manufacturer cannot be identified or is located outside the plaintiff’s jurisdiction, courts routinely pursue the seller as the accessible defendant.

Product liability insurance pays: (a) legal defense costs including attorney fees, court costs, and expert witnesses; (b) settlements reached outside of court; (c) court judgments up to the policy limit; and (d) medical expenses for injured parties in some policy configurations. It does not pay for product recalls, the cost of replacing the defective product itself, or reputational damage to your brand.

Sellers of purely digital products — ebooks, software, courses, digital art — typically do not need product liability insurance since there is no physical product that can cause bodily injury. However, they do need professional indemnity (errors and omissions) insurance if their digital product provides advice, information, or services that could cause financial harm if incorrect. Cyber liability insurance is also essential for any digital seller collecting customer data.

Product recall insurance covers the costs of recalling a defective or dangerous product from the market — including consumer notification, logistics of retrieving products, destruction or disposal costs, replacement product costs, and business interruption during the recall period. Standard product liability policies do not cover recall costs. Sellers in food, supplements, electronics, children’s products, and medical devices should strongly consider this coverage.

No. Stripe, PayPal, and other payment processors provide PCI DSS compliant payment infrastructure, but they do not insure your business against cyber losses. If your store is compromised and customer data is stolen — even data that does not include card numbers — your business is legally responsible for breach notification, regulatory compliance, and civil liability. Your payment processor’s security does not transfer to cover your customer database, email lists, or store credentials.

A small ecommerce store with under $500,000 in annual revenue can obtain cyber liability coverage starting at $600–$1,200 per year for $250,000–$1,000,000 in coverage. The average small business cyber insurance premium is approximately $683 per year (approximately $57/month). Premiums increase with revenue, number of customer records, and the sophistication of data processed (payment card data vs. email addresses only).

Yes, most modern cyber insurance policies include ransomware coverage — but with important conditions. Insurers typically require pre-approval before any ransom payment is made. Coverage usually includes the ransom payment itself (if approved), negotiation specialist fees, system restoration costs, and business interruption losses during the recovery period. Some policies have ransomware-specific sub-limits that are lower than the overall policy limit.

Any ecommerce seller with EU customers is subject to GDPR, which carries maximum fines of 4% of global annual turnover or €20 million (whichever is higher) for serious violations. Cyber insurance policies with regulatory defense and fines coverage can cover legal defense against GDPR investigations and, in some jurisdictions, pay the resulting fines. Sellers should verify that their cyber policy explicitly covers GDPR regulatory proceedings, as some policies carve this out.

Standard business interruption insurance requires a physical property damage trigger and typically does not cover website or server downtime. However, cyber business interruption coverage — available as a standalone policy or an extension of a cyber liability policy — specifically covers revenue loss from technology failures, including hosting outages, DDoS attacks, and cloud provider disruptions. Ecommerce sellers should explicitly request this coverage.

Some specialty ecommerce business interruption policies do include coverage for marketplace account suspension events, particularly those caused by covered incidents such as intellectual property infringement claims or false counterfeit allegations. Standard BI policies generally do not cover platform policy violations. Sellers should specifically ask brokers about marketplace suspension riders when placing coverage.

Contingent Business Interruption (CBI) insurance covers revenue losses caused by a disruption at a key supplier, logistics partner, or third-party service provider — even if your own operations are undamaged. For ecommerce sellers relying on a single manufacturer, 3PL warehouse, or fulfillment center, CBI is a critical coverage. A fire at your 3PL’s warehouse or your manufacturer’s factory can halt your business entirely without CBI coverage.

Total annual ecommerce insurance cost depends heavily on business size, product category, and coverage selected. A startup with under $100K in revenue can cover the basics (BOP + cyber) for $500–$1,500/year. A mid-market brand with $1M–$5M in revenue typically spends $5,000–$15,000/year on a comprehensive program. Enterprise sellers at $10M+ revenue spend $40,000–$150,000+ annually on a fully layered program including umbrella coverage.

Yes. Dropshipping businesses need product liability insurance despite never physically handling their products. As the seller of record, a dropshipper is legally liable for any harm caused by products sold through their store. They also need cyber insurance for their store’s customer data, and business interruption coverage for supplier disruptions. The misconception that dropshippers have no liability is one of the most dangerous myths in ecommerce.

Yes. Etsy sellers, particularly those selling handmade or customized physical products, need product liability insurance. Etsy does not mandate insurance but cannot protect individual sellers from customer injury claims. Handmade product sellers face unique liability risks — handmade candles, jewelry, cosmetics, food items, and children’s crafts all carry potential injury or toxicity claims. A general liability policy starting at $500/year is a sound investment for any active Etsy seller.

Before. Product liability exposure exists from the moment your first product listing goes live. A customer could theoretically purchase and be harmed before your business has generated meaningful revenue. The cost of a general liability policy — as low as $42/month — is trivially small compared to the potential financial exposure of an uninsured claim. Getting insured before your first sale is best practice and signals professional business management to marketplace platforms.

An umbrella insurance policy provides additional liability coverage above and beyond the limits of your primary policies (CGL, product liability, auto liability). If a product liability judgment exceeds your $1M CGL limit, a $5M umbrella policy covers the excess up to its limit. Ecommerce businesses with over $1M in annual revenue, high-risk product categories, or significant international sales volume should consider a commercial umbrella policy as part of their layered coverage strategy.

Look for insurance brokers or agencies that specifically advertise ecommerce, online retail, or marketplace seller insurance. Key providers in this space include Insureon, Simply Business, Next Insurance, Hiscox, and specialist marketplace insurance programs like the Amazon Insurance Accelerator. When evaluating a broker, ask specifically: Do you place coverage for Amazon FBA sellers? Can you write occurrence-based CGL with marketplace additional insured endorsements? Do you offer cyber coverage for payment card environments?

An occurrence policy covers claims arising from incidents that occurred during the policy period — regardless of when the claim is actually filed. A claims-made policy only covers claims that are both caused AND reported while the policy is active. Amazon and most marketplace platforms require occurrence-based policies because product liability claims can be filed years after the incident. A claims-made policy that lapses leaves you with no coverage for prior incidents.

Standard Commercial General Liability policies include “personal and advertising injury” coverage, which typically covers claims of copyright infringement in advertising, unintentional trademark infringement, and defamation. However, deliberate IP infringement is explicitly excluded. For sellers at serious risk of IP disputes — particularly those in fashion, media, or software — a dedicated Media Liability or Technology E&O policy provides broader protection.

International ecommerce sellers need a policy with worldwide territory coverage (or at minimum, coverage in every country where products are shipped). If selling to U.S. customers specifically, ensure your policy includes U.S. jurisdiction coverage, as U.S. product liability exposure is substantially higher than most other markets. EU sellers need GDPR regulatory coverage in their cyber policy. Cross-border sellers should work with a broker experienced in multinational insurance placements.

Many online insurance providers can bind coverage and issue a Certificate of Insurance within 24–48 hours for standard ecommerce risk profiles. Through platforms like Insureon, Simply Business, or Next Insurance, small ecommerce sellers can complete an application, receive quotes, select coverage, and obtain a COI within the same business day. Higher-risk categories or larger businesses may require manual underwriting, extending the process to 3–10 business days.