First Notice of Loss (FNOL)

Last updated October 13, 2026

How first notice of loss works

When something goes wrong, the insured tells the insurer. That report is the FNOL. It can be made through a claims hotline, app, portal or written notice, depending on the insurer. Once received, the insurer typically opens a claim file, assigns an adjuster or claims professional, and begins investigating and evaluating coverage.

A typical FNOL includes:

• The insured's name and the policy number.
• The date, time and place of the incident.
• A factual description of what happened and who was affected.
• Any known damage, injuries or third-party demands, plus supporting documents such as photos or reports.

Notice rules in the policy

Most policies have conditions about notice, such as reporting "as soon as practicable" or within a fixed period. Under claims-made policies, notice must usually be given during the policy period or a stated reporting window, and some policies also allow notice of circumstances that might lead to a claim. How strictly late notice is enforced depends on the policy wording and the law of the state involved.

What to include in a first notice of loss

A good notice is factual, complete enough for the insurer to open a file, and sent the way the policy requires. In practice, include:

• Policy details. The exact named insured, the policy number and the policy period. If more than one policy could respond, such as technology E&O, cyber and D&O, it is often prudent to give notice under each policy that might apply and let the insurers sort out coverage.
• Who is reporting. The name and contact details of the person giving notice and the people who know the facts.
• What happened. The date of the event, the date it was discovered and the date any demand or lawsuit was received. Describe the facts, the people and systems involved and the location, without speculation.
• Documents. The demand letter or complaint (including when it was served, since court deadlines run), the contract at issue, regulator correspondence, police or incident report numbers, photos, and any vendor reports.
• Amounts. What the claimant is demanding, if stated, and your best known estimate of the loss, labeled as an estimate.
• Steps taken. Containment and mitigation, any counsel or vendors already engaged, and anyone else who has been notified.

Leave out opinions about fault, admissions of liability and promises of payment. Those belong to the insurer's investigation and, where relevant, to your counsel.

Timing and notice provisions: claims-made vs. occurrence

When notice is due depends on how the policy is triggered. Read the notice condition in your own policy, because wording varies.

Occurrence policies

An occurrence policy is triggered by an event that happens during the policy period, even if the claim arrives later. Conditions typically require notice of an occurrence or offense that may result in a claim "as soon as practicable," and require that suit papers be sent to the insurer immediately. Coverage may still be available for a later claim, but a long delay gives the insurer grounds to dispute coverage and can make investigation harder.

Claims-made policies

A claims-made policy generally requires that the claim be first made against the insured during the policy period and reported during that period or within a short reporting window after it ends. These deadlines are usually applied strictly. Many policies also include a notice of circumstances provision, which lets the insured report specific facts that could lead to a claim during the policy period so that a later claim is treated as made in that period. The notice must usually describe the circumstances in detail, so a vague note may not qualify. See extended reporting period and the retroactive date for related timing rules.

First-party policies

For losses to your own property, income or systems, such as first-party coverage under property, crime or cyber, the policy usually requires prompt notice and later a proof of loss within a stated deadline. Some cyber policies also require you to use specific response vendors or a hotline, and some crime forms measure notice from the date the loss is discovered. Check these terms before an incident.

Why late notice matters

Notice is a condition of coverage, not a courtesy. Late reporting can give the insurer a reason to deny or limit coverage because it lost the chance to investigate, preserve evidence, control the defense or limit the loss. Costs you incur before the insurer is told, including some legal fees and settlements, may not be reimbursed. How strictly late notice is enforced depends on the wording and on state law. Some states require the insurer to show it was harmed by the delay, particularly under occurrence policies, while claims-made reporting deadlines tend to be enforced more strictly. Do not rely on a general rule. Treat the deadline in your policy as firm and report early.

Notice also interacts with renewal. A matter you know about but did not report before expiration can be treated as a known circumstance, and a renewal policy may exclude it.

How brokers help

A broker cannot promise coverage, but the broker can reduce the chance of a procedural mistake. A good broker will help you identify which policies could respond, find the notice address and required form for each, deliver the notice in the way the policy specifies, and keep proof of delivery. Brokers also track acknowledgment from the insurer, help gather documents, advocate with the claims team and flag renewal deadlines for notice of circumstances. On surplus lines placements the notice instructions may point to a managing general agent or a specific insurer rather than to your broker, so confirm the route. When a policy requires notice directly to the insurer, notifying only the broker may not satisfy it, so do both.

Example

What to watch for

• Learn where and how to report before you need to. Some policies require notice to a specific address, not just to a broker.
• Report demands, lawsuits, regulatory inquiries and serious incidents, even if the outcome is unclear.
• Stick to facts in the notice, and do not admit liability or promise payment.
• Keep copies and confirmation of when and how notice was sent.
• An FNOL is a report, not an approval. The insurer decides coverage after investigation, and may issue a reservation of rights.

FNOL vs. related terms

• FNOL vs. claim. The claim is the demand, lawsuit or loss event itself. FNOL is the report of it to the insurer. Policies define "claim" precisely, and that definition often controls when the notice clock starts.
• FNOL vs. notice of circumstances. A notice of circumstances reports facts that might lead to a claim, before any claim is made. It is a feature of many claims-made policies and is used to lock in coverage under the current policy.
• FNOL vs. proof of loss. In first-party claims, a proof of loss is a later, more formal statement of the amount claimed, usually with a deadline. The FNOL is the first, shorter report.
• FNOL vs. tender. To tender a claim means to formally ask an insurer to accept it, for example to request a defense. A company may also tender a claim to another party's insurer when it has additional insured status.
• FNOL vs. coverage decision. Filing opens the file. It does not decide coverage. The insurer may accept, deny or issue a reservation of rights.

A second example: notice of circumstances before renewal

First notice of loss checklist

1. Stabilize. Contain the problem and take reasonable steps to prevent further loss. Keep receipts.
2. Read the notice condition. Find who must receive notice, where, by what method and by when.
3. List every policy that might respond. Consider first-party and third-party coverage together.
4. Gather documents. Demand letters, complaints, contracts, logs, photos and timelines.
5. Write a short factual notice. Facts, dates, parties and attachments, with no admissions.
6. Send it as the policy requires. Keep proof of delivery, and copy your broker.
7. Pause before committing. Do not agree to pay, settle or admit liability without the insurer's consent. See consent to settle and duty to defend.
8. Preserve evidence and rights. Keep relevant records and avoid steps that could impair the insurer's subrogation rights against others. Ask counsel about formal preservation duties.
9. Track deadlines. Calendar the insurer's acknowledgment, any lawsuit response date and the policy's follow-up requirements.
10. Report circumstances before expiration. If you know of facts that could become a claim, discuss notice with your broker before the policy period ends.

Common mistakes

• Waiting for certainty about the amount, fault or coverage before reporting.
• Telling only the broker when the policy requires notice to the insurer.
• Reporting under one policy when several could apply.
• Sending notice to a general claims inbox that the policy does not designate.
• Admitting fault, agreeing to a settlement or paying a claim voluntarily before the insurer weighs in.
• Ignoring a lawsuit's response deadline while waiting for the insurer.
• Skipping notice because the deductible or retention seems larger than the loss. Smaller matters can grow, and reporting also keeps the record accurate for the renewal loss run.

Why it matters for technology, AI, fintech and digital-asset companies

Cyber incidents, security breaches and customer disputes often move quickly, and many cyber and technology E&O policies have specific notice conditions and vendor requirements. Knowing the reporting path in advance saves time during an incident.

Incidents in these industries often involve several clocks at once: an insurance notice deadline, legal notification duties to customers or regulators, contractual notice obligations to partners, and the practical pace of an incident response. Insurance notice is a separate step from legal or regulatory notification, and counsel should advise on the latter. For AI companies, a customer complaint about model output may fit under technology E&O or AI liability wording, and for crypto and other digital-asset firms, a custody incident, theft or regulatory inquiry can touch crime, cyber and D&O policies together. Sorting out the right notices early helps. See digital assets and crypto.

Related terms

Frequently asked questions