You’ve built your Shopify store, dialled in your ads, and orders are flowing. Then one morning you wake up to an email that changes everything — a customer claims your product caused an allergic reaction and their lawyer wants to talk. Or your payment processor flags a data breach affecting 2,000 customer records. Or Australia Post loses an entire pallet of your best-selling SKU two weeks before Christmas.
Most ecommerce store owners don’t think about insurance until one of these scenarios happens. By then, it’s too late. The costs are already piling up — legal fees, replacement stock, lost revenue, breach notification requirements — and you’re scrambling to cover it all from your operating cash flow.
Here’s the uncomfortable truth: running an online store in Australia exposes you to more risk than most founders realise. The Australian Cyber Security Centre reported that the average cost of a cybercrime incident for small businesses hit $49,600 per reported incident in 2023-24, up 8% year-on-year. And that’s just cyber. Product liability, shipping losses, business interruption — each one can wipe out months of profit in a single event. The right insurance coverage isn’t an optional expense. It’s the safety net that lets you scale with confidence.
Why Most Ecommerce Brands Are Dangerously Underinsured
There’s a persistent myth in the ecommerce world that because you don’t have a physical shopfront, you don’t need business insurance. No foot traffic means no slip-and-fall claims, right? That logic misses the dozens of other ways an online business can face a costly claim.
Under the Australian Consumer Law (ACL), online retailers have the same legal obligations as brick-and-mortar stores. If a product you sell causes injury or damage, you can be held liable — even if you didn’t manufacture it. Importers and distributors carry the same exposure as manufacturers under the ACL’s product safety provisions. That means if you’re sourcing products from overseas suppliers and selling them to Australian consumers, the liability sits squarely on your shoulders.
The numbers paint a clear picture. Australia recorded 1,113 data breach notifications in 2024, the highest since the Notifiable Data Breaches scheme launched in 2018. That’s a 25% increase from 893 in 2023. Malicious or criminal attacks were behind 69% of those breaches. If you’re processing customer payment data, storing email addresses, or holding any personal information (which every ecommerce store does), you’re a target.
Then there’s the shipping risk. Research shows that 3 out of 4 merchants have dealt with lost or damaged parcels in the past two years. Fixing those mistakes — reshipping, refunding, dealing with angry customers — can cost up to 17 times more than the original shipping fee. For a store doing $50,000 a month in orders, even a 2% loss rate means $12,000 a year walking out the door.
The 5 Insurance Policies Every Australian Online Store Should Have
Not every policy is created equal, and not every store needs the same coverage mix. But there are five core types of insurance that cover the most common — and most expensive — risks ecommerce businesses face. Think of these as your baseline. You can always add more, but going without any of these is a gamble that gets riskier as you scale.
1. Product Liability Insurance
What it covers: Claims where a product you sell causes bodily injury or property damage to a customer. This includes manufacturing defects, design flaws, and inadequate warnings or instructions.
Why you need it: Under the ACL, consumers have three years to bring a product liability action from the time they become aware of the issue, and up to ten years from when the product was supplied. One serious claim can easily exceed $100,000 in legal and settlement costs. If you sell anything that goes on skin, is consumed, is used by children, or has any mechanical components, this is non-negotiable.
Real scenario: An Australian skincare brand sold a “natural” face serum through their Shopify store. A customer had a severe allergic reaction to an undisclosed ingredient and required medical treatment. Without product liability insurance, the brand would have been on the hook for medical costs, legal fees, and potential compensation — easily exceeding $80,000. With the right policy, the insurer handled the claim and legal defence.
What to look for: Coverage limits of at least $5 million (standard in Australia), coverage that extends to products sourced from third-party suppliers, and a policy that covers legal defence costs in addition to settlements — not just one or the other.
2. Cyber Liability Insurance
What it covers: Financial losses from data breaches, cyber attacks, ransomware, and system compromises. This typically includes breach notification costs, forensic investigation, credit monitoring for affected customers, business interruption during recovery, and legal liability.
Why you need it: Australia experienced 47 million data breaches in 2024 alone — roughly one Australian account compromised every second. The global average cost of a data breach reached $4.4 million according to IBM, and while small business breaches cost less, the ASD reports Australian small businesses are paying an average of $49,600 per cybercrime incident. For most ecommerce stores doing under $1 million in revenue, that’s a quarter-ending or business-ending event.
Real scenario: An online sporting goods retailer experienced a 72-hour website outage during Black Friday weekend due to a cyber attack, resulting in $85,000 in lost revenue. Their cyber liability policy covered the lost income, forensic investigation, and customer notification requirements.
What to look for: First-party coverage (your direct losses) and third-party coverage (claims from affected customers). Make sure the policy covers business interruption specifically from cyber events, not just data breach response. Also check that ransomware payments are covered — some policies exclude them.
If you haven’t already locked down your store’s security fundamentals, read our guide on ecommerce cybersecurity for Shopify stores — insurance is a safety net, not a substitute for prevention.
3. Public Liability Insurance
What it covers: Claims for bodily injury or property damage that arise from your business operations. Even as an online-only business, this covers situations like a customer visiting your warehouse for a pickup, a pop-up market stall, or a third party injured by your delivery process.
Why you need it: Many wholesale suppliers, marketplace platforms, and commercial landlords require proof of public liability insurance before they’ll work with you. Amazon Australia, for instance, requires sellers to carry commercial insurance once they hit $10,000 in sales for three consecutive months. Even if you never have a claim, this policy opens doors to partnerships and retail opportunities you’d otherwise miss.
What to look for: Minimum $10 million coverage (industry standard in Australia for retail/ecommerce). Ensure it covers all business activities including pop-ups, markets, trade shows, and warehouse visits. Some policies bundle public liability with product liability — this can be a cost-effective option for smaller stores.
4. Business Interruption Insurance
What it covers: Lost revenue and ongoing expenses when an insured event prevents you from operating. For ecommerce, this means coverage when your website goes down due to a covered incident, your warehouse is damaged, your supply chain is disrupted, or a key platform or payment processor has an extended outage.
Why you need it: An Australian online retailer specialising in imported goods lost $120,000 when their main supplier’s warehouse burned down. The fire destroyed $80,000 worth of pre-paid inventory and left them unable to fulfil customer orders for three months. Business interruption insurance covered the lost profits and ongoing fixed costs (rent, software subscriptions, staff wages) during the recovery period.
Important note: Traditional business interruption insurance is designed around physical events — fire, flood, storm damage. If you want coverage for digital disruptions (website outages, cyber-related downtime, platform bans), you’ll need a policy specifically written for online businesses, or a cyber policy with a business interruption extension. Read the fine print carefully.
5. Shipping and Transit Insurance
What it covers: Loss, damage, or theft of goods while in transit from your warehouse to the customer’s door. This covers domestic and international shipments, and can include coverage for goods stored at third-party fulfilment centres.
Why you need it: In 2024 alone, an estimated 85 million packages arrived damaged globally — a 30% increase from the previous year. Major carriers collectively ship over 8 billion packages annually with damage rates reaching approximately 10%. Even with carrier compensation (which is often capped at minimal amounts), you’re left covering the gap between what the carrier pays and what the customer expects — a full replacement or refund.
What to look for: Per-parcel coverage that matches your average order value, not just a blanket annual limit. Check whether the policy covers “mysterious disappearance” (parcels that simply never arrive with no proof of damage). Also verify coverage for goods in storage at 3PL warehouses, not just in-transit.
For a complete framework on handling the customer-facing side of shipping issues, check out our article on returns, refunds, and chargebacks.
How Much Does Ecommerce Insurance Actually Cost in Australia?
This is the question every store owner asks first — and the answer depends on your revenue, product type, claims history, and the coverage limits you choose. But here are realistic benchmarks based on current Australian market rates so you can budget properly.
Product Liability: For a Shopify store doing $200,000-$500,000 in annual revenue selling low-risk products (apparel, accessories, homewares), expect $400-$1,200 per year for $5 million coverage. Higher-risk categories like supplements, electronics, or children’s products push this to $1,500-$4,000.
Cyber Liability: $500-$2,000 per year for $250,000-$1 million in coverage. This varies significantly based on the volume of customer data you store and your existing security measures.
Public Liability: $300-$800 per year for $10 million coverage. This is typically the most affordable policy and often the first one stores purchase because it’s required by so many partners.
Business Interruption: $500-$1,500 per year, depending on your revenue and the indemnity period you choose (typically 12-24 months of coverage).
Shipping Insurance: Typically 1-3% of declared shipment value. Some providers like Parcel Protect offer per-parcel coverage starting from under $1 per parcel.
BizCover, Australia’s largest online small business insurance provider (covering over 290,000 businesses), reports that their average customer pays around $89 per month for a business insurance package. That’s roughly $1,068 per year for bundled coverage — less than most stores spend on a single app subscription. When you compare that to the potential cost of an uninsured claim ($49,600 average for a cyber incident alone), the maths is overwhelmingly clear.
The Insurance Stack: How to Build Your Coverage Based on Revenue Stage
You don’t need every policy from day one. Your insurance needs scale with your business. Here’s a practical framework for what to prioritise at each revenue stage.
Stage 1: Pre-Revenue to $100K/Year
Priority policies: Product Liability + Public Liability (often bundled). At this stage, your biggest risk is a product claim that could shut you down before you’ve even gained traction. A bundled policy covering both typically runs $600-$1,000 per year.
Can wait: Cyber liability (your data volume is lower), business interruption (your fixed costs are minimal), dedicated shipping insurance (carrier coverage may suffice for low volumes).
Stage 2: $100K-$500K/Year
Priority policies: Product Liability + Public Liability + Cyber Liability. You’re now processing enough customer data and transactions to be a meaningful target. You’re also more likely to be approached by wholesale partners or marketplaces that require insurance certificates.
Consider adding: Shipping insurance if your loss rate exceeds 1%, especially for high-value items. Business interruption if you have fixed costs (warehouse, staff) that don’t stop when sales do.
Stage 3: $500K-$2M+/Year
Priority policies: All five — Product Liability, Public Liability, Cyber Liability, Business Interruption, and Shipping/Transit Insurance. At this stage, an uninsured incident doesn’t just hurt — it can crater your business. You likely have staff, warehouse commitments, and supplier contracts that create ongoing financial obligations regardless of whether revenue is flowing.
Also consider: Management Liability insurance if you have a board or partners, and Professional Indemnity if you offer consulting or advisory services alongside your products.
How to Get Insured: A Step-by-Step Setup Guide
Getting the right insurance doesn’t need to be complicated. Here’s the exact process to follow.
Step 1: Audit your risks. Before you request quotes, document your specific exposures. What products do you sell, and what’s the worst-case scenario if one causes harm? How much customer data do you store, and where? What’s your monthly revenue, and how much would a 30-day outage cost you? What’s your average order value and monthly shipping volume? Write these numbers down — you’ll need them for accurate quotes.
Step 2: Compare quotes online. BizCover (bizcover.com.au) lets you compare side-by-side quotes from multiple insurers in under five minutes. You’ll answer questions about your business type, revenue, and the coverage you need, then see premiums from several providers. For more specialised ecommerce coverage, also check Angelic Insurance (angelicinsurance.com.au) and Morgan Insurance Brokers (morganinsurancebrokers.com.au), both of which have specific ecommerce insurance products.
Step 3: Read the Product Disclosure Statement (PDS). This is where most store owners go wrong. The PDS tells you exactly what is and isn’t covered. Pay special attention to exclusions (what’s not covered), waiting periods (how long before coverage kicks in), excess amounts (your out-of-pocket cost per claim), and sub-limits (caps on specific types of claims within your overall coverage). Don’t skim this. A policy that doesn’t cover your specific scenario is money wasted.
Step 4: Set up annual reminders. Insurance needs change as your business grows. Review your coverage every 12 months, or whenever you hit a major milestone — entering a new product category, starting to sell internationally, moving to a warehouse, or crossing a revenue threshold. Underinsurance is almost as risky as no insurance.
Common Insurance Mistakes That Leave Ecommerce Stores Exposed
Even store owners who do get insurance often make mistakes that leave significant gaps in their coverage. Here are the most common ones to avoid.
Relying on your supplier’s insurance. Your Chinese supplier might have product liability coverage in their home country, but that doesn’t protect you in Australia. Under the ACL, the importer (that’s you) carries liability. You need your own policy — full stop.
Assuming Shopify covers you. Shopify provides platform uptime guarantees and PCI compliance for payments processed through Shopify Payments, but this doesn’t extend to product liability, data you collect outside their system, or anything that happens once an order leaves your warehouse. Your store, your risk.
Choosing the cheapest policy without reading exclusions. A $300 product liability policy might exclude products sourced from overseas, products applied to skin, or claims arising from inadequate labelling. If those exclusions match your exact business model, you’re paying for nothing.
Not updating coverage as you scale. The policy you bought at $10,000/month in revenue won’t adequately cover you at $100,000/month. Revenue growth means higher claim exposure, more customer data, bigger shipping volumes, and greater business interruption risk. Review annually, without exception.
Forgetting about marketplace requirements. Amazon Australia requires commercial insurance once you hit $10,000 in sales for three consecutive months. If you’re planning to expand beyond your Shopify store to Amazon, eBay, or wholesale, you’ll need certificates of insurance sooner than you think. Having this in place before you need it avoids scrambling later.
For more on protecting your revenue from fraud-related losses, our guide on Shopify fraud prevention covers the operational side of risk management.
The Ecommerce Insurance Checklist
Use this checklist to audit your current coverage and identify gaps. Print it out, work through it, and take action on anything that’s missing.
Risk Assessment:
- I’ve documented every product category I sell and identified the highest-risk items
- I know how much customer data I store and where it’s held (Shopify, Klaviyo, email lists, spreadsheets)
- I’ve calculated my monthly fixed costs that would continue during a business interruption
- I know my average monthly shipping volume and current loss/damage rate
- I’ve identified which marketplaces or partners require proof of insurance
Coverage Check:
- Product Liability — minimum $5M coverage, includes imported/third-party products
- Public Liability — minimum $10M coverage, covers pop-ups and warehouse visits
- Cyber Liability — covers breach notification, forensic investigation, and business interruption from cyber events
- Business Interruption — covers digital disruption (not just physical events), adequate indemnity period
- Shipping/Transit — per-parcel coverage matches average order value, covers 3PL storage
Annual Maintenance:
- Calendar reminder set for annual policy review (30 days before renewal)
- Coverage limits updated to match current revenue and inventory levels
- New product categories or sales channels added to policies
- Certificates of insurance accessible for marketplace or wholesale requests
- Claims process documented — every team member knows who to call and what to do
How It All Works Together
Insurance isn’t a single policy — it’s a system. Each coverage type protects a different part of your business, and together they create a safety net that lets you make bold moves without catastrophic downside risk.
Product liability lets you confidently launch new products knowing a single defect claim won’t bankrupt you. Cyber liability means you can collect the customer data you need for personalisation and marketing without the existential risk of a breach. Public liability opens doors to wholesale, marketplace, and retail partnerships. Business interruption means a warehouse fire or supplier collapse is a setback, not a death sentence. And shipping insurance turns a lost-parcel problem into a simple claim process instead of a margin-eating exercise.
The stores that scale to seven and eight figures aren’t just better at marketing or products. They’re better at managing risk. They’ve built a business that can absorb a hit and keep moving. Insurance is one of the simplest, most cost-effective ways to build that resilience.
For under $100 a month, you can protect a business that took years to build. That’s not an expense — it’s the most asymmetric investment you’ll ever make in your store.
Your Next Step
Inside the eCommerce Circle, risk management and business protection are core pillars we work through with every member. From insurance audits to legal structures to operational SOPs that minimise exposure — it’s all part of building a store that lasts.
If you want a second set of eyes on your current coverage — or you’re not sure where to start — let’s talk.
