In the gleaming high-rises of Colombo’s financial district, where Sri Lanka’s banking sector has slowly clawed its way back from the 2022 economic abyss, a shadow has fallen over one of the country’s most prominent institutions. The National Development Bank (NDB) is now at the centre of what authorities are calling the largest recorded financial fraud in the nation’s history — a meticulously orchestrated Rs. 13.2 billion heist that allegedly began with insiders exploiting a vulnerable corner of the bank’s digital payment and settlement systems.
Funds siphoned from the general ledger and suspense accounts
What started as an internal probe in early April 2026 quickly ballooned from an initial estimate of around Rs. 380 million to the staggering full figure now under scrutiny. Police sources confirm the fraud involved unauthorised access to the bank’s data systems, with funds siphoned primarily from the bank’s own general ledger and suspense accounts — meaning customer deposits were never touched. Yet the breach has shaken public confidence in an industry still rebuilding trust after years of crisis.
The Criminal Investigation Department’s (CID) Computer Crimes Division, leading the case, has already arrested four suspects who remain in remand custody until April 17. Among them is an assistant manager from NDB’s head-office Payments and Settlements Division and his brother. Investigators believe the group acted in collusion with external parties, funnelling the illicit proceeds through layered transactions that ultimately flowed into virtual currency channels — the very reason Sri Lankan authorities have now turned to the world stage for help.
CID requests from Interpol’s headquarters in Lyon
In a decisive move, the CID formally requested specialist assistance from Interpol’s headquarters in Lyon, France. A specialised team of virtual-currency fraud investigators is expected to land in Colombo within days. Their expertise in tracing blockchain trails, analysing crypto wallets, and dismantling cross-border money-laundering networks is seen as critical. Early probes suggest portions of the stolen funds were converted into Bitcoin and stablecoins before vanishing into offshore accounts and unlicensed exchanges — classic hallmarks of sophisticated digital-age theft that local authorities say require global forensic firepower.
NDB moved swiftly to reassure the public. In a detailed corporate disclosure, the bank emphasised that the incident was confined to “a specific operational area” and that no customer account balances had been affected. All banking services, ATMs, online platforms, and branch operations continue uninterrupted. The bank has also made full provisions for the maximum expected loss, projecting an unaudited after-tax impact of approximately Rs. 4 billion for the first quarter of 2026 — a hit, but one the institution insists it can absorb given its strong balance sheet.
The Central Bank’s Response
The Central Bank of Sri Lanka (CBSL) echoed this confidence, issuing statements confirming that NDB’s capital adequacy and liquidity ratios remain comfortably above regulatory minimums. Regulators are now closely monitoring the bank, with the Securities and Exchange Commission (SEC) holding an urgent meeting with NDB’s board to review internal controls and governance lapses. Parliament, too, has been rocked by the scandal, with opposition lawmakers demanding answers on how such a large-scale operation escaped detection for what appears to have been an extended period — possibly stretching back to late 2025, when a smaller related fraud of Rs. 290 million was first flagged.
Financial experts and analysts watching the case say the episode exposes deeper vulnerabilities in Sri Lanka’s digital banking infrastructure. Even with advanced monitoring by the CBSL’s Financial Intelligence Unit, a determined group of insiders allegedly bypassed multiple layers of oversight. Up to 60 additional suspects — including more bank officials — could face questioning as the probe widens, sources close to the investigation have indicated.
your money is safe
For ordinary Sri Lankans still navigating high interest rates and cautious about where they park their savings, the message from both NDB and the CBSL is clear: your money is safe. Yet the arrival of Interpol’s virtual-currency sleuths signals that this is no ordinary white-collar crime. It is a borderless digital heist that could rewrite the playbook on how Sri Lanka fights financial cyber-crime in the crypto era.
As the Interpol team prepares to touch down and forensic accountants pore over terabytes of transaction logs, one thing is certain: the Rs. 13.2 billion NDB fraud has become more than a bank’s problem. It is a national test of resilience and a stark reminder that in today’s interconnected financial world, even the strongest vaults can be cracked from within. The coming weeks will reveal whether Sri Lanka’s regulators and law enforcement can turn this crisis into a catalyst for tighter, smarter safeguards before the next ghost in the machine strikes again.
