Sri Lanka’s economic recovery is facing a threat that extends far beyond political corruption, with a series of financial scandals exposing serious weaknesses in corporate governance, banking controls, regulatory enforcement and protection of public resources.
At the centre of the emerging crisis is an alleged trade-misinvoicing network involving 105 companies, 55 individuals and 227 bank accounts across 13 financial institutions. Investigations have uncovered nearly 24,300 telegraphic transfers allegedly carried out under the guise of phantom imports. The transactions are estimated to have moved approximately Rs.214.7 billion, or US$715 million, out of Sri Lanka.
The scale of the operation raises fundamental questions about the effectiveness of the country’s banking supervision, customs controls and financial-intelligence mechanisms. Investigators have also reportedly identified links between some of these corporate channels and money-laundering operations allegedly connected to transnational drug networks based in Dubai.
The banking sector itself has suffered major internal vulnerabilities. National Development Bank PLC became embroiled in a major internal fraud after rogue employees allegedly exploited weaknesses in weekend transaction processing through the Common Electronic Fund Transfer Switch. The incident reportedly resulted in an estimated Rs.13.2 billion being siphoned, while the bank recorded a direct loss of approximately Rs.4 billion during the first quarter of 2026. The resulting financial pressure forced the suspension of cash dividends.
Other incidents demonstrate that the threat is not restricted to insider manipulation. A phishing attack reportedly compromised more than Rs.6 billion belonging to Commercial Bank customers, while hackers breached Cargills Bank, allegedly extracting approximately 1.9 terabytes of confidential data. These incidents highlight the growing financial consequences of inadequate cyber-security and weak internal controls.
Corporate influence over public resources has also come under scrutiny. The arrest by the Commission to Investigate Allegations of Bribery or Corruption of a former parliamentary secretary over an alleged Rs.8.1 million bribe exposed another dimension of the problem. The payment allegedly involved three private corporations seeking unauthorized clearances to export phosphate through Lanka Phosphate Limited. Such arrangements, if established, raise concerns about the protection and valuation of strategically important state resources.
Meanwhile, the Central Bank has intensified action against illegal pyramid and multi-level marketing operations. Twenty-one organisations have reportedly been prohibited from conducting activities violating provisions of the Banking Act. The enforcement action illustrates how apparently legitimate commercial structures can potentially be used to mobilise and divert funds from vulnerable members of the public.
Hitherto perhaps the most damaging weakness is the absence of effective protection for those who expose wrongdoing. Transparency International Sri Lanka has repeatedly highlighted concerns over safeguards for whistleblowers and independent non-executive directors. Employees discovering financial misconduct can face transfers, retaliation or legal pressure, discouraging internal reporting.
For an economy attempting to rebuild credibility after a severe financial crisis, these developments carry consequences beyond individual companies. Capital flight, banking fraud, cyber breaches, bribery and weak whistleblower protection can collectively undermine investor confidence and public trust.
Sri Lanka’s recovery therefore requires more than macroeconomic stabilisation. It requires stronger corporate accountability, effective financial surveillance, independent internal oversight and credible protection for those who expose corruption before institutional weaknesses become another national economic crisis.