By a special correspondent
The disclosure of a massive internal fraud at NDB Bank has raised serious questions about internal controls, governance failures, and systemic risk within one of Sri Lanka’s key financial institutions. What initially appeared as a Rs. 380 million irregularity quickly escalated into a staggering Rs. 13.2 billion fraud, suggesting prolonged operational lapses and possible oversight failures
over several years.
According to bank disclosures, the fraud was orchestrated by a group of employees acting in collusion with external parties, exploiting weaknesses within a specific operational unit. The fact that such a significant amount could be siphoned off undetected over an extended period indicates not just isolated misconduct, but structural vulnerabilities in monitoring systems and internal audits.
The bank’s response suspending implicated staff, tightening access controls, and initiating a forensic audit signals urgency. However, these are reactive measures. The deeper concern lies in how existing safeguards failed to flag irregularities earlier. For stakeholders, this raises critical questions about accountability at both management and board levels.
Financially, NDB has attempted to contain the narrative by projecting resilience. Even under a worst-case scenario, the bank estimates a Rs. 4 billion loss for the first quarter of 2026. While this is substantial, it remains relatively contained against its Rs. 11 billion profit reported for 2025 and it’s nearly Rs. 990 billion asset base. Capital adequacy ratios are expected to remain above regulatory thresholds, suggesting that solvency is not immediately threatened.
However, reputational damage may prove more consequential than the direct financial loss. Investor sentiment has already reacted negatively, with banking sector stocks declining and NDB shares halted from trading. Confidence once shaken can have longer-term implications for funding costs, investor appetite, and market valuation.
This incident underscores a broader issue within the banking sector: the persistent gap between regulatory compliance and effective risk management. While institutions may meet capital and liquidity benchmarks, internal governance failures can still expose them to significant shocks.
Ultimately, the NDB fraud is not just a story of financial loss, but a cautionary tale about the importance of robust internal controls, real-time monitoring systems, and a culture of accountability. The true test will be whether the bank and the wider sector implements lasting reforms or merely addresses the symptoms of a deeper problem.