The Securities and Exchange Commission of Sri Lanka (SEC) ramped up its enforcement actions to clamp down on alternative market misconduct, illegal trading ecosystems, and legacy financial crimes.
Reopening of Legacy 2010–2015 Pumping Schemes In mid-2026, the SEC officially reopened high-profile, closed investigations into financial irregularities and market manipulation dating back to the 2010–2015 era.
Several Prominent individuals were summoned for intense questioning. The Probe focuses on the corrupt manipulation of the Colombo Stock Exchange (CSE) under past regimes, specifically investigating how state funds like the Employees Provident Fund (EPF) were used to purchase heavily pumped, loss-making junk stocks.
On January 7, 2026, a massive systemic incident occurred when Wealth Trust Securities debuted on the CSE. A single buy order for the IPO stock (offered at Rs. 7) was mistakenly or intentionally executed at an astronomical Rs. 25,000 per share.
This single transaction artificially sent the morning turnover soaring to Rs. 162 billion in minutes, heavily distorting investors’ digital “buying power” and introducing immediate systemic risk.
The SEC and CSE were forced to halt the market and completely cancel/purge all equity transactions for that day to avoid widespread artificial distortion.
In early 2026, the SEC issued urgent public warnings regarding unregistered digital platforms pulling retail capital into fraudulent investment schemes.
An unlicensed firm operating under the name “Blue Ocean Securities Ltd” launched a mobile application called “BOMate”. Impersonators claiming to be market analysts duped retail investors into depositing money into unauthorized bank accounts under the guise of CSE trading.
The SEC and CSE handed over tracked bank accounts and formal complaints to the Criminal Investigation Department (CID) for criminal prosecution.
Beyond individual traders, the SEC penalized institutional market players. In 2025, two licensed corporate finance advisers along with a listed company were slammed with Rs. 16 million in administrative fines for severe regulatory breaches and failing to uphold structural transparency during corporate transactions.
The SEC cracked down on retail/high-net-worth algorithmic and manual attempts to create a “false appearance of active trading”. Actions, including a high-profile settlement with market participant in April 2026 (Rs. 5 million) and structural warnings to traders, targeted the manipulation of illiquid shares via repetitive, micro-quantity buy orders.
To mitigate manual loopholes and prevent tech-driven fraud, the SEC integrated heavy cyber defenses and transaction tracking capabilities between late 2025 and mid-2026..
To actively identify insider trading and market rigging before they ruin retail portfolios, the SEC fully operationalized the Nasdaq surveillance system. This platform grants regulators real-time automated tracking of abnormal price movements, flash-order volume spikes, and cross-account synchronized trading patterns.
The SEC completed its first-phase digitalization framework with the CSE, enabling a 100% digital trade-to-settlement By pairing this with the state’s rollout of the Sri Lanka Unique Digital Identity (SL-UDI) framework and digital e-KYC (Electronic Know Your Customer) protocols, the system heavily restricts the creation of fake “mule accounts” or dummy portfolios often used in pump-and-dump operations.
Crypto & Virtual Asset Regulation Framework (July–August 2026)Following years of a total crypto ban by the Central Bank, the Cabinet of Ministers officially designated the SEC as the primary regulatory authority for Virtual Assets and Virtual Asset Service Providers (VASPs)
in July 2026.The Legal Shift: The Ministry of Digital Economy and the SEC are drafting a Virtual Assets Regulation Law, targeted for final parliamentary rollout by August 2027.Security Upgrades: To eliminate underground Peer-to-Peer (P2P) financial leaks, the SEC is integrating blockchain traceability tools, advanced transaction monitoring software, and strict compliance rules for digital exchanges.
Following a major $2.5 million cyber-theft fraud targeting a state debt transaction between late 2025 and early 2026, the government aggressively accelerated unified digital laws.
The state introduced the Cyber Security Act and established a Cyber Security Authority to shield financial institutions from identity fraud, voice cloning, and deep fake market manipulation.
On January 9, 2026, the SEC enforced a strict new directive making it mandatory for outgoing Compliance Officers of any market institution to submit comprehensive, confidential feedback forms directly to the SEC. This prevents companies from covering up internal data tampering or ignoring insider system alerts when a compliance officer resigns.