Sri Lanka’s Employees’ Provident Fund (EPF) and Employees’ Trust Fund (ETF), which safeguard the retirement savings of millions of private-sector workers, are confronting an unprecedented convergence of risks. Cyber criminals, controversial governance reforms and growing transparency concerns have together created a perfect storm that threatens public confidence in the country’s two largest social security funds.
The first and most immediate danger is an escalating cyber-security threat. The Central Bank of Sri Lanka (CBSL) recently issued an urgent warning over sophisticated phishing emails masquerading as official EPF communications. Bearing the subject “Notice from Central Bank of Sri Lanka EPF,” these fraudulent messages contain malicious links capable of stealing personal financial information and compromising retirement accounts.
The warning, issued under the CBSL’s “Be Scam Proof Month 2026” campaign, demonstrates that cyber criminals are now directly targeting workers’ retirement savings, making digital vigilance as important as financial security.
The second and potentially more consequential threat is the proposed restructuring of EPF and ETF governance. Cabinet approval to appoint a committee studying a unified tripartite board has triggered fierce resistance from trade unions and governance experts.
The proposal, strongly promoted by the Employers’ Federation of Ceylon (EFC), seeks to remove EPF management from the Central Bank and place both funds under an independent board representing employers, employees and the Government while significantly expanding investments in the private sector.
Supporters argue that the reforms would reduce political interference and modernise investment strategies. Critics, however, describe the initiative as a “Trojan Horse” for corporate capture. They warn that transferring control from the Central Bank to a board heavily influenced by private-sector interests could transform workers’ compulsory savings into a convenient source of cheap corporate capital, exposing contributors to greater commercial risks while weakening statutory safeguards that currently protect the funds.
The third danger stems from continuing concerns over transparency and accountability. Public confidence suffered another setback after the Court of Appeal overturned a Right to Information Commission directive requiring disclosure of detailed historical EPF bond transactions. The information had been sought to scrutinise alleged irregularities linked to past Government securities and bond market dealings. Although the Court ruled that disclosure could undermine the fund’s competitive position, critics argue the decision has deepened public suspicion that controversial investment decisions remain shielded from meaningful scrutiny.
Ironically, while authorities are tightening employer compliance by mandating fully electronic ETF remittances from July 2026 to prevent contribution fraud, broader governance questions remain unresolved.
The EPF and ETF together represent the financial future of millions of Sri Lankan families. Whether the emerging reforms ultimately strengthen these institutions or merely replace one form of control with another will determine whether workers’ life savings remain protected—or become the next battleground between political power, corporate ambition and public trust.