The alleged billion-dollar foreign-exchange operation now under investigation in Sri Lanka is more than a story about suspicious companies and questionable imports. It is a test of whether the country’s financial institutions can protect the national economy from organised abuse.
Investigators have reportedly uncovered a network involving 105 shell companies, 227 bank accounts and more than 24,000 telegraphic transfers. Approximately US$715 million has been identified in one investigation, while President Anura Kumara Dissanayake has referred to an alleged outflow approaching US$1 billion through advance payments for imports that apparently never arrived.
Thirteen banks are reportedly being examined in connection with transactions under investigation.The numbers alone demand scrutiny. But the more important issue is what happened inside the institutions that processed these payments.
Banking safeguards exist precisely because financial crime rarely announces itself openly. Know Your Customer checks, Customer Due Diligence, transaction monitoring and suspicious-activity reporting are designed to identify unusual behaviour before losses become systemic.
Investigators have reportedly found cases where accounts were allegedly opened without the named customer being physically present. There are also questions over accounts being closed at one branch and subsequently reopened at another. If these findings are substantiated, regulators must determine whether customer histories and risk assessments were adequately carried across the banking system.
There is another troubling question: what did compliance officers and senior managers see?
Thousands of transfers involving numerous companies should provide a substantial data trail. Repeated payments for supposedly imported goods, particularly where shipments do not subsequently appear in Customs records, could constitute obvious risk indicators.
A sophisticated fraud may exploit weaknesses in technology, but technology alone cannot explain prolonged institutional failure. Human decisions matter. If bank employees knowingly assisted customers in circumventing controls, individual accountability must follow. If warning signs were missed because systems were poorly designed or inadequately supervised, management and regulatory responsibility must also be examined.
Sri Lanka must therefore move beyond a narrow focus on arrests.
Authorities should establish how many alerts were generated, how many were investigated, whether suspicious accounts were restricted, and whether concerns were escalated to the appropriate agencies. Independent forensic reviews should examine whether internal controls were deliberately bypassed, negligently applied or simply incapable of detecting complex patterns.
Real-time integration between commercial banks and Sri Lanka Customs is essential. Import-related foreign-currency payments should be digitally matched against shipping and Customs data, with transactions automatically flagged when goods fail to arrive within the required period.
High-value remittances should receive enhanced scrutiny, while staff working in high-risk functions should be subject to regular rotation, strengthened declarations and independent oversight. Protected whistle-blower mechanisms and serious penalties for collusion or bribery are equally important.
There is also a cultural challenge. A financial system cannot be protected when unexplained wealth is quietly admired and rapid enrichment becomes a measure of success. Ethics must be treated as part of financial security.
Sri Lanka cannot restore confidence through enforcement alone. It must demonstrate that banks, executives, compliance officers and regulators are collectively responsible for protecting the country’s foreign exchange.
The real investigation, therefore, should not end with identifying who allegedly moved the money. It should establish why the system allowed it to move at all.