A top police officer becomes the unsuspecting victim of a cross-border cyberattack, exposing a sophisticated money-laundering chain that stretches from Sri Lanka’s banking system to a Nigerian mastermind, raising fresh alarms over digital security and financial fraud.
The Colombo Cyber Crimes Division informed the Colombo Chief Magistrate that a detailed investigation has uncovered the involvement of a Nigerian national suspected of hacking the WhatsApp account of a Senior Deputy Inspector General of Police and defrauding Rs 400,000. The incident has brought renewed attention to the growing threat of cross-border cybercrime targeting Sri Lankan citizens and senior officials.
According to the Cyber Crimes Division, two Sri Lankan suspects were arrested and produced before the court for providing bank accounts that were used to withdraw the fraudulently obtained funds. The hacked WhatsApp account was then used by the Nigerian suspect to solicit money from individuals who personally knew the senior police officer. Believing the requests to be genuine, the victims deposited money into the accounts specified.
Investigations revealed that the arrested suspects had opened multiple bank accounts using the names of other individuals. These accounts were then handed over to the Nigerian mastermind. Using these accounts, the Nigerian suspect accessed WhatsApp accounts belonging to others, used social engineering to request funds from trusted contacts, and ensured the deposits were made online into the provided accounts.
The officer presenting the case told court that all the stolen money had been funneled through these accounts. He added that the suspects created accounts under false identities and sold them to the Nigerian individual for financial gain. Evidence also showed that the suspects and the original account holders had shared the proceeds sent by the Nigerian national.
Counsel appearing for the two suspects stated that his clients admit to creating and selling the bank accounts but deny any involvement in fraudulent activity. The counsel explained that the second suspect met the Nigerian national while in remand custody for an unrelated matter. The Nigerian had allegedly requested the suspect to create an account to receive money from family abroad. The counsel insisted that the Sri Lankan suspects merely provided accounts and that the Nigerian was fully responsible for the hacking and monetary deception.
After reviewing all submissions, Chief Magistrate Asanga S Bodaragama ordered the release of the two suspects on bail. The court further directed investigators to arrest the Nigerian national identified as the main perpetrator once additional inquiries are concluded.
