NDB Bank fraud recovery efforts are moving overseas after Deloitte confirmed a Rs. 13.64 billion loss involving cross-border and digital assets.
COLOMBO — National Development Bank PLC is preparing to seek specialised international assistance to trace and recover assets linked to its multi-billion-rupee internal fraud after Deloitte Touche Tohmatsu India LLP completed a forensic review of the incident.
The final Deloitte review confirmed the fraud at Rs. 13,639,664,684, or approximately Rs. 13.64 billion, increasing the amount by Rs. 60 million from the Rs. 13.58 billion identified in the interim report issued in June.
NDB has said the forensic review completes the independent fact-finding phase, but regulatory reviews, legal proceedings and recovery efforts will continue.
The scale of the case, together with indications that part of the money moved through international banking channels and digital assets, means recovery may now require expertise beyond Sri Lanka’s domestic financial and law-enforcement systems.
Reports this week said the bank intends to engage specialised overseas expertise to trace stolen funds and digital assets across jurisdictions.
Fraud Moved Through Banking and Digital Channels
The fraud was not confined to a conventional transfer of funds within Sri Lanka.
According to reporting based on the forensic findings, substantial amounts were transferred internationally through offshore banking channels.
Around Rs. 390 million is reported to have remained within Sri Lanka before being channelled into digital assets.
Investigators have also identified a cryptocurrency platform referred to as Buy Today as having been used to convert stolen fiat currency into digital assets.
Those assets were reportedly moved through automated sub-accounts at major cryptocurrency exchanges, including Binance, before being converted, transferred into secondary wallets or moved towards offshore financial channels.
Such transactions significantly complicate conventional asset recovery.
Unlike money remaining within one banking jurisdiction, cryptocurrency and cross-border transfers can move quickly between platforms, wallets and countries, requiring cooperation between banks, financial-intelligence units, law-enforcement agencies and foreign regulators.
NDB Banking Crisis: Parliament Faces Accountability Questions
The NDB banking crisis has sparked fresh questions over Central Bank oversight, parliamentary accountability and governance, according to activist Amrit Muttukumaru.
Read MoreInternational Asset Recovery Expertise
NDB has not publicly identified the overseas specialist or organisation it intends to engage.
Reports citing analysts have pointed to several international mechanisms capable of assisting cross-border asset recovery, although there is no confirmation that any particular one has been selected.
Among them are:
- Asset Recovery Inter-Agency Networks, or ARINs, which facilitate communication among law-enforcement and asset-recovery authorities across jurisdictions.
- INTERPOL’s international asset-recovery mechanisms, which assist authorities in tracing criminal proceeds across borders.
- The Egmont Group, which connects financial-intelligence units and facilitates secure exchange of information relating to money laundering, terrorist financing and other financial crime.
These networks are not interchangeable commercial recovery firms, and their precise role would depend on which authorities are involved and how the recovery process is structured.
The significance of overseas assistance lies in the international movement of the funds rather than simply the size of the loss.
Where suspected proceeds have crossed borders or entered digital-asset markets, recovery usually depends on identifying counterparties, obtaining records, tracing wallet movements and securing legal orders before assets can be frozen or returned.
Deloitte Review Raises Governance Questions
The forensic exercise was commissioned by NDB in consultation with the Central Bank of Sri Lanka after the fraud was discovered earlier this year.
From the outset, the review was expected to examine not only the transactions themselves but also possible weaknesses in control, oversight, accountability and governance.
CBSL said in April that it had directed NDB to take immediate steps to strengthen internal controls and governance processes while also requiring an independent third-party review of policies, procedures, systems and internal controls.
NDB has since said it is strengthening its compliance and governance framework and does not regard completion of the forensic report as the end of the matter.
Public criticism has nevertheless continued over how a fraud of such magnitude could persist within a regulated banking institution and whether sufficient controls existed to identify suspicious activity earlier.
Questions have also been raised in public forums over the accountability of directors and senior management.
Such criticism should be distinguished from established findings of personal wrongdoing. The available material does not establish criminal liability on the part of the bank’s board or senior management as a whole.
What is established is that the regulator specifically required examination of possible failures in control, oversight and governance.
Arrests and Legal Proceedings Continue
Law-enforcement action began before completion of the forensic review.
Several individuals connected with the alleged fraud have been arrested, while legal proceedings and investigations remain underway.
NDB said when the incident was first disclosed that implicated employees had been suspended, their system access withdrawn and the affected operational unit placed under separate oversight with revised reporting arrangements.
The bank has consistently maintained that customer balances and deposits were not affected.
CBSL has separately said NDB continued to meet regulatory capital and liquidity requirements despite the size of the fraud and that there was no evidence that another regulated financial institution had suffered a loss as a consequence of the incident.
That distinction is important.
The case represents a substantial financial and governance failure for NDB, but the regulator has not characterised it as a threat to customer deposits or systemic banking stability.
Shareholders Bear Part of the Impact
Shareholders have nevertheless felt direct consequences.
Following the initial disclosure of the fraud, the Central Bank directed NDB to suspend the cash dividend that had been scheduled for payment on April 6.
The scrip dividend was allowed to proceed.
The fraud has also required NDB to restate financial information across earlier accounting periods.
The interim Deloitte review had identified Rs. 13.58 billion in suspicious transactions, including amounts attributed to periods before January 2025, the 2025 financial year and the first quarter of 2026.
The final review subsequently raised the total by a further Rs. 60 million to Rs. 13.64 billion.
Reports on current trading conditions suggest investors have largely absorbed the known scale of the fraud, with no fresh collapse in NDB shares following publication of the final figure.
Market sentiment nevertheless remains cautious because recovery prospects, regulatory consequences and the longer-term governance implications remain unresolved.
Digital Assets Complicate Recovery
The cryptocurrency element adds a particularly challenging dimension.
Blockchain transactions can leave permanent records, which can in some circumstances assist forensic investigators.
That does not mean digital assets are automatically easy to recover.
Funds can pass through multiple wallets, exchanges and jurisdictions, be converted between cryptocurrencies, transferred through intermediaries or exchanged back into conventional currencies.
Recovery can therefore depend on whether investigators can identify the people controlling particular wallets and whether exchanges or financial institutions are subject to legal orders capable of freezing the assets.
Jurisdiction also matters.
A Sri Lankan court order may not by itself be sufficient to freeze an asset held through a foreign financial institution or digital-asset service provider.
International cooperation is therefore likely to be central to any meaningful recovery effort.
A Test of NDB’s Governance Response
The fraud has already imposed a direct financial cost on NDB.
The larger reputational question is how the bank responds after the money has been accounted for.
NDB has said the incident is a lesson from which it intends to strengthen governance, compliance and control systems.
That commitment will ultimately be judged not by statements but by measurable changes in internal controls, segregation of duties, transaction monitoring, digital-security procedures, supervisory accountability and the ability to identify unusual activity before losses reach billions of rupees.
The bank must also balance transparency with the requirements of ongoing criminal and asset-recovery proceedings.
Premature disclosure of investigative methods, wallet details or cross-border recovery strategies could itself impede attempts to freeze or recover funds.
Wider Warning for Sri Lanka’s Banking Sector
The NDB case also carries lessons beyond one institution.
Modern banking fraud no longer needs to remain within a bank, a country or even conventional currency systems.
Money can move from a regulated account into international banking networks, cryptocurrency platforms and secondary wallets within a short period.
That requires banks to treat financial crime increasingly as a combination of conventional fraud, cybersecurity, anti-money-laundering compliance and digital-asset intelligence.
CBSL has emphasised that there is no evidence another regulated financial institution suffered losses arising from the NDB incident.
Even so, the case demonstrates the scale of damage that can occur when internal access, cross-border payments and digital financial infrastructure are allegedly exploited together.
For Sri Lanka’s banking industry, the lesson is therefore not that the system itself has failed, but that individual institutions must continually strengthen controls against increasingly sophisticated financial crime.
Recovery Is Now the Next Test
Completion of Deloitte’s forensic review establishes a clearer figure for the loss and provides investigators with a more detailed map of what occurred.
It does not answer the most important financial question: how much can ultimately be recovered?
The bank must now pursue funds that are reported to have moved across conventional and digital financial systems, potentially spanning several jurisdictions.
That process could take considerable time.
For NDB, successful recovery would reduce the lasting financial impact of the fraud. For regulators and shareholders, however, recovery alone will not settle the matter.
The equally important test will be whether the weaknesses that allowed a Rs. 13.64 billion fraud to occur have been identified, corrected and subjected to credible accountability.
