Vetted by NeuralPress's Multi-Agent Verifier for strict factual validity and event relevance. Our compliance engine cross-checks and filters search results to ensure zero false correlations or misleading content.
Investigation Status
Stakeholders involved in the treasury fraud investigation
Primary Sources
Hackers pose as Australians to steal from Sri Lanka Treasury
Hackers pose as Australians to steal from Sri Lanka Treasury in a sophisticated cyber fraud incident that exposed vulnerabilities in government payment systems and triggered a multi-agency investigation. Hackers pose as Australians to steal from Sri Lanka Treasury in cyber fraud case Sri Lankan authorities have launched a comprehensive investigation after a cyberattack targeting the Treasury’s External Resources Department resulted in a financial loss and exposed critical weaknesses in government digital infrastructure. The incident, in which hackers impersonated representatives of an Australian export financing agency, has raised concerns about cybersecurity resilience within key state institutions. Deputy Finance Minister Anil Jayantha confirmed that attackers gained unauthorized access to official communication channels by breaching internal computer systems. By intercepting email correspondence, the perpetrators were able to gather sensitive financial information and manipulate payment processes, ultimately diverting funds from the Treasury. The fraud came to light following a second attempt by the same actors to redirect payments linked to an Indian financial agency. Unlike the initial breach, this attempt triggered suspicion among officials, prompting closer scrutiny of ongoing transactions. According to the Minister, this vigilance played a crucial role in preventing further financial losses and containing the impact of the attack. Subsequent investigations involved a detailed review of payments made after Sri Lanka’s external debt restructuring process. This audit revealed that the initial fraudulent transaction, estimated to have taken place in January 2026, was linked to funds associated with an Australian credit line. Authorities believe that the attackers exploited weaknesses in verification protocols to successfully execute the transfer. Hackers pose as Australians to steal from Sri Lanka Treasury has since become a focal point in discussions around strengthening cyber defence mechanisms in the public sector. The Finance Ministry has formally lodged complaints with multiple agencies, including the Criminal Investigation Department, the Computer Crime Investigation Unit, and the Financial Intelligence Unit of the Central Bank. In addition, the Sri Lanka Computer Emergency Readiness Team has been notified to provide technical support and coordinate response measures. The scale and sophistication of the breach have drawn attention from pol...
Sri Lanka Treasury $2.5M Payment Diverted to Hacker, Probe Requested
The organization “Free Lawyers” has today (22) requested the Speaker to immediately initiate a parliamentary investigation into an incident where USD 2.5 million, which was supposed to be paid by the Sri Lankan Treasury to a foreign country, was instead credited to the account of a cyber hacker. It is alleged that this payment—intended as part of a foreign debt settlement due in September 2025—was not sent to the relevant country but diverted to a third party. This serious revelation was made through a letter sent to the Speaker by a group including prominent civil activist and President’s Counsel Maithri Gunaratne. According to the letter, the USD 2.5 million paid by the government as a loan installment between December 2025 and January 2026 has not reached the relevant creditor. Under the new Finance Act, responsibility for such payments lies with the Department of External Resources and the Public Debt Management Office. In connection with this financial irregularity, five officials—including Treasury directors and the head of the IT division—have already been suspended, and an internal technical investigation committee has been appointed. However, Maithri Gunaratne points out that a payment of this magnitude cannot be executed without the approval of the Treasury Secretary and Deputy Treasury Secretary. Therefore, he raises concerns about the transparency of an investigation conducted by a committee operating under those same officials. Since the ultimate responsibility for public finance lies with Parliament, the organization has requested the Speaker to ensure a full, independent investigation conducted by a group outside the Ministry of Finance. Copies of the letter have also been sent to Harsha de Silva, Chairman of the Parliamentary Committee on Public Finance, and to the Auditor General.
Sri Lankan govt launches probe into diversion of 2.5 million dollar in ...
The Sri Lankan government has launched an investigation into a suspected diversion of 2.5 million dollars in Treasury funds during a foreign debt repayment to Australia, amid concerns over financial controls and cybersecurity.
Sri Lanka: USD 2.5 million Treasury payment diverted to hackers ...
The Sri Lankan government had to pay a loan of $22.9 million by the end of September 2025, and the Treasury has paid a portion of it, namely $2.5 million, to a country as a debt settlement between December 2005 and January 31, 2026.
