Cracks in the citadel: NDB fraud and banking sector’s crisis of confidence

The recent, high-profile fraud unearthed at National Development Bank PLC (NDB) sends a chill far beyond the balance sheets of a single institution. 

It is not merely a story of financial misconduct; it is a profound failure across every layer of institutional oversight of internal, external, and regulatory watchdogs. This incident has exposed a conceivable critical fault lines within Sri Lanka’s financial system, casting serious doubts on the integrity, control mechanisms, and supervisory rigour that underpin the entire banking sector.

At the heart of the crisis lies a monumental breakdown of internal controls. Any fraud of this magnitude, which reportedly involved the misappropriation of significant capital over an extended period, points directly to systemic weaknesses within the bank itself. Robust internal controls, the daily checks and balances, segregation of duties, and transaction monitoring systems are the first and most critical line of defence. 

The fact that the perpetrators could bypass these safeguards, especially the suspense account which is any banks access control and regulatory Achillies heel, suggests a lax operational environment, a failure of management to enforce governance policies, or perhaps even complicity that facilitated the illicit activities. 

For depositors, investors and the hardworking honest staff of the institution, this failure is unforgivable, signalling that the operational environment they trusted was fundamentally compromised. 

Another bizarre twist to the whole saga is the sheer volume of funds and the corresponding bank that received it. In a world of KYC (Know Your Customer) unusual deposits of high value and volume should trigger red flags which should be subject to suspicion and inquiry from the bank and the regulator who has log of all transactions within the banking sector. So, the questions remain what happened to Rs. 13.2 billion, and where are the funds now? Are they in some opaque financial instrument like crypto?

Equally alarming is the role of the audit firm of international repute. Auditing firms are engaged specifically to provide an independent, external guarantee that a bank’s financial statements are accurate and that its internal controls are sound. When a fraud of substantial size is missed, not once, but over a period, it severely undermines the credibility of the entire external auditing process. 

The public must now question the depth of audit scrutiny, the competence of the teams assigned, and whether the ‘clean bill of health’ issued by audit partners carries any meaningful assurance. The audit failure transforms the incident from a banking problem into a systemic confidence issue, suggesting that the watchdogs themselves have fallen asleep. 

The ultimate responsibility for financial sector stability, however, rests with the Central Bank of Sri Lanka (CBSL) Bank Supervision Department. This body is mandated to maintain the safety and soundness of the banking system through proactive oversight, ensuring that banks comply with regulations and possess adequate controls. The NDB fraud raises uncomfortable questions about the effectiveness of CBSL’s bank supervision efforts.

Did the supervisory teams miss red flags? Were the on-site inspections thorough enough? The regulatory framework is designed to detect and deter exactly this kind of financial rot before it compromises a publicly traded institution. The failure of CBSL to either detect the internal control weaknesses or identify the large-scale irregularities suggests that the supervisory mechanism itself is either under-resourced, lacks the necessary expertise, or operates without the critical independence required to challenge the banks it regulates. 

Another notable mention should be for former regulators joining Boards of financial institutions after their retirement. A case for conflict of interest is clearly visible, and this should be clearly evaluated by an independent third party for the few pros against the many cons. 

In the current economic climate, where Sri Lanka is actively seeking foreign investment and working to restore global confidence, such a systemic failure is devastating. Banking is founded on trust. The tripartite failure of the NDB’s internal governance, the external auditors, and the Central Bank’s Supervision Department suggests that this trust has been profoundly misplaced.

The path forward demands immediate, rigorous action. The CBSL must not only impose stringent penalties but must also initiate a non-negotiable overhaul of its bank supervision protocols. Internal controls across the sector must be subjected to an independent, forensic review. 

Most importantly, the investigation must be transparent, and the accountability must reach the highest levels of governance, audit, and regulation. Until confidence in these crucial checks and balances is fully restored, the shadow of doubt cast by the NDB fraud will continue to hang over the entire Sri Lankan financial sector.

(Charana is an Attorney-at-Law specialising in corporate law. He could be contacted on [email protected])