“Is This Merely a Fraud. Or Evidence of Systemic Failure?”
Be that as it may, one of the most politically significant documents yet to emerge from the now infamous Rs. 13.2 billion NDB fraud controversy may not be a court filing, a regulatory statement or even a forensic report.
It may instead be a sharply worded letter sent by Ravi Karunanayake to Anura Kumara Dissanayake in his capacity as President and Minister of Finance.
And the implications of that letter are potentially enormous.
Because Karunanayake’s intervention goes far beyond allegations against one bank or one rogue employee. The letter effectively frames the NDB scandal as possible evidence of broader systemic weakness involving banking supervision, anti-money laundering controls, financial technology infrastructure, regulatory oversight and even the integrity of Sri Lanka’s “Fit and Proper” governance framework itself.
In other words, the issue is no longer simply: “How did the fraud occur?”
The deeper question now increasingly appears to be: “How many systems failed simultaneously for it to continue undetected?”
Karunanayake, who sits on Parliament’s Committee on Public Finance (COPF), states in the letter that at least two licensed commercial banks had reportedly flagged suspicious transactions to the Financial Intelligence Unit nearly fifteen months before the eventual exposure of the fraud.
If true, that observation becomes profoundly serious.
Because prudential supervision is specifically designed to identify abnormal transactional patterns before they evolve into catastrophic institutional exposures.
The suggestion that warnings may have existed long before the public disclosure raises difficult questions regarding the responsiveness, competence and effectiveness of Sri Lanka’s supervisory framework itself.
Karunanayake’s letter goes further still.
It openly questions whether the Central Bank failed in ensuring compliance with prudential regulations, anti- money laundering obligations and risk surveillance mechanisms. He even raises the possibility – carefully but unmistakably – of negligence, institutional weakness or potential knowing inaction.
That is unusually strong language from a sitting Member of Parliament.
Yet perhaps the most politically explosive section concerns governance competence itself.
The letter points directly toward the composition of NDB’s Audit Committee, observing that none of its members appear to possess core banking experience despite the committee carrying responsibility for oversight of financial controls, risk and compliance inside a licensed commercial bank.
And suddenly a far larger issue emerges.
What exactly does “Fit and Proper” mean in Sri Lanka’s banking system?
Under the Central Bank framework, appointments to the boards and key management positions of licensed banks require regulatory clearance. But Karunanayake’s letter bluntly questions whether that process has become little more than a “tick-box exercise” rather than a substantive assessment of sector-specific expertise and governance competence.
That observation alone may resonate far beyond NDB.
Because Sri Lanka’s corporate culture has increasingly drifted toward a model where boards are often populated by accomplished professionals, lawyers, accountants, corporate executives and politically connected personalities – yet not necessarily individuals carrying deep operational banking expertise.
The assumption appears to have been that governance can be generalized.
The NDB affair may now be testing that assumption brutally.
The letter also targets technological weaknesses within the banking architecture itself, particularly failures surrounding real-time monitoring, automated reconciliation between CEFT and RTGS systems and weaknesses in middle-office oversight – a function globally regarded as one of the key internal safeguards against operational risk and financial manipulation.
And perhaps that is where the matter becomes genuinely alarming.
Because what Karunanayake is effectively suggesting is that Sri Lanka may have modernized parts of its banking infrastructure without sufficiently strengthening the surrounding control architecture capable of monitoring it.
High-speed systems.
Massive transaction volumes.
But potentially inadequate real-time oversight.
The consequences, if true, extend well beyond one bank. The letter further raises concern regarding the independence of the present forensic process itself, urging President Dissanayake to appoint a fully independent internationally credible investigative team free from any real or perceived conflict of interest. Among the institutions proposed for assistance or oversight are the:
• Reserve Bank of India,
• Bank of England,
• Monetary Authority of Singapore, • Bank of Japan,
• and Central Bank of Malaysia.
That recommendation is itself revealing.
It suggests growing concern that domestic institutional confidence alone may no longer be sufficient to reassure markets, depositors and investors.
And perhaps that is the real significance of the Karunanayake letter.
It transforms the NDB scandal from a banking fraud into a referendum on institutional credibility itself.
Because once questions begin extending simultaneously toward:
• the board,
• the audit committee,
• external auditors,
• prudential supervision,
• FIU responsiveness,
• technology controls,
• and governance frameworks, the issue stops looking isolated.
It starts looking systemic. That is not a conclusion.
But it is certainly the question now quietly emerging across Sri Lanka’s financial and political establishment alike.
And for President AKD’s administration, the stakes are exceptionally high.
Because this government came to power on promises of accountability, anti-corruption and institutional reform. The public therefore will not merely judge whether arrests occur.
They will judge whether systems change. Because Sri Lanka has had scandals before.
What the country has lacked is consequence strong enough to prevent the next one.
