Sri Lanka's Parliament engaged in heated debate following a Committee on Public Finance report on a $2.5 million cyber fraud affecting sovereign debt payments, with government and opposition offering sharply different interpretations of institutional responsibility and security failures.
Parliament became a forum for intense disagreement on Wednesday following the release of a Committee on Public Finance report examining a $2.5 million fraud involving sovereign debt service payments. While government and opposition lawmakers agreed that a significant breach had occurred, they diverged sharply on the causes and accountability, with the opposition characterizing the incident as a governance failure and the government framing it primarily as a technical cybercrime.
Opposition figures argued that the fraud exposed fundamental structural weaknesses rather than a simple hacking incident. Leader of the Opposition Sajith Premadasa contended that the breach revealed absent Standard Operating Procedures and Memorandum of Understanding between the Central Bank and Treasury during a transition period for debt management. Opposition MP Ravi Karunanayake detailed how fraudsters impersonating Australian debt representatives redirected payments through Abu Dhabi and Minneapolis accounts between November 13 and November 25, 2025, despite warnings from the US Federal Reserve and JP Morgan. He criticized both institutions for failing to verify suspicious routing of Australian loan repayments to Minneapolis. Deputy Minister of Finance Anil Jayantha countered that the government responded promptly upon detection and blamed internal control weaknesses inherited from previous administrations.
Additional concerns emerged regarding expired security infrastructure. Opposition MP Ajith P Perera disclosed that the Ministry's Microsoft Exchange Server lost its security certification on October 14, 2025—precisely when the fraudulent transfers occurred. He called for criminal proceedings against those responsible for administrative negligence. Deputy Minister Chathuranga Abeysinghe acknowledged decades of delayed digital upgrades but stated that new protocols including embassy verification channels and mandatory Treasury Secretary approvals were established following the discovery.
The debate also addressed the tragic suspension of four junior officials, with opposition members linking workplace pressure to an official's suicide. Public Security Minister Ananda Wijepala reported that American investigators traced stolen funds across multiple countries including the US, UAE, Switzerland, and Zambia. However, authorities indicated that full recovery is unlikely, potentially leaving Sri Lankan taxpayers responsible for repaying the settlement owed to Australia.
