April 27, 2026 – May 3, 2026 | Vol.16, #15 & 16 | ISSN 3084-9330
Photo credits: Sri Lanka Brief
[paywall layout_id=”1906″ service_tags=”TMA,FP” preview=”true”]
Over the past fortnight, Sinhala media focused on the reported diversion of nearly USD 2.5 million from a Treasury payment intended for debt repayment to Australia.
The coverage spanned print, television, and social media commentary. Social media narratives and conversations were monitored and analysed using specialised digital tracking tools.[1]
This week’s analysis is set out under three headings.
1. What were the key events that captured public attention?
Apr. 22: The Free Lawyers’ Organisation submitted a letter to the speaker of parliament requesting an investigation into the alleged diversion of USD 2.5 million from a Treasury debt repayment.
Apr. 23: Secretary to the Ministry of Finance (MoF) Harshana Suriyapperuma publicly confirmed that nearly USD 2.5 million intended for debt repayment to Australia had been diverted through cybercriminal activity.
Apr. 24: The Organized Crime and Corruption Reporting Project (OCCRP) reported that the payments were transmitted in five instalments between December 31, 2025, and March 20, 2026.
Apr. 26: The CID recorded statements from seven officials over the alleged diversion from the computer system of the Department of External Resources.
Apr. 27: It was reported that several Treasury officials had been suspended pending disciplinary inquiry, including officials from the Public Debt Management Office and the Department of External Resources.
Apr. 30: An assistant director attached to the Department of External Resources, who had been interdicted in connection with the USD 2.5 million cyber-fraud probe, was found dead at his residence in Kuliyapitiya. Police later stated that the death had been ruled a suicide following a post-mortem examination.
Taken together, these developments shifted attention from a cyber-related financial loss to a broader debate over state competence, transparency, and accountability.
In this week’s issue of MPA, we examine how Sinhala media discourse attributed liability across political, bureaucratic, institutional, and external actors, and how this impacted the government.
2. How did the government respond to the scandal?
The government’s public defense rested on three narratives aimed at shifting accountability from culpability to victimhood, secrecy to strategy, and political failure to bureaucratic failure.
The position of the government, in the wake of the USD 2.5 million Treasury loss coming to light, had three narrative strands: (1) It claimed a sophisticated cyber-attack, which was part of a global trend – making it a victim rather than culpable of serious internal failure; (2) that it had not discussed the matter publicly in order to pursue the criminals without warning them; and (3) that any lapses in safety protocols were the fault of the bureaucracy, which it was taking disciplinary action against, rather than the political establishment.
3. How did this impact the government?
The loss suffered by the Treasury has become politically damaging not because of the loss itself, but because of how the functioning of government is interpreted in light of it. Three negative narratives about the government have emerged: a lack of competence, allegations of a cover-up, and a loss of credibility.
The government’s protestation that it was a victim of a sophisticated cyber-attack has been met with scepticism, with opposition politicians and others exposing that the described scam is, in fact, a simpler, more familiar type of scam, referred to as a phishing scam, rather than a hacking attack on computer systems. This sense that the government fell victim to a familiar, simpler fraud creates the perception that it lacks basic competence.
The fact that the scam took place over four months ago and was revealed only by a third-party civil society organisation, rather than being reported to parliament or the public by the government itself, was widely interpreted as an attempted cover-up, with the government’s reasoning not given much credence. Even if falling victim to the scam was a matter of incompetence and therefore an unintentional failure, the decision to keep it a secret was read as intentional concealment – a more serious moral failure.
In the midst of this exposé, the government’s defensive posture, the lack of convincing explanations for the failure and why it was kept secret, the lack of clarity on what had been done about it, and the shifting of blame to the bureaucracy, while attempting to absolve political appointees, all combined to generate a crisis of credibility for the government.
On numerous occasions when the government had to explain certain failures, it has tended to appeal to the public for trust, that the government was well intentioned; and for understanding, that it had inherited a broken system and needed time to address its problems. However, with each new event, this “appeal to the public” tends to have less “appeal in public sentiment”. This latest series of events on financial losses, compounded by the perception of concealment and avoidance of accountability, has further reduced the “social capital” of the government by raising serious questions about its integrity as well.
[1] The MPA team monitored Facebook, TikTok, and YouTube using Junkipedia for the keywords hack and dollar in Sinhala, and the hashtag #LKA from April 26 to May 3, 2026.
To view this week’s news summaries, please click here.
To view this week’s social media data, please click here.
[/paywall]