The Bangladesh Bank Heist
A single typo stopped a billion-dollar SWIFT robbery. The eighty-one million that did escape was never fully recovered.
The order came through SWIFT, the messaging system at the spine of global banking, on a quiet Thursday evening in Dhaka. Thirty-five payment instructions, all flowing from the Bangladesh Bank's account at the New York Federal Reserve, asking for nearly a billion US dollars to be moved to accounts in the Philippines and Sri Lanka.
The first thirty went through.
A misspelled word
The thirty-first instruction listed a recipient called the "Shalika Fandation" — a typo of "Foundation". A Deutsche Bank employee, routing the payment, paused to query the spelling. That pause cascaded outward until the entire batch was held for review. Of the billion dollars that should have moved, about eight hundred and fifty million was clawed back before it left the building.
The remaining eighty-one million had already cleared. It moved into accounts in the Philippines, was fed through casinos in Manila — a jurisdictional blind spot in anti-money-laundering rules at the time — and largely disappeared.
Months in the network
Investigators later concluded the attackers had been inside the Bangladesh Bank's network for over a year before the transfer. They studied SWIFT timing, learned the local printer setup well enough to suppress the paper trail of fraudulent transfers, and waited for a long weekend in three different jurisdictions to maximize the delay between the heist and its discovery.
The US Department of Justice eventually attributed the operation to North Korean state actors, part of a broader pattern of revenue-generating cyber operations tied to the Lazarus Group.
What the chronicle remembers
This was the moment SWIFT stopped being treated as a trusted message bus and started being treated as part of the attack surface. Every member institution, large or small, inherited the security posture of the weakest. A typo, that night, was the only thing standing between the modern interbank system and a billion-dollar embarrassment.