The Bank of Bhutan (BoB) transferred Nu 16 million to three different accounts in India, Malaysia and Thailand based on a fake e-mail letter received from the Royal Audit Authority (RAA).
According to officials from the RAA, the anonymous perpetrator had hacked into the e-mail account of one of its employees and asked the bank to remit Nu 16 million to three different accounts.
BoB officials said the e-mail letter had all the authentic letterhead, seal, signature and account number of the RAA. The amount was remitted from the audit authority’s letter of credit account.
RAA officials said they only came to know when the Bank of Bhutan informed that one of the account numbers was mistaken. In fact, the corresponding bank in Thailand had followed up with the Bank of Bhutan saying the account number was mistaken.
Due to the mistaken account number, Nu 10 million could not be transferred while it is assumed Nu 6 million has already been dispatched.
RAA Officials said the Bank of Bhutan had assured the money would be returned or reimbursed to the authority. However, once the money has been dispatched and withdrawn from the account, it would be practically impossible to retrieve the money, officials said.
Both audit officials and officials from the bank said the case has been forwarded to the Anti-Corruption Commission who will be carrying out an independent investigation.
