iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A printer failure did not cause the 2016 Bangladesh Bank heist, but it delayed staff from seeing warnings about fraudulent transfers. Attackers had already accessed bank terminals connected to SWIFT and sent payment instructions that appeared to come from the bank. The distinction matters: the printer hindered detection, while the theft depended on a broader compromise of Bangladesh Bank systems and the processing of payment messages.
How did a faulty printer help hackers steal $81 million?
In February 2016, attackers used Bangladesh Bank computer terminals connected to SWIFT to send fraudulent payment instructions. A U.S. Department of Justice court filing described an approximately $81 million loss and an attempted theft approaching $1 billion. The printer mattered because it normally printed SWIFT acknowledgements; malware reportedly disabled it, delaying staff from seeing those messages and queries about the transactions.
Reuters reported that staff could not print the acknowledgements on Friday, February 5, and initially treated the problem as a printer issue. When printing worked the next day, staff saw the fraudulent transactions and queries. That delay helps explain why warning signs were not promptly visible, but does not make the printer the cause or complete explanation of the theft.
What happened, and when?
- February 4, 2016: Reuters reported that attackers began sending fraudulent orders through SWIFT late in Bangladesh’s workweek. Thirty-five instructions sought nearly $1 billion.
- February 5: Staff found that the usual acknowledgements had not printed and could not print them manually. Reuters reported that malware had disabled the printer, preventing staff from promptly seeing the messages and queries.
- February 6: Printing eventually succeeded, and staff saw the fraudulent transactions and queries, according to Reuters.
The transfer counts differ by source and scope. The Council of Economic Advisers’ 2018 report describes 35 payment requests and four acted upon, leading to $81 million transferred. Reuters’ 2016 reconstruction reports five payments approved: four totaling $81 million to the Philippines and one for $20 million to Sri Lanka. The DOJ filing says the Sri Lanka transfer was stopped by the receiving bank.
#1 Best Overall
- BEST FOR SMALL BUSINESSES – Engineered for extraordinary productivity, the Brother DCP-L2640DW Monochrome (Black & White) 3-in-1 combines laser printer, scanner, copier in one compact footprint and delivers high-quality black & white prints
- FAST PRINTER WITH EFFICIENT SCANNING – Produces documents quickly with print speeds up to 36 ppm(2) and scan speeds up to 23.6/7.9 ipm(3) (black/color). A 50-page auto document feeder(4) allows for convenient, time saving multi-page scanning and copying
- FLEXIBLE CONNECTION OPTIONS – Easily navigate the changing demands of your business with secure multi-device connectivity via built-in dual-band wireless (2.4GHz / 5GHz) and Ethernet. Or connect locally to a single computer via USB interface
- BROTHER MOBILE CONNECT APP – Print, scan, and manage your wireless printer anytime, from almost anywhere from your mobile device. Order Brother Genuine Supplies, track toner usage, and complete more work on-the-go(5)
- CHOOSE BROTHER GENUINE TONER – When it’s time to replace your toner, be sure to choose Brother Genuine TN830 or TN830XL replacement toner. And with Refresh EZ Print Subscription Service, you’ll never worry about running out of toner again and you’ll enjoy savings of up to 50%(6) on Brother Genuine Toner. Get started with Refresh today with a Free Trial(1)
How could the messages lead to transfers?
SWIFT is a financial messaging system, not a bank holding customer funds or managing bank accounts. The Council of Economic Advisers explained that it provides standardized messages used by financial institutions. In this case, compromised Bangladesh Bank terminals interfacing with SWIFT were used to send instructions that appeared to originate from the bank, according to the DOJ filing.
That distinction separates three parts of the incident:
Rank #2
- BEST FOR HOMES & HOME OFFICES – Engineered for consistent, premium print quality, the Brother HL-L2405W Monochrome (Black & White) Laser Printer delivers sharp, crisp prints at an affordable price. Prints one-sided documents at speeds up to 30ppm(2)
- COMPACT, CONNECTED PRINTER – Flexible connection options make this an ideal printer for home use and at-home offices. Securely connect to multiple devices with built-in dual-band wireless (2.4GHz/5GHz) or locally to a single computer via USB interface
- BROTHER MOBILE CONNECT APP – Manage your printer remotely and print from your mobile device anytime, from almost anywhere. Order Brother Genuine Supplies, track toner usage, and complete more work on-the-go(3)
- VERSATILE PAPER HANDLING – Enjoy seamless, reliable everyday printing with the 250-sheet paper tray(4) and a manual feed slot that enables printing on envelopes and specialty pape
- BROTHER IS AT YOUR SIDE – Backed by Brother with a 1-year limited warranty and free online, call, or live chat support for the life of your printer
- Bangladesh Bank systems: The DOJ filing says hackers gained access to terminals interfacing with SWIFT and sent messages that appeared to originate from Bangladesh Bank.
- SWIFT messaging: The New York Fed said the instructions were authenticated by SWIFT under standard authentication protocols. Authentication means a message passed those protocols; it does not establish that the bank’s instruction was legitimate.
- New York Fed systems and processing: The New York Fed stated on March 9, 2016: “To date, there is no evidence of any attempt to penetrate Federal Reserve systems in connection with the payments in question, and there is no evidence that any Fed systems were compromised.” It also said the payment instructions “were fully authenticated by the SWIFT messaging system in accordance with standard authentication protocols.” These are the Fed’s institutional statements about its systems and the messages, not an independent audit of every system involved.
Where did the money go?
The DOJ filing says about $81 million was routed to accounts in the Philippines and $20 million to Sri Lanka. The Sri Lanka transfer was stopped; Reuters’ account likewise distinguishes the four Philippine payments from the Sri Lanka payment. The filing says the Philippine funds were subsequently laundered through bank accounts, a money-remitting business, and casino junkets.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The filing recorded that the majority of the $81 million transferred to the Philippines had not been recovered at the time it was filed. That is a historical figure, not a verified present-day recovery total.
Rank #3
- FAST PRINT SPEEDS: Print up to 19 pages per minute.
- COMPACT DESIGN: Space-saving, compact design fits anywhere in your home, school or small office.
- WIRELESS CONNECTIVITY: Print from almost anywhere in your workspace using your compatible mobile device.
- PAPER CAPACITY: Up to 150 sheets.
- SUSTAINABILITY: Uses less than 2 watts in Energy Saver mode.
What the printer detail does—and does not—show
Reuters’ reporting makes the printer a concrete part of the detection delay: without printed acknowledgements, staff did not promptly see transaction messages and queries. But a printer failure alone does not account for how attackers accessed terminals, created instructions that appeared to come from the bank, or moved funds through the payment system. The available accounts point to a compromise at the bank’s endpoint layer and a delayed response, alongside messages that met SWIFT authentication requirements.
Attribution also needs care. The DOJ filing says FBI analysis connected the intrusion to a broader campaign involving spear-phishing and other bank intrusions. That describes the investigated campaign; it is not, by itself, a final judicial attribution for every aspect of the Bangladesh heist. A 2018 Council of Economic Advisers report noted that banks, SWIFT, and the U.S. government had not assigned blame, while cybersecurity firms had offered their own attribution analyses.
Quick Recap
Best Value
- FROM AMERICA'S MOST TRUSTED PRINTER BRAND – Perfect for small teams printing professional-quality black & white documents and reports. Perfect for 1-3 people
- WORLD'S SMALLEST LASER IN ITS CLASS – Precision laser printing that fits anywhere
- FAST PRINT SPEEDS – Up to 21 black-and-white pages per minute single-sided
- WIRELESS WITH SELF-RESET – Helps you stay connected
- PRINT FROM ANY DEVICE – Wireless printing from any mobile device, PC or tablet. Works with Microsoft, Mac, AirPrint, Android, Chromebook and more
Rank #4
- BEST FOR HOME OFFICES & SMALL TEAMS – Engineered for consistent, premium print quality, the Brother HL-L2460DW Monochrome (Black & White) Laser Printer produces documents that are clear, crisp, and easy to review and share, all at an affordable price
- COMPACT, CONNECTED, EXCEPTIONALLY EFFICIENT– Connect with built-in dual-band wireless (2.4GHz/5GHz), Ethernet, or to a single computer via USB interface. Prints at speeds up to 36ppm(2), plus automatic duplex printing saves time and reduces paper waste
- BROTHER MOBILE CONNECT APP – Manage your wireless printer remotely and print from your mobile device anytime, from almost anywhere. Order Brother Genuine Supplies, track toner usage, and complete more work on-the-go(3)
- VERSATILE PAPER HANDLING – Tackle high-volume black & white printing with the 250-sheet capacity paper tray.(4) The manual feed slot enables printing on envelopes and specialty paper
- BROTHER IS AT YOUR SIDE – Backed by Brother with a 1-year limited warranty and free online, call, or live chat support for the life of your printer
Sources and historical context
- U.S. Department of Justice court filing, 2018.
- Federal Reserve Bank of New York, “Statement on Media Reports About Bangladesh,” March 9, 2016.
- Reuters, republished by Business Standard, “Special Report: How the New York Fed fumbled over the Bangladesh Bank heist,” July 21, 2016.
- Council of Economic Advisers, The Cost of Malicious Cyber Activity to the U.S. Economy, 2018. Its description of SWIFT’s network—more than 11,000 banking and securities organizations in more than 200 countries and territories—reflects the report’s publication-era figures, not a current network count.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
