Case Study: Insider Cyber Fraud at FNB and Lessons from Global Incidents

/ Case Studies, Cybersecurity, Digital Identity, Financial Crime

Introduction

Insider fraud is one of the most insidious threats to financial institutions. Trusted employees or contractors with privileged access can exploit systems for personal gain, often causing severe financial, emotional, and reputational damage.

The case of Lusanda Gloria Qose at First National Bank (FNB) in South Africa demonstrates just how sophisticated insider attacks can be – and underscores the urgent need for stronger prevention measures.

The FNB Insider Fraud Case

In July 2025, Lusanda Gloria Qose, a former sales and service consultant at FNB’s Pier 14 branch in Gqeberha, was sentenced to five years in prison for her role in an insider cyber fraud scheme (ITWeb, 2025; NPA, 2025).

Between January and April 2024, Qose:

  • Used her employee credentials to unlawfully access and manipulate a customer’s banking profile.
  • Changed the customer’s cellphone number, diverting one-time PIN authorizations to herself.
  • Created a second bank card linked to the account, transferring funds and making multiple ATM withdrawals.

The total loss amounted to R245,000.

The National Prosecuting Authority (NPA) revealed that Qose bypassed internal security protocols, including two-factor authentication and fingerprint verification, while manipulating records to make it appear as if the customer had authorized the transactions. The court found her actions to be sophisticated and premeditated, with devastating consequences for the 68-year-old victim.

Global Insider Fraud Examples

The FNB case is part of a broader global problem. Notable examples include:

  1. UBS Rogue Trader Scandal (2011): Kweku Adoboli’s unauthorized trading led to a $2 billion loss, highlighting failures in internal controls.
  2. TD Bank Bribery Scheme (2024): An employee accepted bribes to open fraudulent accounts, enabling large-scale financial crimes.
  3. Goldman Sachs 1MDB Scandal (2015): Tim Leissner, a former partner, helped facilitate a multi-billion-dollar fraud, showing the global reach of insider collusion.
  4. Morgan Stanley Insider Trading (2009): Du Jun, a managing director in Hong Kong, was sentenced to seven years in prison and fined $23.3 million for insider trading.

Lessons Learned

These incidents reinforce several critical lessons for financial institutions:

  • Robust Internal Controls: Early detection of unauthorized employee activity is essential.
  • Employee Monitoring & Training: Regular oversight and ethics programs reduce misconduct risk.
  • Whistleblower Programs: Confidential reporting channels can uncover fraud sooner.

Mitigation Through Digital ID Platforms

Traditional measures are vital, but sophisticated insiders can still bypass them. A digital identity platform adds a critical layer of defence by:

  • Enforcing multi-factor authentication and role-based access control.
  • Providing real-time verification of all user actions.
  • Maintaining immutable audit trails, making unauthorized manipulation detectable.

By combining digital ID technology with strong governance and ethical oversight, institutions can significantly reduce insider fraud risks, protecting both customers and public trust.

Conclusion

The FNB insider fraud case illustrates the financial, emotional, and reputational damage insiders can cause when trusted access is abused. Global cases reinforce the message: internal controls alone are not enough.

Banks and financial institutions must adopt high-security digital ID platforms to prevent unauthorized access, enforce accountability, and strengthen trust.

References

  • ITWeb. (2025). Ex-FNB employee sentenced for insider cyber fraud.
  • National Prosecuting Authority. (2025). Former bank employee sentenced to five years for fraud and cybercrime.
  • Wikipedia. (2011). UBS rogue trader scandal.
  • IRS. (2024). TD Bank insider pleads guilty to accepting bribes.
  • The Times. (2025). The Goldman partner, the whale and the biggest scam in history.
  • Wikipedia. (2009). Du Jun.

Call to Action

💳 Protect your institution against insider threats.

Realm ID and RealSign provide verified identities, secure authorizations, and immutable audit logs, ensuring accountability at every step.

👉 Contact Us to see how we help financial institutions prevent insider fraud and safeguard customer trust.