The amount was stolen from a $22.9 million payment that Sri Lanka was to credit to Australia, with $2.5 million having been sent to the latter between December 2025 and Jan. 31, 2026.