An investigation by Sierra Leone's Anti-Corruption Commission (ACC) has revealed that the ASYCUDA system at the National Revenue Authority (NRA) was seriously compromised, leading to the loss of over 300 billion leones. The investigation by the Anti-Corruption Commission (ACC) specifically delved into corrupt-related activities within the National Revenue Authority (NRA), uncovering significant vulnerabilities. The ACC's report, dated 10th July 2026, details the extent of the corruption and the mechanisms through which the financial losses occurred. According to the report, "These deletions could not have occurred through ordinary front-end operations and required backend technical access," indicating a sophisticated breach. The findings point to corrupt-related activities that facilitated the significant financial loss for the NRA, amounting to over 300 billion leones.
System Compromise Details
The Anti-Corruption Commission (ACC) uncovered compelling evidence indicating the deliberate and unauthorized deletion of customs declarations from the ASYCUDA system. These deletions occurred after payments related to the declarations had already been processed, effectively erasing the record of revenue collected. The ACC’s investigation, a thorough process involving system analysis, broker complaints, bank records, interviews, and internal documentation, established unequivocally that these deletions did not occur through ordinary front-end operations. Instead, the evidence gathered confirmed that backend technical access was utilized for these illicit actions, noting a profound breach of system integrity.
The findings suggest that the incidents were not merely isolated administrative mistakes within the system, but rather indicative of a more systemic problem. The commission explicitly stated that the incidents were not simply isolated administrative mistakes, but part of a larger, coordinated effort. It was noted that functional ASYCUDA staff did not possess the authority to permanently delete declarations from the system, showing the severity of the access required for such actions. Among the specific issues identified by the ACC were a pattern of receipt-reference reuse and a small number of declarations recorded as paid without corresponding cash-table records. These discrepancies further pointed to deliberate manipulation rather than accidental errors.
Weaknesses and Diversion Methods
The unauthorized deletions and related activities were part of a coordinated scheme, according to the Anti-Corruption Commission (ACC), which stated that serious institutional control failures and potential collusion among functional and technical personnel facilitated these actions. The commission identified significant weaknesses in user access management, reconciliation procedures, and supervisory controls within the ASYCUDA system. This points towards the possible involvement or collaboration of individuals possessing backend Information and Communications Technology (ICT) privileges, given the nature of the unauthorized deletions. The ACC’s findings reveal that these systemic weaknesses created an environment ripe for exploitation.
The ACC further noted a pattern of uncontrolled profile resets, inadequate monitoring, and failures in daily reconciliation mechanisms. These issues persisted despite the ASYCUDA platform providing real-time payment visibility, which should have acted as a deterrent to such fraudulent activities. An additional critical concern noted by the ACC was the continued activity of dormant and unauthorized bank teller profiles. These profiles remained active and were reportedly used to validate transactions long after the account holders had departed their respective financial institutions. The report stated that the continued use of such profiles "significantly compromised the integrity of the revenue collection process" and created opportunities for diverting government revenue through official banking channels. These vulnerabilities allowed for the manipulation of financial records and the siphoning of public funds. Separately, a broader database analysis conducted by an independent consultant corroborated these findings, identifying further control weaknesses within the ASYCUDA system and reinforcing the ACC's conclusions regarding the extensive nature of the compromise.
Broader Implications and Safeguards
The inability to recover the deleted customs records shows the significant extent of the ASYCUDA system compromise. This recovery failure also notes the absence of adequate safeguards for audit-trail preservation and disaster recovery within the National Revenue Authority (NRA), leaving critical financial data exposed and unrecoverable. The Anti-Corruption Commission (ACC) report indicates that the issues raised go beyond individual transactions, raising broader questions about system access and institutional accountability. Concerns were also noted regarding reconciliation processes, the integrity of audit trails, banking controls, and the management of Information and Communications Technology (ICT) privileges. These systemic vulnerabilities impact the NRA's capacity to protect government revenue from theft, posing a severe threat to the nation's financial integrity. The full nature of these findings calls for immediate and thorough reforms to prevent future occurrences of such large-scale financial losses.