APIB And The US$16 Million SBLC That Raises Questions Beyond Two Employees

APIB’s US$16 million SBLC case in Malaysia raises questions about alleged approval failures, SWIFT maker-checker controls, financial exposure and bank governance.

APIB US$16m SBLC Case: Controls and Governance Questions

At a glance

APIB’s US$16 million SBLC case concerns allegations against two former employees and examines approval authority, SWIFT controls, actual exposure and institutional governance.

The US$16 million Standby Letter of Credit (SBLC) case involving Asia Pacific Investment Bank Ltd (APIB) now before a Kuala Lumpur Sessions Court raises questions that extend well beyond the criminal allegations against two former employees. Chia Kian Lim, 40, and Lai Heow Gran, 52, have pleaded not guilty to jointly deceiving the bank in connection with the issuance of the SBLC in 2023, with the prosecution alleging that they represented that the instrument had received approval from the relevant authority or the bank's Chief Executive Officer when that approval had not been given. The prosecution further alleges that the transaction was approved through their respective checker and maker functions in the SWIFT system, inducing the bank to proceed with the transaction and issue the SBLC.

The identification of APIB changes the character of the questions surrounding the case because the institution is not simply an unnamed investment bank appearing somewhere in a criminal charge. APIB describes itself as an investment bank registered in Labuan in 2015 and licensed in April 2017, with businesses including investment banking, asset management, international trade finance and global trading, while its own published material has identified Lai Heow Gran as a senior investment banking executive and, separately, as a Director of APIB. The issue, therefore, is not whether a US$16 million SBLC existed in some abstract banking environment, but how an instrument of that value could allegedly move through the institutional architecture of a named investment bank on the representation that the necessary approval had been obtained.

That question becomes more important when the instrument itself is considered. A standby letter of credit is a bank undertaking whose face value does not automatically translate into an equivalent cash loss, because the eventual financial exposure depends upon the terms of the instrument, whether a compliant demand was made, whether the SBLC was drawn, whether the bank actually paid, what recovery mechanisms existed and whether the instrument expired or was cancelled without being called. The US$16 million figure therefore establishes the scale of the undertaking alleged in the criminal case, but it does not, by itself, establish that APIB suffered a US$16 million cash loss. That distinction matters if the public discussion is to move from the headline value of the instrument to the actual financial consequences for the bank.

A useful comparator comes from a different trade-finance dispute involving Euro Exim Bank, where the Eastern Caribbean Supreme Court considered the precise contractual terms of 18 letters of credit (LC) issued for United Overseas Trading. In that litigation, nine LCs were paid in full, two were partly paid and seven remained unpaid, with the beneficiary claiming approximately US$3.42 million; Euro Exim successfully relied at first instance upon a clause making payment conditional upon payment by the applicant, although that judgment is being appealed. The case demonstrates how much can turn upon the wording of a financial instrument and the allocation of risk between the issuing bank, applicant, beneficiary and advising bank, rather than simply upon the face value printed on the instrument.

The Euro Exim dispute is not the same case and involves letters of credit rather than the Malaysian SBLC allegations, but the comparison is useful precisely because it brings the instrument itself back into the picture. In the Euro Exim litigation, the court examined the contractual framework governing the instruments and the conduct of sophisticated commercial parties, while the Malaysian prosecution is concerned at an earlier point in the chain: Whether the authority represented as having approved the SBLC had actually approved it. One case therefore turns substantially upon the interpretation and operation of contractual terms after the instruments were issued, while the APIB case raises the more fundamental question of whether the institutional authority required for the issuance existed at all.

That takes the inquiry directly into APIB's internal control structure. The prosecution's reference to maker and checker functions is significant because those functions are designed around segregation of duties, with one person preparing or initiating a transaction and another independently checking the relevant information before the transaction proceeds. If the prosecution case is eventually established, the important question will be what the maker actually entered, what the checker actually verified, what documents or electronic records were available to each, and whether the system required evidence of the underlying approval before the transaction could move forward.

The allegation concerning the CEO is particularly important because it introduces a separate layer of authority into the transaction. If CEO approval was genuinely required for a US$16 million SBLC, the documentary trail should ordinarily become central to any reconstruction of what happened: Whether approval was recorded through a signed document, board or management authority, electronic workflow, internal approval system, email instruction or some other recognised mechanism, and whether the maker and checker were entitled to rely upon that record. If there was no such record, the subsequent question becomes how the transaction could nevertheless have passed through the bank's operational architecture.

SWIFT itself does not answer that question. SWIFT provides the messaging infrastructure through which financial institutions exchange standardised messages, but the existence of a SWIFT message does not independently establish that the underlying transaction had received every internal approval required by the institution.

In the APIB case, therefore, the distinction between a transaction being technically processed through the system and the transaction being substantively authorised by the institution becomes critical, particularly because the prosecution alleges that the maker and checker functions were used in circumstances where the necessary approval had not actually been given.

The next question is what the US$16 million SBLC was actually for. The public reporting of the criminal charges establishes the alleged value and the alleged approval problem, but it does not by itself provide the complete underlying instrument, the applicant, beneficiary, commercial purpose, governing rules, expiry provisions, demand conditions, collateral arrangements, internal exposure limits or the precise point at which APIB's financial risk crystallised. Those documents would provide the basis for determining whether the transaction remained an undrawn contingent exposure, resulted in an actual payment, created a recoverable receivable, generated a provision or otherwise produced a financial consequence for the bank.

That distinction also matters when considering the broader question of accountability. Criminal proceedings against Chia and Lai concern alleged individual conduct and will have to be determined by the court on the evidence presented. Institutional responsibility is a separate question, encompassing the design and operation of controls, the allocation of authority, supervision, compliance, risk management, internal audit, escalation procedures and the ability of the institution to detect an unauthorised transaction before or after it is processed. The existence of criminal charges does not, by itself, establish that APIB's institutional controls failed, just as an eventual finding against individuals would not automatically answer every question about the bank's systems.

There is another chronology that now demands attention. The Labuan Financial Services Authority's enforcement register records the revocation of APIB's investment banking licence on 29 September 2026, one day before the Kuala Lumpur charges against Chia and Lai were reported. That sequence is plainly relevant to an investigation into the institutional history surrounding the case, but the dates alone do not establish that the licence revocation caused the criminal proceedings, that the two events were coordinated, or that one resulted from the other; those propositions require the underlying regulatory and investigative records.

The timing does, however, make the chronology difficult to ignore. Any serious reconstruction should establish what happened between the alleged SBLC transaction on 9 November 2023 and the charges nearly three years later: When the transaction was first detected, whether an internal investigation followed, whether either employee was suspended or removed, whether regulators were notified, whether the SBLC was drawn or remained undrawn, whether any loss was quantified and whether any recovery was pursued. The central issue is not simply how two employees came to be charged in September 2026, but what happened inside and around APIB between the transaction date and the prosecution.

The employment and public-record history of Lai also places him directly within APIB's institutional structure rather than merely establishing a loose association. A Malaysian Industrial Court record identifies Asia Pacific Investment Bank Ltd as the employer in a dispute involving Nur Ain Ramli and records Lai Heow Gran as a witness for the bank, while Labuan IBFC has separately identified him as a Director of APIB. APIB's own historical material has also identified Dr Lai Heow Gran as Head of Investment Banking Division I, demonstrating that his association with the institution extended into senior investment-banking functions.

That history does not establish guilt or institutional culpability, but it makes the governance questions more concrete. The issue is now capable of being examined against an identifiable bank, an identifiable business structure and identifiable control functions rather than being treated as a generic case involving two unnamed former investment-bank employees. It also means that the documentary record surrounding APIB's trade-finance operations, its approval procedures and the circumstances preceding the licence revocation becomes relevant to understanding the case, subject always to what those records actually establish.

There is also a wider trade-finance lesson in the juxtaposition of the APIB and Euro Exim matters. Sophisticated financial instruments operate through layers of documentary authority, contractual conditions, institutional controls and reliance between parties, and the legal consequences can turn on details that are invisible in the headline value of the transaction.

In the Euro Exim case, the court examined whether parties were bound by a particular payment condition contained in the LCs, while in the APIB case the central allegation is that a fundamental precondition, approval by the relevant authority or CEO, was represented as existing when it allegedly did not.

For APIB, therefore, the most important unanswered questions concern the complete life of the SBLC rather than merely the moment at which the alleged deception occurred. Who requested it, who approved it, who prepared it, who checked it, what evidence of authority existed, who released it, who was the beneficiary, what conditions governed any demand, whether the instrument was ever drawn, whether APIB paid anything, whether it recovered anything and when the bank first discovered the alleged irregularity are all material questions. The answers would allow the case to be separated into its component parts: Alleged individual misconduct, possible control weaknesses, contractual or trade-finance risk, actual financial exposure and regulatory consequences.

The public record now establishes a much clearer investigative trail than it did when the bank remained unnamed. APIB is an investment bank whose publicly described business includes international trade finance; Lai Heow Gran has been publicly identified with APIB in senior and directorial capacities; the two former employees are accused of using maker and checker functions in connection with a US$16 million SBLC; the prosecution alleges that the requisite authority or CEO approval had not been given; and Labuan FSA records the revocation of APIB's licence on 29 September 2026. What remains to be established is how those facts connect, if at all, through the underlying documentary record.

That is ultimately where the accountability question sits. The prosecution may establish what Chia and Lai allegedly did and whether their conduct satisfies the criminal charge, but the larger institutional story requires reconstruction of the transaction from approval to maker, from maker to checker, from checker to SWIFT, from SWIFT to issuance and from issuance to whatever happened thereafter. The question for APIB is therefore not simply who is alleged to have processed a US$16 million SBLC, but whether the bank's architecture of authority, verification, escalation and detection was capable of ensuring that a transaction of that scale could not proceed on an approval that existed only as a representation.