
Bangladesh Central Bank Server Failure: Digital Banking Disruption in an Emerging Market
In December 2025, Bangladesh Bank experienced a critical server failure disrupting digital banking services across the country.
Key Metrics
Mobile Money Accounts
100+ million affected
was: N/A
National-scale disruptionOutage Duration
~24 hours
was: N/A
Full normalization took daysRoot Cause
Storage hardware failure
was: N/A
Single point of failure without redundancyInfrastructure Gap
Insufficient resilience investment
was: Rapid digitization
Digital inclusion outpaced hardeningThe Situation
National Payment Disruption
The failure disrupted every layer of Bangladesh's payment ecosystem. Commercial banks lost inter-bank settlement capability. Mobile money transactions were delayed or failed, affecting millions who rely on mobile money for daily transactions. The economic impact extended beyond financial services to the broader economy.
The root cause was a storage system hardware failure without adequate redundancy — a single point of failure that should not cascade into a national payment disruption. Recovery took approximately 24 hours with additional days for backlog normalization.
For DORA-subject European institutions with correspondent banking relationships in Bangladesh, this disruption affected cross-border payment capabilities that their risk frameworks must account for.
The Challenge
When a Central Bank's Digital Infrastructure Fails
On December 5, 2025, Bangladesh Bank experienced a critical server failure that disrupted digital banking and payment services nationwide. The failure affected the national payment switch and inter-bank electronic fund transfer system, impacting commercial banks, mobile financial service providers (bKash, Nagad, Rocket serving 100M+ accounts), and millions of end users.
Bangladesh's rapid digitization created critical dependency on central bank infrastructure. The server failure exposed the gap between rapid financial digitization and the infrastructure investment needed to support it reliably.
For DORA, the Bangladesh failure demonstrates that emerging market central bank infrastructure is a dependency that European correspondent banks must account for under Art. 28-29 third-party risk frameworks.
The Approach
DORA and Emerging Market Dependencies
Art. 28-29 — Emerging Market Infrastructure Risk
European banks with correspondent banking relationships depend on emerging market central bank infrastructure. This dependency must be identified and managed under DORA.
Art. 5-6 — Universal ICT Risk Lessons
The root cause — storage system without redundancy — is a basic infrastructure failure applicable everywhere. Critical systems must have tested failover for all single-point-of-failure components.
Art. 11 — Continuity for Infrastructure Failure
Business continuity must include alternative settlement channels when local payment infrastructure fails.
Art. 24 — Testing Emerging Market Scenarios
Resilient testing for institutions with emerging market exposure should include national payment infrastructure failure scenarios.
The Results
The Resilience Divide
The Bangladesh failure highlights a growing divide between advanced and emerging market infrastructure resilience. The global financial system's resilience is bounded by its weakest link. As flows increasingly traverse emerging market infrastructure, this resilience becomes a systemic concern.
The digital inclusion paradox is also evident: the population most recently included in digital finance is most vulnerable when infrastructure fails. Operational resilience is a precondition for the financial inclusion that digitization promises.
Lessons Learned
- 1DORA Art. 28-29 must include emerging market central bank infrastructure dependencies for European correspondent banks.
- 2Single-point-of-failure storage without tested failover is unacceptable for critical financial infrastructure regardless of budget.
- 3DORA Art. 24 for emerging market exposure should include national payment infrastructure failure scenarios.
- 4Rapid digitization without resilience investment creates systemic vulnerability.
- 5Global financial resilience is bounded by its weakest infrastructure link.
Disclaimer:This case study is based on anonymized data from real-world DORA compliance programmes. Names, specific figures, and identifying details have been changed to protect confidentiality. The outcomes described are specific to the institution's context and may not be directly replicable.
Facing similar challenges?
See how Valendir can help your institution achieve and maintain DORA compliance with deterministic workflows, immutable evidence, and continuous assurance.