Goldman Sachs earned roughly $600 million in fees underwriting three bond deals for a Malaysian sovereign wealth fund between 2012 and 2013. Eight years later, the bank handed the Malaysian government $3.9 billion in cash and asset guarantees to make the resulting criminal case go away. That payout was more than six times the original revenue, before counting the additional $2.9 billion the bank paid US, UK and Singaporean regulators in a coordinated global settlement.
The math is brutal, and it is the cleanest way to understand what 1MDB actually cost Wall Street.
The fees that started it all
Between May 2012 and March 2013, Goldman Sachs underwrote three bond issuances for 1Malaysia Development Berhad, the sovereign fund set up in 2009 under then–Prime Minister Najib Razak. The deals raised $6.5 billion. According to the US Department of Justice, Goldman collected approximately $600 million in fees and revenue for arranging them. That was an unusually fat margin for sovereign-style debt, where underwriting spreads typically run in the single-digit basis points.
That spread was the first red flag anyone in fixed income should have caught. Sovereign-linked Malaysian paper does not normally pay an underwriter nine percent. It pays nine basis points.
US prosecutors alleged that more than $2.7 billion of the $6.5 billion raised was diverted, with help from Goldman bankers, into accounts controlled by financier Jho Low and a circle of officials around Najib. Low has never been tried and denies wrongdoing through his representatives. He remains a fugitive.
How the bond fees became a $7.5 billion problem
Add up Goldman’s eventual bill and the proportions become absurd. The bank paid Malaysia $2.5 billion in cash plus a $1.4 billion guarantee on the recovery of seized 1MDB assets. That was the $3.9 billion Kuala Lumpur settlement announced in July 2020. On top of that came the $2.9 billion global resolution with the DOJ and other regulators, including a guilty plea from Goldman’s Malaysian subsidiary to violating the Foreign Corrupt Practices Act.
Total tab: north of $7.5 billion against $600 million in fees. A loss ratio of roughly 12 to one before legal costs, reputational damage, clawed-back executive compensation, and a US deferred prosecution agreement that hung over the parent company for three years.
The bankers themselves did not escape. Tim Leissner, the former Southeast Asia chairman, pleaded guilty in 2018 to conspiring to launder money and violating the FCPA. Roger Ng, his deputy, was convicted at trial in Brooklyn in 2022 and sentenced to ten years. Najib Razak is serving a prison term in Malaysia after the country’s courts found him guilty in the related SRC International and 1MDB-Tanore proceedings.
Watch the full story on the Silicon Canals YouTube channel.
Why a bank pays six times its revenue to walk away
The instinct is to assume Goldman overpaid. It did not. The settlement math reflects a calculation about anchoring and franchise risk that any senior litigator in financial services would recognise. Once Malaysia’s new government, led by Mahathir Mohamad after Najib’s 2018 election defeat, opened criminal charges against Goldman entities and individual bankers, the bank faced a scenario where its license to operate in major Asian markets, and arguably its standing as a primary dealer in US Treasuries, could be questioned.
The Malaysian attorney general initially demanded $7.5 billion. Negotiators at that level of opening number understand that the first figure on the table sets the gravitational centre of the entire negotiation. Goldman’s eventual $3.9 billion settlement was a victory measured against the anchor, even if it dwarfed the underlying fees by an order of magnitude.
That is how franchise-defining settlements get priced. Not against the revenue of the deal that caused them, but against the cost of losing access to the markets that pay the rest of the bills.
The compliance machine that did not catch it
The uncomfortable part of the 1MDB story, for the rest of the industry, is that Goldman’s compliance and legal review processes were neither absent nor unsophisticated. The bonds were vetted. The structure passed internal committees. Senior partners signed off. Leissner allegedly bypassed and misled control functions, but the architecture that should have stopped a $6.5 billion sovereign deal with $600 million in fees flowing to a single desk did not, in the end, stop it.
That is the failure that has reshaped how large banks now think about transaction-level surveillance.
As BizTech Magazine reported in December 2025, the industry is moving away from static, rule-driven compliance models. The old approach flagged a transaction only when it crossed a fixed threshold or originated in a flagged geography. The new approach leans on context-aware machine learning that looks at relationships between entities, fee patterns and counterparty behaviour. A $600 million fee block on a $6.5 billion sovereign deal, routed through a Malaysian subsidiary and tied to a politically exposed network, is exactly the kind of anomaly modern surveillance is designed to surface in real time rather than five years later in a DOJ filing. None of which guarantees the next 1MDB gets caught earlier. It just means the cost of missing it is now built into the budget.
What Basel and the post-1MDB rulebook changed
The regulatory rewrite that followed 1MDB and a string of other settlements has been incremental but cumulative. Capital rules tightened. Risk-weighted asset calculations got harder to game. Forbes contributor Dimitar Dimitrov, writing about how Basel 3.1 in the UK and Basel III Endgame in the US are reshaping risk and capital management, noted that the new frameworks require banks to hold higher capital buffers for unrated corporate exposures and force more conservative risk assessment on lending portfolios. Implementation timelines vary by jurisdiction.
Those buffers exist partly because of episodes like 1MDB, where a single emerging-markets desk generated revenue so out of step with market norms that it should have triggered capital and compliance attention long before the bonds priced.
The privacy and data-handling rules tightened too. The SEC’s 2024 amendments to Regulation S-P imposed new obligations on broker-dealers and investment advisers to detect, respond to and disclose breaches involving customer information. A different lane from anti-bribery enforcement, but part of the same expanding compliance surface that banks now operate under.
The asset trail that kept growing
While Goldman wrote cheques, the DOJ ran the largest kleptocracy recovery action in its history. The department has recovered or assisted in returning more than $1.4 billion in assets traceable to 1MDB, including the $250 million superyacht Equanimity, seized in Indonesian waters in 2018 and later sold by the Malaysian government for $126 million. Hollywood production company Red Granite Pictures, backer of The Wolf of Wall Street, ironically, paid $60 million to settle DOJ civil claims after prosecutors alleged the film was financed with diverted 1MDB funds. The studio and its principals denied wrongdoing.
Jewellery, real estate in New York and Beverly Hills, a Picasso, and royalty rights to EMI music catalogues. All of it traced, in DOJ filings, back to the bond proceeds Goldman had arranged.
Najib Razak, found guilty in his SRC International trial in 2020 and again in the 1MDB-Tanore proceedings, is serving prison time after the Federal Court rejected his final appeals. Roughly $681 million was identified as having moved into his personal accounts, a transfer he initially described as a Saudi donation before later denying knowledge of its 1MDB origin.
The lesson the fee number teaches
Strip away the superyacht, the Hollywood film, the pop-star birthday performances and the fugitive financier, and 1MDB becomes a story about a single line item on an investment bank’s revenue report. Six hundred million dollars, booked across three deals, that ultimately cost the firm more than $7 billion in fines, settlements and recovery guarantees, plus the criminal exposure of senior personnel.
That ratio is now part of how risk committees inside global banks price emerging-markets sovereign work. It is also part of why compliance technology budgets at tier-one institutions have grown faster than almost any other operating line. The GENIUS Act compliance provisions for digital assets, the expanded SEC reporting regimes, the Basel buffers. They all live downstream of a decade in which a handful of deals like 1MDB convinced regulators that the existing controls were not enough.
For more on how financial institutions are rebuilding their risk and surveillance stack in the wake of cases like this, see Silicon Canals’ coverage of the post-2020 compliance technology wave and the ongoing fragmentation of cross-border banking enforcement.
What 1MDB exposed was not that the controls failed. It was that, for long enough to matter, no one inside the building had any incentive to ask why a desk was being paid like a private equity fund to underwrite a sovereign bond. The fees were the warning. They were also the reward.
