Everyone checked, no one verified: “Billion Dollar Whale” by Tom Wright and Bradley Hope

April 1, 2026

Between 2012 and 2013, a Malaysian state development fund raised roughly US$6.5 billion through three bond offerings arranged by a single investment bank. The documentation supporting all of it was entirely orthodox. US prosecutors later alleged that more than US$4.5 billion was misappropriated from that fund, 1Malaysia Development Berhad.

Billion Dollar Whale is Tom Wright and Bradley Hope's account of how that happened. It is usually shelved as a caper — the superyacht, the premieres, the Picasso — and read that way it is entertaining and forgettable. Read as a due-diligence file, it is a sequential record of gatekeepers declining to ask the question that would have stopped things.

Almost nobody here was defeated by an undetectable forgery. They were reassured by association: by the names already in the room, by the letterhead on the file, by the sense that someone more regulated had said yes first.

Summary

Billion Dollar Whale, by the Wall Street Journal reporters Tom Wright and Bradley Hope, reconstructs the 1MDB affair, in which billions of dollars are alleged to have been diverted from a Malaysian state fund. Its central figure, Jho Low, held no position at the fund and borrowed standing from proximity to Gulf royal circles and to the family of Najib Razak, then prime minister. The authors work from documents and court filings, keeping the alleged apart from the established. They trace funds through offshore vehicles named to resemble genuine Abu Dhabi sovereign subsidiaries, and through the bank and auditors that handled them. Readers come away with a record of gatekeepers reassured by one another’s approval.

What the book actually covers

Low Taek Jho — Jho Low — held no formal position at the fund whose money moved. His method, as the authors reconstruct it, was to manufacture standing rather than earn it: cultivate proximity to Gulf royal circles and to the family of Malaysia's then prime minister, Najib Razak, and let counterparties infer authority.

The mechanics of the money earn the book its place on a compliance shelf. Wright and Hope follow funds through layers of offshore vehicles, including British Virgin Islands entities with names all but identical to genuine Abu Dhabi sovereign subsidiaries. A recipient name that matched expectations at a glance was, repeatedly, enough.

Then come the institutions. Goldman Sachs, which arranged the bonds, earned fees far above the norm for sovereign work and admitted, in the statement of facts accompanying its October 2020 deferred prosecution agreement with the US Department of Justice, that red flags raised during due diligence were ignored or only nominally addressed so the transactions would be approved. 1MDB changed auditors more than once. KPMG Malaysia told the fund in 2018 that its audit reports for the financial years 2010 to 2012 should no longer be relied upon, and Deloitte said the same of the 2013 and 2014 statements. The book appeared before the reckoning: in 2020 Goldman Sachs entered a deferred prosecution agreement with the US Department of Justice and its Malaysian subsidiary pleaded guilty. Tim Leissner, formerly Goldman's Southeast Asia chairman, had pleaded guilty in 2018 to conspiring to launder money and to violate the Foreign Corrupt Practices Act, and was sentenced to two years in May 2025. A second former banker, Roger Ng, was convicted at trial in Brooklyn in 2022 and sentenced to ten years; the Second Circuit affirmed his conviction and sentence in December 2025. Najib Razak was convicted in July 2020 over funds from SRC International, a former 1MDB unit; the Federal Court upheld that conviction in August 2022, and in February 2024 the Pardons Board reduced the sentence. In the separate 1MDB-Tanore proceedings the Kuala Lumpur High Court convicted him in December 2025; appeals in that matter were continuing as this review was written.

The Hollywood material is not decoration. Red Granite Pictures, the studio behind The Wolf of Wall Street, paid US$60 million in 2018 to settle US civil forfeiture claims, without any admission of wrongdoing. Proximity to fame made the money look explicable, and the money bought the proximity.

The authors work from documents and court filings rather than a single insider, keeping the alleged separate from the established. Low has consistently denied wrongdoing through his representatives. He was charged in absentia in Malaysia and the United States in 2018–19 and, when this review was written, had not appeared to answer those criminal charges; a separate 2019 civil settlement with the US Department of Justice forfeited assets without any admission of liability.

Billion Dollar Whale: The Man Who Fooled Wall Street, Hollywood, and the World book cover

Why it matters for your risk posture

Read it for the failure mode it isolates: comfort by proximity. Each gatekeeper took assurance from someone else's apparent assurance: the bank from the sovereign association, the counterparty from the bank, the financier from the bank's client list. No one held the whole picture, and every link was defensible on its own. If your onboarding leans on a regulated institution having cleared the client, you run the same control.

Read it because completeness and accuracy are different tests, and most processes run only the first. The files here were complete: forms signed, entities real, invoices matching instructions. Nobody checked independently that the named entity was the entity everyone assumed. In practice that check is run least often on the largest transactions, where the counterparty has already been vouched for.

Read it for the timeline above all. Concerns surfaced early, from journalists, from internal reviewers, from an auditor unwilling to sign off. The information existed years before the consequences did. What was absent was a route by which an inconvenient objection could halt a transaction carrying senior sponsorship — a governance design problem, not an investigative one.

Every gatekeeper in the 1MDB story took comfort from someone else’s approval. Our investigative due diligence is built to replace that reliance with checks a client can see for itself. We confirm that a named recipient is the entity everyone assumed it to be, which is the check that failed repeatedly here. We also establish who stands behind a counterparty independently of whoever made the introduction, since on the largest transactions the vouching tends to arrive before anyone has looked.

Key takeaways

  • Proximity is not diligence. Being introduced by a credible party, or transacting alongside one, says nothing about a counterparty's standing. The party is what needs verifying, rather than the room it was met in.
  • Reconcile names to entities. Lookalike corporate names in permissive jurisdictions were central to how funds moved here. The check against that is trivial and rarely run.
  • Fees carry information. Compensation far above market for the apparent work says something about what is really being bought. Treat an unexplained premium as a trigger rather than as a detail.
  • Escalation must survive seniority. Objections were raised and then absorbed, and a control that sponsorship can override is documentation rather than control.

About the authors

Bradley Hope
Bradley HopePhoto: Hachette Book Group

Tom Wright and Bradley Hope reported on 1MDB for The Wall Street Journal, Wright from Southeast Asia and Hope from the financial-institutions side. The book grew out of that reporting and keeps its habits: documents over atmosphere, and care in distinguishing the alleged from the established.

Both later co-founded Project Brazen, a journalism and film studio that continued to cover the case.

Billion Dollar Whale: The Man Who Fooled Wall Street, Hollywood, and the World (Hachette Books, 2018).


Billion Dollar Whale: The Man Who Fooled Wall Street, Hollywood, and the World book cover

Get the book

Billion Dollar Whale: The Man Who Fooled Wall Street, Hollywood, and the World

Tom Wright and Bradley Hope

Find it on Amazon

Also on Amazon UK · Amazon DE

Where the proceeds go

We donate 100% of what we earn to Children of Fallen Heroes

If you buy through the link above we may earn a small commission, at no extra cost to you. Every penny of it goes to Children of Fallen Heroes, a registered 501(c)(3). We keep none of it.

They are developing an 82-acre campus in Vass, North Carolina for the children of military families, first responders and foster youth — STEAM education in aviation, robotics and drones, alongside leadership and healing programs. Over eleven years their programs have reached more than 15,000 young people and families.

See their work

We participate in the Amazon Services LLC Associates Program and similar affiliate programs; these relationships do not influence our recommendations. Cookies and similar technologies record interactions with affiliate links — see our Privacy Policy to disable them, or reach us via Contact.

Discover more Insights from Falcone International

In “On Intelligence,” the late John Hughes-Wilson organized the history of espionage around the intelligence cycle rather than around famous agents and operations, and argued that intelligence fails most often at the last step, when an accurate assessment has to reach someone with the authority to act on it.

Fraud is often reported to rise in a downturn. Targets stay where they were set, oversight thins as headcount falls, and the controls that quietly depended on somebody having spare time stop working. This piece sets out where exposure concentrates during a recession and which defenses actually hold.

Joel Brenner, a former NSA inspector general and head of US counterintelligence, argues in “Glass Houses” that cyber exposure is structural rather than a failure of controls: the networks that carry commercial, governmental and personal life were built for reachability, not confidentiality.

Counterparty risk is the exposure you take on from the people and organizations you transact with. It rarely announces itself, and most organizations price it at zero until the day they learn otherwise. This guide explains the term, then sets out a method for verifying a counterparty before and after signature.

Discover how we use our integrated capabilities for our clients

Case Studies and Client Stories