Unifinz Capital India Limited has submitted a regulatory disclosure to BSE Limited pursuant to Regulation 30 read with Part A of Schedule III of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015. This filing reports a second incident of cyber fraud, following a previous incident reported to the Stock Exchange on 21st October 2026.
Nature of the Event
The company experienced a cyber fraud incident where an unidentified third party issued fraudulent payment instructions to the banker of the company's Disbursal Bank Account. The fraudulent payments were made from the company's designated Disbursal Account through the automated API-integrated disbursal engine, bypassing the company's normal payment and authorization processes.
Financial Impact and Details
The estimated financial impact is ₹7,27,48,394 (₹7.27 crore), subject to the outcome of the investigation and recovery proceedings. The fraud occurred on Friday, 23rd October 2026 between 12:01 PM and 14:45 PM. The amount was transferred through 309 separate transactions ranging between ₹99,989 and ₹2,50,000 to third-party bank accounts.
Operational Impact and Response
No disruption to the business operations of the company has been identified. Upon identifying the fraudulent transactions, the company suspended the disbursal API from the bank's side. The company is investigating this subsequent incident and is in the process of filing formal complaints with the relevant cybercrime and law enforcement authorities.