Unifinz Capital India Limited has submitted a regulatory disclosure to BSE Limited regarding a cyber fraud incident. The disclosure is made pursuant to Regulation 30 read with Part A of Schedule III of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015.
Nature of the Event
The company was subjected to a cyber fraud incidence that occurred on Tuesday, 20th October 2026, which was a non-working day for the company on account of Dussehra. The incident was discovered on the morning of 21st October 2026 during routine daily bank reconciliation exercises for all loan disbursed accounts from the previous day.
Fraud Details
An unidentified third party issued fraudulent payment instructions to the banker of the company's Disbursal Bank Account. The fraudulent payments amounting to ₹7,69,26,114 were made to third-party bank accounts from the company's designated Disbursal Account through the automated API integrated disbursal engine, bypassing the company's normal payment and authorization process.
Transaction Specifics
The fraud occurred between 11:43 AM and 13:54 PM on October 20, 2026. The amount was transferred through 346 separate transactions with values ranging between ₹19,996 and ₹2,49,999.
Financial Impact
The estimated financial impact is ₹7,69,26,114, subject to the outcome of the investigation and recovery proceedings. The company has confirmed that no disruption to the business operations has been identified.
Response and Actions Taken
Upon discovery, the company instructed the bank to apply a freeze to the disbursal account. A formal complaint has been lodged with the National Cyber Crime Reporting Portal. The matter continues to be under investigation within the company, and further reporting with relevant authorities is in process.