Unifinz Capital India Ltd has reported a cyber fraud involving ₹7.69 crore transferred from its designated disbursal account to third-party bank accounts through 346 transactions, according to a regulatory disclosure filed with BSE.
The incident occurred on October 20, 2026, between 11.43 am and 1.54 pm. The company said an unidentified third party issued fraudulent payment instructions involving its disbursal account.
The transactions were processed through the company’s automated API-integrated disbursal engine, allegedly bypassing its normal payment and authorisation process.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
Fraud Detected During Bank Reconciliation
Unifinz Capital said the incident came to its attention on the morning of October 21 during a routine daily reconciliation of loan disbursal accounts for the previous day.
October 20 was a non-working day for the company on account of Dussehra.
The company identified fraudulent payments amounting to ₹7,69,26,114 that had been transferred to third-party bank accounts.
According to the disclosure, the transactions were carried out within a period of just over two hours.
346 Transactions Routed to Third-Party Accounts
The ₹7.69 crore was transferred through 346 separate transactions.
Individual payments ranged from ₹19,996 to ₹2,49,999, according to information submitted by the company to the stock exchange.
Unifinz said the payments were made through its automated API-integrated disbursal engine while bypassing the company’s usual payment and authorisation procedures.
The company identified the individuals responsible as unidentified third parties with no connection to Unifinz Capital.
The estimated financial impact stands at ₹7,69,26,114, although the company said the final impact would depend on the outcome of the investigation and recovery proceedings.
Account Frozen, Cybercrime Complaint Filed
Following detection of the fraud, the company instructed its bank to freeze the affected disbursal account.
A complaint was also lodged on the National Cyber Crime Reporting Portal, while further investigation and reporting to relevant authorities are under way.
Unifinz Capital said no disruption to its business operations had been identified as a result of the incident.
The company said any further material developments would be disclosed to the stock exchange in accordance with applicable regulatory requirements.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
