Reporting of Cyber Fraud under regulation 30 of SEBI (LODR), 2015

Date: 21.10.2026 The Manager The Department of Corporate Services/Listing BSE Limited Phiroze Jeejeebhoy Towers, Dalal Street, Fort Mumbai – 400001 Scrip Code: 541358 Subject: Intimation under Regulation 30 of SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015 – Reporting of Cyber Fraud Pursuant to Regulation 30 read with Part A of Schedule III of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, we wish to inform the Exchange that the Company has been subjected to a cyber fraud incidence on Tuesday, 20th October, 2026 which was also a non-working day of the Company on account of Dussehra. The incidence came to the notice of the Company today’s morning as on 21st October,2026, upon routine exercise of daily bank reconciliation for all loan disbursed accounts of the previous day. It is identified that certain fraudulent payments amounting Rs. 7.69 crores were made to third-party bank accounts from the Company’s designated Disbursal Account through the automated API integrated disbursal engine bypassing the Company’s normal payment and authorization process. The matter continues to be under investigation within the Company and further filing of formal complaints with the relevant crime enforcement authorities. Any further material developments in the matter shall be intimated to the Stock Exchange in accordance with the applicable regulatory requirements. Kindly take the above information on record. Thanking You FOR UNIFINZ CAPITAL INDIA LIMITED RITU TOMAR COMPANY SECRETARY &COMPLIANCE OFFICER Annexure-A Sr. Details of events that Information of such event(s) No. need to be Provided 1. Nature of An unidentified third party issued fraudulent payment fraud/default/arrest instructions to the Banker of Company’s Disbursal Bank Account. 2. Estimated impact on the The estimated financial impact is ₹7,69,26,114, subject to listed entity the outcome of the investigation and recovery proceedings. No disruption to the business operations of the Company has been identified. 3. Time of occurrence October 20, 2026 between 11:43 AM and 13:54 PM. The management became aware of the incident in the morning on October 21, 2026. 4. Person(s) involved Unidentified individual(s), unrelated to the Company. 5. Estimated amount ₹7,69,26,114, transferred through 346 separate involved transactions between ₹19,996 and ₹2,49,999, to third- party bank accounts on October 20, 2026. 6. Whether such On the instruction of the Company, Bank has applied fraud/default/arrest has freeze to the disbursal account. Complaint has been been reported to lodged with National Cyber Crime Reporting Portal. appropriate Further investigation and reporting with relevant authorities/Steps taken authorities are in process