Reporting of Cyber Fraud under Regulation 30 of SEBI (LODR), 2015

Date: 23.10.2026 The Manager The Department of Corporate Services/Listing BSE Limited Phiroze Jeejeebhoy Towers, Dalal Street, Fort Mumbai – 400001 Scrip Code: 541358 Subject: Intimation under Regulation 30 of SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015 – Reporting of Cyber Fraud Pursuant to Regulation 30 read with Part A of Schedule III of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, we wish to inform the Exchange that the Company has experienced another incident of cyber fraud, following the earlier incident reported to the Stock Exchange on 21st October, 2026. It has been identified that certain fraudulent payments aggregating to Rs. 7.27 crores were made to third-party bank accounts from the Company's designated Disbursal Account on Friday, 23rd October, 2026 through the automated API-integrated disbursal engine, bypassing the Company's normal payment and authorization processes The Company is investigating this subsequent incident and is in the process of filing formal complaints with the relevant cybercrime and law enforcement authorities. Any further material developments in relation to the aforesaid incident shall be promptly intimated to the Stock Exchange in accordance with the applicable regulatory requirements. Kindly take the above information on record. Thanking You FOR UNIFINZ CAPITAL INDIA LIMITED RITU TOMAR COMPANY SECRETARY &COMPLIANCE OFFICER Annexure-A Sr. Details of events that Information of such event(s) No. need to be Provided 1. Nature of An unidentified third party issued fraudulent payment fraud/default/arrest instructions to the Banker of Company’s Disbursal Bank Account. 2. Estimated impact on the The estimated financial impact is ₹7,27,48,394, subject to listed entity the outcome of the investigation and recovery proceedings. No disruption to the business operations of the Company has been identified. 3. Time of occurrence O ctober 23rd, 2026 between 12:01 PM and 14:45 PM. 4. Person(s) involved Unidentified individual(s), unrelated to the Company. 5. Estimated amount ₹7,27,48,394 transferred through 309 separate involved transactions between ₹99,989 and ₹2,50,000 to third- party bank accounts on October 23, 2026. 6. Whether such Once the company identified the fraudulent transactions fraud/default/arrest has are debited, the disbursal API from the bank’s side has been reported to b een suspended. appropriate authorities/Steps taken