Spandana Sphoorty Financial, an Indian microfinance lender, has disclosed a cyber fraud involving unauthorised transactions worth approximately ₹7.8 crore from one of its bank accounts. The transactions occurred on November 1, 2026, and involved multiple transfers to 82 beneficiary accounts, according to the company’s regulatory filing submitted to the stock exchanges on November 2.
The company said it immediately stopped the affected services in its production environment after identifying the fraud. It has informed its bank, requested the reversal of the transactions and sought the freezing of beneficiary accounts. Spandana Sphoorty has also registered a complaint on the National Cyber Crime Reporting Portal and said it is filing an insurance claim. The identities of those involved and the exact method used to execute the transactions remain under investigation.
Key Takeaways
- Spandana Sphoorty reported a cyber fraud involving approximately ₹7.8 crore.
- The unauthorised transactions occurred on November 1, 2026.
- The money was transferred through multiple transactions to 82 beneficiary accounts.
- The company stopped the affected services after discovering the incident.
- It requested its bank to reverse the transactions and freeze the beneficiary accounts.
- A complaint was registered on the National Cyber Crime Reporting Portal.
- Spandana Sphoorty has cyber fraud insurance and is filing a claim.
- The company has not confirmed how much money, if any, has been recovered.
What Happened at Spandana Sphoorty?
Spandana Sphoorty identified unauthorised transactions from one of its bank accounts on November 1.
According to its stock exchange disclosure, the transactions amounted to approximately ₹7.80 crore and were transferred to multiple beneficiary accounts through several transactions during the day.
The company informed the National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) about the incident under Regulation 30 of the SEBI Listing Obligations and Disclosure Requirements (LODR) Regulations.
The regulatory filing described the incident as a cyber fraud involving unauthorised transactions. However, it did not disclose the technical method used by the attackers, the identity of the bank involved or the identities of the individuals behind the transactions.
The company is investigating the incident and has said it will update the stock exchanges as more information becomes available.
₹7.8 Crore Transferred to 82 Accounts: Key Details
The company’s regulatory disclosure provides the following information about the incident.
| Particulars | Details |
|---|---|
| Company | Spandana Sphoorty Financial |
| Incident | Cyber fraud |
| Amount involved | Approximately ₹7.80 crore |
| Date of occurrence | November 1, 2026 |
| Number of beneficiary accounts | 82 |
| Nature of transactions | Unauthorised bank transfers |
| Bank involved | Not disclosed |
| Persons involved | Under investigation |
| Recovery status | Not confirmed |
| Insurance | Cyber fraud coverage available |
<text color=”secondary” size=”xs”>Source: Spandana Sphoorty’s regulatory filing dated November 2, 2026.</text>
The transfer of funds to 82 different beneficiary accounts indicates that the money was distributed across multiple destinations.
However, the company has not disclosed whether these accounts belong to individuals, businesses or intermediaries. It has also not confirmed whether the transfers were executed through compromised credentials, payment systems or another method.
These details will depend on the outcome of the investigation.
How Did Spandana Sphoorty Respond to the Cyber Fraud?
After identifying the unauthorised transactions, Spandana Sphoorty took several steps to contain the incident and pursue recovery of the funds.
1. Stopped Affected Services
The company immediately stopped the affected services in its production environment to limit further unauthorised activity.
This was an important containment measure while the investigation was underway.
2. Requested Reversal of Transactions
Spandana informed its bank and requested the reversal of the unauthorised transfers.
It also asked the bank to freeze the 82 beneficiary accounts to prevent further movement of the funds.
Whether the bank has successfully frozen the accounts or recovered any money has not yet been confirmed.
3. Filed a Cybercrime Complaint
The company registered a complaint on the National Cyber Crime Reporting Portal on November 1, 2026.
The portal is operated by the Ministry of Home Affairs and provides a channel for reporting cybercrime incidents in India.
The company also said it was informing other appropriate authorities.
4. Initiated an Insurance Claim
Spandana Sphoorty confirmed that it has insurance coverage for cyber fraud and is filing a claim with its insurer.
The insurance policy could help reduce the financial impact of the incident, depending on its coverage, exclusions, deductibles and the final assessment of the claim.
However, the availability of insurance does not mean the entire ₹7.8 crore loss will automatically be reimbursed.
What Is Spandana Sphoorty Financial?
<text weight=”semibold”><Entity value=”Spandana Sphoorty Financial” category=”company” disambig=”Indian microfinance and non-banking financial company”/></text> is an Indian microfinance institution that provides financial services, particularly small-ticket loans to underserved households and customers.
Microfinance lenders typically operate through extensive networks of branches and field employees. Their business involves managing large numbers of customer accounts, loan disbursements, repayments and banking transactions.
Because of these operations, reliable digital payment systems and financial controls are important to their functioning.
A cyber incident involving a bank account can therefore create more than a direct financial loss. It can also require operational restrictions, investigations, additional compliance work and customer-related checks.
The latest incident adds a cybersecurity concern to the company’s operational and financial risks.
Cybersecurity Concerns Across India’s Financial Sector
The Spandana Sphoorty incident comes amid several cybersecurity developments involving Indian financial institutions.
Other reported cases include:
- State Bank of India: The bank has been investigating suspected exposure of customer information on the dark web. A preliminary analysis identified 3,897 customer records containing personal information.
- AU Small Finance Bank: The lender has been investigating a potential data leak involving a third-party software platform that held limited information about vehicle-loan customers.
- Bank of Baroda: The bank previously reported unauthorised access to certain data through a compromised employee email account.
These incidents involve different types of cybersecurity risks. A data leak, compromised email account and unauthorised financial transfer are not the same type of attack, but they demonstrate the range of digital threats facing financial institutions.
The Indian Computer Emergency Response Team (CERT-In) also issued a critical advisory in October 2026 warning about cyberattack campaigns targeting non-banking financial companies, digital lending platforms and other financial services organisations.
The advisory highlighted risks involving compromised payment and disbursement application programming interfaces (APIs).
Why Cybersecurity Is Important for Microfinance Companies
Microfinance institutions handle a high volume of relatively small financial transactions across customer accounts and banking channels.
Their operations often involve digital loan disbursements, repayment collections, employee access systems and integrations with banks and payment providers.
A weakness in any part of this infrastructure could expose the organisation to financial fraud or operational disruption.
Several controls are particularly important for lenders:
- Transaction monitoring: Identifying unusual transfers, transaction volumes and beneficiary patterns.
- Multi-factor authentication: Adding additional verification before sensitive financial operations.
- Beneficiary verification: Checking newly added accounts before allowing large transfers.
- Transaction limits: Restricting the amount and frequency of payments.
- Access management: Limiting employees and systems to the permissions they require.
- API security: Protecting connections between lending platforms, banks and payment systems.
The Spandana incident demonstrates why financial institutions need strong controls over outgoing payments, as well as systems to detect suspicious activity quickly.
The Bigger Picture
India’s financial sector is becoming increasingly dependent on digital infrastructure for lending, collections, payments and customer services. This improves operational efficiency but also creates additional cybersecurity risks. For microfinance companies handling large numbers of transactions, a compromised bank account or payment integration can lead to substantial financial exposure.
The Spandana Sphoorty incident also highlights the importance of rapid detection, account freezing, regulatory reporting and cyber insurance. However, insurance is only one part of risk management. Strong transaction controls, secure payment integrations and continuous monitoring remain essential to protecting financial institutions from unauthorised transfers.
Looking Ahead
The immediate priority for Spandana Sphoorty will be recovering the transferred funds and completing the investigation into how the unauthorised transactions occurred. Updates on frozen beneficiary accounts, successful reversals and the insurance claim will help establish the final financial impact. The company has committed to informing the stock exchanges as the investigation progresses.
For the wider microfinance industry, the incident is another reminder that cybersecurity must remain central to financial operations. Lenders will need to strengthen payment controls, monitor digital transactions and review third-party technology integrations. The final findings from Spandana’s investigation could provide further insight into the vulnerabilities that allowed the fraud to take place.
Frequently Asked Questions
1. How much money did Spandana Sphoorty lose in the cyber fraud?
Spandana Sphoorty reported unauthorised transactions worth approximately ₹7.80 crore from one of its bank accounts on November 1, 2026. The final recoverable loss has not yet been confirmed.
2. How many bank accounts received the money?
The money was transferred through multiple transactions to 82 beneficiary accounts, according to the company’s regulatory filing.
3. When did the Spandana Sphoorty cyber fraud happen?
The unauthorised transactions occurred on November 1, 2026. The company disclosed the incident to the stock exchanges on November 2.
4. Has Spandana Sphoorty recovered the ₹7.8 crore?
The company has requested its bank to reverse the transactions and freeze the beneficiary accounts. It has not yet confirmed how much money has been recovered.
5. Does Spandana Sphoorty have cyber insurance?
Yes. The company confirmed that it has insurance coverage for cyber fraud and is filing a claim with its insurer. The amount eligible for reimbursement has not been disclosed.
6. Has Spandana Sphoorty identified the people behind the fraud?
No. The identities of those involved remain under investigation. The company has not disclosed how the attackers executed the transactions.
7. What action did Spandana Sphoorty take after discovering the fraud?
The company stopped the affected services, informed its bank, requested transaction reversals and beneficiary-account freezes, registered a complaint on the National Cyber Crime Reporting Portal and initiated an insurance claim.
8. Does the incident affect Spandana Sphoorty’s customers?
The company has not reported a confirmed customer-data breach or disclosed any direct customer impact. The incident involved unauthorised transactions from one of its bank accounts, and the investigation is ongoing.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
