Microfinance company Spandana Sphoorty Financial disclosed on 2 November 2026 that unauthorised transactions totalling approximately ₹7.80 crore had been debited from one of its bank accounts the previous day and sent to 82 beneficiary accounts. The company asked its unnamed bank for reversal, freezes and an investigation; recoveries are not yet confirmed.
What the company formally disclosed
Spandana Sphoorty Financial Limited, a microfinance lender, informed the BSE and the National Stock Exchange on 2 November 2026 that it had identified unauthorised transactions from one of its bank accounts on 1 November. In its signed stock-exchange disclosure, the company estimated the total at ₹7.80 crore. Annexure A says multiple transfers went to 82 beneficiary accounts.
The filing identifies the development as a cyber-fraud incident but explicitly says the details and the persons involved remain under investigation. The specific bank was not named. Neither the filing nor the Reuters account identifies a bank employee as involved, so this story makes no such allegation.
Actions disclosed so far
- Affected company services: Spandana said it immediately stopped the affected services in its own production environment after discovering the transactions.
- Bank recovery request: It notified the unnamed bank and asked for transaction reversal, freezing of the beneficiary accounts and detailed investigation.
- Cybercrime complaint: It said a complaint was registered on the National Cyber Crime Reporting Portal on 1 November 2026.
- Insurance: The company said it held cyber-fraud insurance and was filing a claim.
Importantly, a request for reversal and freezing is not proof that the requests were executed or that the money was recovered. No recovery figure has been confirmed in the source filing.
What the filing establishes—and what remains unknown
| Item | Position on 2 November |
|---|---|
| Amount involved | Approximately ₹7.80 crore, as estimated by the company |
| Recipient accounts | 82 beneficiary accounts according to the company’s annexure |
| Date of transfers | 1 November 2026 |
| Bank providing the account | Not publicly named |
| How access was compromised | Under investigation; not established |
| Money actually recovered | Not disclosed |
Why banking operations teams should follow the case
The direct banking connection is the company’s request to a bank for transaction traceability, possible reversal and freezing of many beneficiary accounts. For bank payments, cyber-fraud and recovery teams, these are recognisable operational questions that may require coordination with counterparties and investigators. This paragraph explains the case’s professional relevance; it does not declare any new regulatory obligation or say the unnamed bank failed in its duties.
It would also be inaccurate to describe the incident as a proven intrusion into the bank’s own systems. The company reported unauthorised debits from an account, while the exact route and responsible parties have not been established publicly.
What comes next
Spandana said it would inform the exchanges about material developments, including recovery and investigation outcomes. Any change to the amount, mechanism or identified parties needs a later, separately verified disclosure. The filing reference is SSFL/Stock Exchange/2026-27/082, dated 2 November 2026.
Sources and References
- Spandana Sphoorty Financial Limited (NSE stock exchange filing) — Intimation under Regulation 30 of SEBI (LODR) Regulations, 2015 – Cyber Fraud Incident. https://nsearchives.nseindia.com/corporate/SPANDANA_02112026105300_SEcyberfraud.pdf
- Reuters — India's Spandana Sphoorty Financial reports cyberattack involving its bank account. https://www.reuters.com/legal/government/indias-spandana-sphoorty-financial-reports-cyberattack-involving-its-bank-2026-11-02/
Please consult the cited sources and check the exact applicability of any legal or employment change. Corrections are welcomed.
Join the discussion