Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

WCAPL via ICICI payout APIs

NBFC / payments · India

ConfirmedOperating status not stated

What happened

Payout API credentials at a loan origination integration; 695 unauthorized IMPS debits from five ICICI current accounts.

INR 18.96 crore drained; CERT-In CSIRT-Fin advisory to NBFCs, digital lenders, PSPs and wallets.

What remains unknown

  • Recovery amount
  • Whether other lenders using the same LOS were hit

Losses: about USD 2.26M (INR 18.96 crore at about INR 84 per USD), company filing; recovery not published

Capital around this company

DFX holds no verified lender or owner record for this organization yet. That is a gap in our coverage, not evidence that none exists.

Sources

  1. NSE filing WCAPL: intimation of cyber fraud · 2026-10-10

Does WCAPL via ICICI payout APIs touch your portfolio?

We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.

Request an exposure check