A finance employee in Hong Kong joined a Teams call with his CFO. He left it and wired $25 million to criminals. Nobody hacked anything. Here's what the Arup deepfake scam means for SMEs, and three things you can do this week.