01/09/2026
In 2024, an employee at the British engineering firm Arup joined a video call with his CFO and several colleagues.
He was asked to move money for a confidential deal. He recognised the faces. He recognised the voices. So he made the transfers.
Every other person on that call was a deepfake. Arup lost $25 million.
Nothing was hacked. In fact, every system did exactly what it was built to do. Someone made a sensible decision based on what he could see and hear. But what he could see and hear was fake.
Small businesses are easy targets. These days, cloning a voice convincingly only takes a short clip. The person paying your invoices probably isn’t following a procedure when you ask them something: they know and trust your voice.
The solution is to take away the chance of human error.
Pick a figure. Above it, the transaction is confirmed on a second channel, whether that’s video, call, or email. No payment or edit to bank details should go through from the voice of one platform alone. Urgency is the textbook tactic of fraudsters, so beat it with process.
It'll take your finance manager ten minutes to set up, and it costs you nothing.
There's a lot of opportunity with AI, but there's a lot of danger too. AI-readiness means being prepared for both. And it doesn’t have to be daunting.
So, are you AI-ready? Watch this space, because we’ll be posting more on AI cybersecurity to help you answer that question.
For a readiness assessment tailored to your business, book a free clarity call with James: https://www.spidergroup.com/contact?utm_source=linkedin&utm_medium=social&utm_campaign=launch