Chapter 4: The Company She Built
L## Chapter 4: The Company She Built
Lena rotated the laptop so I could see the entire authorization history.
There were eleven suspicious paymentsena rotated the laptop so I could see the entire authorization history.
There were eleven suspicious payments.
The first was $1,500.
The last successful transfer was $18,400.
Together, they totaled $37,800.
The largest pending transaction,.
The first was $1,500.
The last successful transfer was $18,400.
Together, they totaled $37,800.
The largest pending transaction, for $62,000, would have pushed the total beyond $99,000.
“Tell me you didn't approve any of these,” Lena said.
“I didn't approve any of them.””
“Not even the consulting fees for $62,000, would have pushed the total beyond $99,000.
“Tell me you didn't approve any of these,” Lena said.
“I didn't approve any of them.””
“Not even the consulting fees?””
“Lena, I've never hired Northbridge Advisory Group.””
She pressed her lips together.
“I know. I searched the vendor database. The company was added five months ago, and the onboarding documentation is incomplete. Whoever entered it bypassed two of our normal verification steps.””
“How?””
?””
“Lena, I've never hired Northbridge Advisory Group.””
She pressed her lips together.
“I know. I searched the vendor database. The company was added five months ago, and the onboarding documentation is incomplete. Whoever entered it bypassed two of our normal verification steps.””
“How?””
“By submitting what appears to be an executive exception.””
“Under my name?””
Lena nodded.
I pulled out a chair and sat down.
The office was still half asleep. Beyond the glass walls of our conference room, a cleaning employee pushed a cart past the reception desk“By submitting what appears to be an executive exception.””
“Under my name?””
Lena nodded.
I pulled out a chair and sat down.
The office was still half asleep. Beyond the glass walls of our conference room, a cleaning employee pushed a cart past the reception desk. The smell of fresh coffee drifted from the kitchen.
Everything looked normal.
That was the unsettling part.
A hundred employees depended on the business I had built. We had recently won a contract to redesign three regional medical facilities. Another client had. The smell of fresh coffee drifted from the kitchen.
Everything looked normal.
That was the unsettling part.
A hundred employees depended on the business I had built. We had recently won a contract to redesign three regional medical facilities. Another client had commissioned a complex renovation that would begin the following month.
If our financial systems were compromised, it wouldn't matter how good our designs were.
People would lose trust in us.
And trust was what I sold.
“Can you trace the original vendor request?”” I asked.
“I'm trying. Some records point commissioned a complex renovation that would begin the following month.
If our financial systems were compromised, it wouldn't matter how good our designs were.
People would lose trust in us.
And trust was what I sold.
“Can you trace the original vendor request?”” I asked.
“I'm trying. Some records point to your company email. Others show the request came through an administrative login that shouldn't have had permission to create vendors.””
“Which login?””
Lena clicked another tab.
“An old account used for business continuity. It was retained when we moved systems last year.””
“Who had access?””
to your company email. Others show the request came through an administrative login that shouldn't have had permission to create vendors.””
“Which login?””
Lena clicked another tab.
“An old account used for business continuity. It was retained when we moved systems last year.””
“Who had access?””
“Originally, you and me. Our former IT contractor had temporary access during the migration. But the account should have been disabled afterward.””
“Was it?””
She looked at me.
“According to the system, yes.””
“And someone reactivated it?””
“That's what it looks like.””
I felt a small, cold knot form beneath“Originally, you and me. Our former IT contractor had temporary access during the migration. But the account should have been disabled afterward.””
“Was it?””
She looked at me.
“According to the system, yes.””
“And someone reactivated it?””
“That's what it looks like.””
I felt a small, cold knot form beneath my ribs.
Daniel had helped me set up the company's first email system when we were dating. Back then, I had worked from a rented office and trusted him with everything. He had fixed printer problems, organized files, and sat beside me late at night while I worked on proposals.
He had known the names of our my ribs.
Daniel had helped me set up the company's first email system when we were dating. Back then, I had worked from a rented office and trusted him with everything. He had fixed printer problems, organized files, and sat beside me late at night while I worked on proposals.
He had known the names of our vendors.
He had watched me approve invoices.
He had seen how I signed my documents.
I had once believed that sharing my life with him meant sharing the burden of building something.
Now I wondered whether he had been learning how to imitate the person I was.
The conference room door opened.
Naomi entered with a slim vendors.
He had watched me approve invoices.
He had seen how I signed my documents.
I had once believed that sharing my life with him meant sharing the burden of building something.
Now I wondered whether he had been learning how to imitate the person I was.
The conference room door opened.
Naomi entered with a slim folder under one arm and a woman carrying a laptop behind her.
“This is Marisol Grant,” Naomi said.
“She conducts independent forensic accounting reviews. She isn't affiliated with your company or your bank.””
Marisol shook my hand.
“I've read a brief outline of the issue,” she said.
“I'll folder under one arm and a woman carrying a laptop behind her.
“This is Marisol Grant,” Naomi said.
“She conducts independent forensic accounting reviews. She isn't affiliated with your company or your bank.””
Marisol shook my hand.
“I've read a brief outline of the issue,” she said.
“I'll need access to the relevant records, but I won't make changes to your systems. We'll preserve the existing data and work from verified copies.””
“Good,” I said.
“That's exactly what I need access to the relevant records, but I won't make changes to your systems. We'll preserve the existing data and work from verified copies.””
“Good,” I said.
“That's exactly what I want.””
Naomi placed her folder on the table.
“Before we begin, I need to be clear about something. We're investigating potentially unauthorized want.””
Naomi placed her folder on the table.
“Before we begin, I need to be clear about something. We're investigating potentially unauthorized transactions and possible identity misuse. We are not assuming who is responsible until the evidence transactions and possible identity misuse. We are not assuming who is responsible until the evidence supports a conclusion.””
“I understand.””
“And nobody contacts your husband or mother-in-law about these findings without discussing it with me first.””
Lena shifted in her chair.
“Does that mean we can't suspend the payments supports a conclusion.””
“I understand.””
“And nobody contacts your husband or mother-in-law about these findings without discussing it with me first.””
Lena shifted in her chair.
“Does that mean we can't suspend the payments?””
“You've already paused the pending payment, which was?””
“You've already paused the pending payment, which was appropriate under your normal financial controls. We can strengthen those controls without announcing a suspect.””
Marisol opened her laptop.
“Let's start with the device identifier.””
She examined the records Lena had printed and asked for a appropriate under your normal financial controls. We can strengthen those controls without announcing a suspect.””
Marisol opened her laptop.
“Let's start with the device identifier.””
She examined the records Lena had printed and asked for a copy of the access log. After several minutes, she leaned back.
“The transactions were approved through a session associated with a device registered as WHITAKER-HOME-02.””
“My home laptop,” I said.
“That's the device label, yes. It doesn't establish who was physically using it, and an identifier can sometimes be copied or spoofed. But it gives us a starting point.””
Naomi looked at me.
“Who has access to that laptop?””
“Me.””
“Anyone else?””
copy of the access log. After several minutes, she leaned back.
“The transactions were approved through a session associated with a device registered as WHITAKER-HOME-02.””
“My home laptop,” I said.
“That's the device label, yes. It doesn't establish who was physically using it, and an identifier can sometimes be copied or spoofed. But it gives us a starting point.””
Naomi looked at me.
“Who has access to that laptop?””
“Me.””
“Anyone else?””
I hesitated.
“Daniel knows the password to the home Wi-Fi. He used to help with my computer, years ago. But he doesn't have permission to access my company's financial systems.””
“Does he know your business email password?””
“Not now.””
“Did he ever?””
“Years ago, when we were dating, I used the same password for several accounts. I changed most of them after we married.””
Naomi made a note.
“Don't guess about which passwords he might know. We'll establish the actual access history.””
Marisol opened another screen.
“There's something else. The vendor's bank account was added shortly after the vendor record was created. The payment instructions were then changed twice, but the change notifications were sent to a recovery address that isn't yours.””
“Whose is it?””
“We're still verifying that.””
She turned the laptop toward Naomi.
The address ended with a domain I recognized from the invoice.
Northbridge Advisory Group.
The same business that had supposedly provided services to my company.
“It's a closed loop,” Lena murmured.
“Possibly,” Marisol said.
“At this stage, we can establish a patternI hesitated.
“Daniel knows the password to the home Wi-Fi. He used to help with my computer, years ago. But he doesn't have permission to access my company's financial systems.””
“Does he know your business email password?””
“Not now.””
“Did he ever?””
“Years ago, when we were dating, I used the same password for several accounts. I changed most of them after we married.””
Naomi made a note.
“Don't guess about which passwords he might know. We'll establish the actual access history.””
Marisol opened another screen.
“There's something else. The vendor's bank account was added shortly after the vendor record was created. The payment instructions were then changed twice, but the change notifications were sent to a recovery address that isn't yours.””
“Whose is it?””
“We're still verifying that.””
She turned the laptop toward Naomi.
The address ended with a domain I recognized from the invoice.
Northbridge Advisory Group.
The same business that had supposedly provided services to my company.
“It's a closed loop,” Lena murmured.
“Possibly,” Marisol said.
“At this stage, we can establish a pattern of questionable transactions. We still need independent confirmation of the destination accounts and the people who control them.””
Naomi tapped her pen against the folder.
“Then that's our priority. We secure the payment records, notify the bank through the proper channels, and make sure the company has a documented response to the attempted transfer.””
I looked through the glass wall at my staff.
A young designer was explaining a drawing to another employee. Someone laughed beside the printer. A project manager hurried past with a roll of plans tucked beneath one arm.
I had created this place from a single desk and a promise to myself that I would never build a business where people were disposable.
I wasn't going to let Daniel turn it into a weapon against me.
“Do whatever is necessary to protect the company,” I said of questionable transactions. We still need independent confirmation of the destination accounts and the people who control them.””
Naomi tapped her pen against the folder.
“Then that's our priority. We secure the payment records, notify the bank through the proper channels, and make sure the company has a documented response to the attempted transfer.””
I looked through the glass wall at my staff.
A young designer was explaining a drawing to another employee. Someone laughed beside the printer. A project manager hurried past with a roll of plans tucked beneath one arm.
I had created this place from a single desk and a promise to myself that I would never build a business where people were disposable.
I wasn't going to let Daniel turn it into a weapon against me.
“Do whatever is necessary to protect the company,” I said.
“Even if it means pausing projects or bringing in an outside auditor. I want the truth more than I want to avoid embarrassment.””
Naomi nodded.
“That's the right approach.””
She opened her folder and removed a printed form.
“I also want you to understand the personal side of this. If the financial.
“Even if it means pausing projects or bringing in an outside auditor. I want the truth more than I want to avoid embarrassment.””
Naomi nodded.
“That's the right approach.””
She opened her folder and removed a printed form.
“I also want you to understand the personal side of this. If the financial misconduct is being used to pressure you into a divorce settlement, the legal strategy may involve more than your company. We need to establish whether misconduct is being used to pressure you into a divorce settlement, the legal strategy may involve more than your company. We need to establish whether anyone has attempted to access your personal assets or represent that you authorized transactions involving your property.””
I remembered the mortgage statement in Evelyn's desk.
“They have copies of my home documents,” I said.
Naomi's pen stopped.
“What kind?””
“My mortgage statement. Tax returns. A printout showing the ownership information for my apartment. There were photographs of documents taken inside my home office.””
“Do you know when the photographs were taken?””
“Some anyone has attempted to access your personal assets or represent that you authorized transactions involving your property.””
I remembered the mortgage statement in Evelyn's desk.
“They have copies of my home documents,” I said.
Naomi's pen stopped.
“What kind?””
“My mortgage statement. Tax returns. A printout showing the ownership information for my apartment. There were photographs of documents taken inside my home office.””
“Do you know when the photographs were taken?””
“Some were several months old. One was from the previous week.””
“Who had access to your home office?””
“Daniel.””
“Anyone else?””
“Occasionally, cleaners. Contractors, when I needed were several months old. One was from the previous week.””
“Who had access to your home office?””
“Daniel.””
“Anyone else?””
“Occasionally, cleaners. Contractors, when I needed repairs. But the office has a lock, and repairs. But the office has a lock, and I normally keep personal files in a cabinet.””
Naomi wrote something down.
“Don't assume the photographs prove who took them. We'll document the circumstances and investigate the access.””
I normally keep personal files in a cabinet.””
Naomi wrote something down.
“Don't assume the photographs prove who took them. We'll document the circumstances and investigate the access.””
Marisol had been reviewing another setMarisol had been reviewing another set of records.
“Could I see the name of the company that manages your mother-in-law's apartment?””
I gave of records.
“Could I see the name of the company that manages your mother-in-law's apartment?””
I gave her the building name and address.
She typed for several minutes, then requested a second search through the records available to her the building name and address.
She typed for several minutes, then requested a second search through the records available to her.
Her eyebrows rose slightly.
“What is it?”” I asked.
“I can't establish ownership from this initial search alone,” she said, “but there her.
Her eyebrows rose slightly.
“What is it?”” I asked.
“I can't establish ownership from this initial search alone,” she said, “but there is a business connection worth examining. The address you gave me appears in a document associated with Northbridge Advisory Group.””
I leaned forward.
“Evelyn's apartment?””
“Possibly. I is a business connection worth examining. The address you gave me appears in a document associated with Northbridge Advisory Group.””
I leaned forward.
“Evelyn's apartment?””
“Possibly. I want to verify the property records through an appropriate source before drawing conclusions.””
Naomi closed the folder.
“Then we won't draw conclusions yet. We'll preserve the information and request the records we need.””
The meeting continued for another hour.
Marisol documented the suspicious transfers. Lena secured the current vendor want to verify the property records through an appropriate source before drawing conclusions.””
Naomi closed the folder.
“Then we won't draw conclusions yet. We'll preserve the information and request the records we need.””
The meeting continued for another hour.
Marisol documented the suspicious transfers. Lena secured the current vendor database and arranged for an independent review of new payment requests. Naomi prepared notices to preserve relevant company records and advised me to keep all communications with Daniel factual, brief, and written.
No one promised an easy outcome.
No one told me to relax.
They treated the problem as real.
That alone was worth more than Daniel's apologies had been worth in months.
At 10:37 a.m., I returned to my office and found an email from our largest client.
The subject line read: *URGENT—CONFIDENTIAL FINANCIAL CONCERN.*
I opened it.
The client had received an anonymous message alleging that Whitaker Studio was under investigation for fraudulent billing. It referred to unauthorized vendor payments and claimed that the company's founder had been using project funds for personal expenses.
The writer had included my full name.
There was also a sentence about my marriage.
We believe Mrs. Whitaker's recent personal difficulties may have affected her judgment, and we recommend reviewing all outstanding contracts.
I read it twice.
The message had been sent from an account that appeared to belong to a former supplier.
The supplier had been dissolved eighteen months earlier.
I forwarded the email to Naomi and asked her to add it to the evidence record.
Then I walked into Lena's office.
“Someone has contacted database and arranged for an independent review of new payment requests. Naomi prepared notices to preserve relevant company records and advised me to keep all communications with Daniel factual, brief, and written.
No one promised an easy outcome.
No one told me to relax.
They treated the problem as real.
That alone was worth more than Daniel's apologies had been worth in months.
At 10:37 a.m., I returned to my office and found an email from our largest client.
The subject line read: *URGENT—CONFIDENTIAL FINANCIAL CONCERN.*
I opened it.
The client had received an anonymous message alleging that Whitaker Studio was under investigation for fraudulent billing. It referred to unauthorized vendor payments and claimed that the company's founder had been using project funds for personal expenses.
The writer had included my full name.
There was also a sentence about my marriage.
We believe Mrs. Whitaker's recent personal difficulties may have affected her judgment, and we recommend reviewing all outstanding contracts.
I read it twice.
The message had been sent from an account that appeared to belong to a former supplier.
The supplier had been dissolved eighteen months earlier.
I forwarded the email to Naomi and asked her to add it to the evidence record.
Then I walked into Lena's office.
“Someone has contacted our client.””
She read the message and swore under her breath.
“Whoever is doing this wants the allegations to spread before we can disprove them.””
“Then we need to act faster.””
“We're already doing everything we can without compromising the records.””
I looked at the company's quarterly project board hanging on the wall.
Two months of work. Hundreds of hours. Millions of dollars in contracts.
All of it now vulnerable to one carefully written accusation.
My phone rang.
Naomi.
“Nora, I've received preliminary information from Marisol's researcher,” she said.
“The apartment may not belong to Evelyn at all. We haven't verified that yet, but the property appears to have a connection to a company associated with the suspected vendor.””
I stared at Lena.
“Can you verify who arranged the security cameras?”” I asked.
“We'll pursue that through the appropriate channels,” Naomi replied.
“Please don't go back to the property.””
“I won't.””
“And Nora, the anonymous complaint wasn't sent only to your client.””
My fingers tightened around the phone.
“Who else received it?””
“Your professional liability insurer.””
For a moment, I couldn't speak.
That policy protected my company if a client accused us of professional negligence. A financial fraud investigation could complicate the coverage, even if the allegations were false.
“What did they say?””
“They've requested a formal response and preservation of the relevant records. We can handle that. But I need you to understand how serious the timing is.””
I looked at the photograph of Daniel's handwritten plan on my phone.
The audit will finish her.
He hadn't been bluffing.
The plan was moving exactly as he'd written it.
And someone outside my family had just been invited to help destroy me.
our client.””
She read the message and swore under her breath.
“Whoever is doing this wants the allegations to spread before we can disprove them.””
“Then we need to act faster.””
“We're already doing everything we can without compromising the records.””
I looked at the company's quarterly project board hanging on the wall.
Two months of work. Hundreds of hours. Millions of dollars in contracts.
All of it now vulnerable to one carefully written accusation.
My phone rang.
Naomi.
“Nora, I've received preliminary information from Marisol's researcher,” she said.
“The apartment may not belong to Evelyn at all. We haven't verified that yet, but the property appears to have a connection to a company associated with the suspected vendor.””
I stared at Lena.
“Can you verify who arranged the security cameras?”” I asked.
“We'll pursue that through the appropriate channels,” Naomi replied.
“Please don't go back to the property.””
“I won't.””
“And Nora, the anonymous complaint wasn't sent only to your client.””
My fingers tightened around the phone.
“Who else received it?””
“Your professional liability insurer.””
For a moment, I couldn't speak.
That policy protected my company if a client accused us of professional negligence. A financial fraud investigation could complicate the coverage, even if the allegations were false.
“What did they say?””
“They've requested a formal response and preservation of the relevant records. We can handle that. But I need you to understand how serious the timing is.””
I looked at the photograph of Daniel's handwritten plan on my phone.
The audit will finish her.
He hadn't been bluffing.
May you like
The plan was moving exactly as he'd written it.
And someone outside my family had just been invited to help destroy me.