Chapter 6: The Missing Four Million
At 11:47 a.m., Marcus received a calendar invitation from the company's general counsel.
The subject line read: *Emergency Financial Review — Mandatory Attendance.*
The meeting was scheduled for noon in the glass boardroom. Richard, Eleanor, James, and two external forensic specialists would attend. Marcus was included because he had identified the irregularities, but the invitation also stated that his employment status remained under review.
He read that line twice.
Even after everything he had uncovered, the company had not officially reinstated him.
He slipped his phone into his pocket and walked toward the boardroom.
Richard was already there, standing beside the windows with his hands clasped behind his back. The morning's composure had given way to visible fatigue. He had loosened his tie, and the skin beneath his eyes looked gray despite the bright daylight.
“You came,” Richard said.
“I was invited.””
“I wanted you here.””
Marcus pulled out a chair.
“Then I appreciate the invitation.””
Richard sat opposite him.
“I owe you an apology.””
Marcus looked up.
“For what?””
“For allowing Vanessa to dismiss you in front of the department before I understood what you had discovered.””
“You didn't know.””
“I should have asked.””
Marcus considered that.
“An apology is a start. But I need my employment record corrected if the investigation confirms I did nothing wrong.””
“It will be.””
“And I need the evidence protected. I don't want someone changing the report later and claiming I altered it.””
Richard nodded.
“You have my word.””
Marcus held his gaze.
“With respect, Mr. Carter, your account was used to authorize the session. Your word isn't enough for this investigation.””
For a moment, Richard looked taken aback.
Then he gave a short, humorless laugh.
“Fair enough.””
The general counsel, Patricia Greene, entered with two forensic specialists carrying laptops and sealed evidence envelopes. Patricia was a Black woman in her early fifties whose calm manner rarely changed, even when conversations became confrontational.
She placed a folder on the table.
“We have preserved the transaction records, the email headers, and the available access logs. We are now tracing the destination accounts.””
Eleanor took her seat.
“Have we established where the money was supposed to go?””
“Partially,” Patricia replied.
“The six transfer instructions were directed to three intermediary accounts. Those accounts were created recently and have limited transaction histories.””
Richard frowned.
“Who owns them?””
“The registered entities have nominee directors. We're working with the bank's compliance department to establish beneficial ownership.””
Marcus leaned forward.
“Were the accounts connected to the acquisition ledger?””
Patricia looked at him.
“Yes. One of the transfer descriptions referenced a vendor deposit for the Westbridge acquisition.””
Marcus felt a sudden chill.
“That's impossible.””
Richard turned toward him.
“Why?””
“Because the Westbridge acquisition was postponed last week. The deposit was never authorized.””
Patricia opened another folder.
“According to the documents we have, an approval was recorded on Friday afternoon.””
“By whom?”” Eleanor asked.
“An executive authorization code. The name displayed in the summary is Richard Carter.””
Richard went still.
“I never approved a deposit.””
Patricia slid the document across the table.
“Then we have a second issue. Either your authorization was used without your consent, or the underlying records were manipulated.””
Marcus examined the page.
The formatting looked legitimate. The reference number matched the acquisition system. But something about the date caught his attention.
“May I see the original transaction record?””
Patricia passed him a digital copy.
Marcus compared the reference with his notes from the previous night.
“This isn't the original deposit instruction,” he said.
“What do you mean?”” Richard asked.
“The acquisition system generated this reference for a preliminary estimate. It wasn't a payment authorization. The reference was copied into the transfer paperwork to make the transaction appear connected to Westbridge.””
Eleanor leaned closer.
“Can you prove that?””
“Yes. The reference prefix identifies the document type. An estimate begins with WBE-P. A payment authorization begins with WBE-A.””
He enlarged the line.
“This one begins with WBE-P.””
Patricia immediately wrote down the distinction.
“That's important. We'll have the acquisition team certify it.””
Richard stared at the page.
“Someone used a legitimate internal reference to disguise an unauthorized transfer.””
“That's what it appears to show,” Marcus said.
Eleanor tapped her pen against the table.
“Do we have any evidence connecting Peter Lawson to the intermediary accounts?””
Patricia hesitated.
“We found a payment to a consulting company associated with a former finance employee. The payment was made four months ago, and the company shares an address with one of the intermediary entities.””
“Who was the employee?”” Richard asked.
Patricia turned a page.
“Daniel Brooks.””
Eleanor's pen stopped moving.
Marcus looked at her.
“Is that someone you know?””
Eleanor's face remained composed, but her fingers tightened around the pen.
“Daniel is my nephew. He worked in finance before leaving the company two years ago.””
The room fell silent.
Richard slowly leaned back.
“Eleanor, did you know he had a consulting company?””
“I knew he had started a business. I did not know it had received payments from this company.””
Patricia spoke carefully.
“The payment itself may have been legitimate. We have not established a connection between Daniel's company and the attempted transfer.””
Eleanor nodded.
“Then don't imply one. Investigate it.””
“I intend to.””
For the first time, Marcus understood how wide the investigation might become. The attempted transfer had already touched the CEO's credentials, Vanessa's private email, Peter's administrative account, and a company connected to the audit committee chair's family.
Any one of those connections could be innocent. Together, they created a maze in which every person had a reason to suspect someone else.
The forensic specialist at the far end of the table cleared his throat.
“We've completed a preliminary review of the email metadata.””
Richard looked up.
“What did you find?””
“The message was sent from Vanessa Carter's private account, but the login session originated from a network address registered to the company's executive floor.””
Vanessa was not in the meeting, but her name seemed to occupy the entire room.
Patricia asked, “Can you establish which device was used?””
“Not conclusively. The email provider's records show that the account had an active session on two devices at the time. One was a personal phone. The other was a desktop browser session.””
“Can you identify the desktop?”” Marcus asked.
“We're still working on that.””
Richard rubbed his chin.
“Could someone have sent the email without Vanessa's knowledge?””
“Yes,” the specialist replied.
“If they had access to an authenticated session or had compromised the account.””
Eleanor looked at Patricia.
“Then we need the provider's records and a formal forensic examination of the relevant devices.””
Patricia nodded.
“We'll request them through the appropriate legal process.””
At 12:26 p.m., James returned with an updated access report.
“We've identified another event,” he said.
“The dormant credential wasn't simply reactivated. Its permissions were expanded six minutes before the transfer instructions were created.””
Richard's eyes narrowed.
“Who approved the change?””
“The audit trail attributes it to a system administrator account. However, the request originated from a maintenance token normally used by the finance reconciliation service.””
Marcus sat forward.
“That service doesn't have permission to modify executive credentials.””
“Correct,” James replied.
“Then either someone exploited the service or used it as cover.””
James nodded.
“That's what we're investigating.””
Richard looked at Marcus.
“Can the system be trusted?””
“Not until the maintenance token is examined. We should isolate the affected service, preserve its current state, and verify the authorization rules from a known-good backup.””
The forensic specialist nodded approvingly.
“We've already started that process.””
Marcus exhaled slowly.
For the first time that day, someone had taken his technical judgment seriously without making him defend his right to speak.
Then Patricia's phone rang.
She listened for several seconds, asking two short questions before ending the call.
“What is it?”” Eleanor asked.
Patricia looked at the folder in front of her.
“The bank has placed a temporary hold on the intermediary accounts. But the preliminary transaction history shows that a separate payment of eight hundred thousand dollars was made from one of those accounts four months ago.””
Richard's face tightened.
“Where did it go?””
Patricia looked directly at him.
“The payment was made to a private investment company that has received funds from Carter Meridian Group in the past.””
“Which company?””
She turned the laptop around.
The name appeared on the screen.
Marcus recognized it immediately.
It was the company that had been hired to evaluate the Westbridge acquisition.
The same acquisition whose postponed deposit had been used to disguise the attempted transfer.
Eleanor stood.
“Freeze every related payment pending review.””
Patricia was already making the call.
Richard looked at Marcus.
“Can you trace the earlier payment through the ledgers?””
“Yes,” Marcus said.
“But I'll need the original transaction files, not the summary reports.””
“You'll have them.””
Marcus opened his notebook and began writing down the account references.
Then his phone vibrated again.
This time, the message came from an unknown number.
*You stopped the wrong transfer. Check the Westbridge reserve account before they move the rest.*
Marcus read it twice.
He showed the screen to Richard.
Richard's face hardened.
“Who sent this?””
“I don't know.””
“Can the number be traced?””
“Not from the message alone.””
Eleanor reached for the phone, then stopped herself.
“Preserve it. Don't reply.””
Marcus nodded.
He opened the financial system on the boardroom laptop and searched for the Westbridge reserve account.
The account appeared.
Its balance was significantly lower than the last verified report.
Marcus clicked into the transaction history.
One transfer was pending.
A second was marked as completed.
A third had been scheduled for later that afternoon.
He felt his stomach tighten.
“Mr. Carter,” he said, turning the screen toward him.
“There are more transactions.””
Richard leaned over the laptop.
“How much?””
Marcus pointed at the total.
The room fell silent.
The original attempted transfer had been four-point-eight million dollars.
The additional transactions amounted to nearly twice that amount.
And the name attached to the latest authorization was not Vanessa Carter's.
May you like
It was Richard Carter's.
Again.
