Chapter 18 - The Accountant on Trial.
For the first time all morning, Gabriel's expression truly changed.
It lasted less than a second.
Victor saw it anyway.
"That got your attention."
"Careful."
"You are protecting the wrong person."
Inside the van, Norah went completely still.
Emily turned toward her.
Owen stared at the speakers.
Victor continued.
"Ask her where the first transfer originated."
Gabriel's voice remained calm.
"I know where it originated."
"Kane Municipal Recovery."
"Yes."
"And who corrected the vendor routing table six weeks ago?"
Norah's stomach tightened.
She had.
The task had been routine.
A batch of outdated vendor bank records needed updating after an audit.
Victor kept speaking.
"Norah uploaded the routing architecture Meridian used."
"She had access to every legitimate account touched by the test."
"She discovered the missing money because she created the path."
Emily looked at Norah.
"Did you?"
Norah stared at her.
"I updated bank information."
"From whose file?"
Norah's mind raced backward six weeks.
The vendor correction list had come from corporate compliance.
Signed by Elena Hart.
But transmitted through an automated internal mailbox.
"Elena," Norah whispered.
Then she stopped.
The email had included a verification attachment.
A spreadsheet.
She had opened it.
She remembered Excel freezing for two seconds.
Nothing else.
Norah grabbed her laptop.
"They compromised my machine six weeks ago."
Owen leaned closer.
"Can you prove that?"
"Maybe."
She pulled the laptop's local event history.
Most logs had been cleaned automatically.
But an obscure temporary directory still contained a timestamp from the day of the vendor update.
A script had executed under her credentials.
It created a hidden service called MER-417.
Norah's throat tightened.
"There."
Emily read the log.
"Remote transaction proxy."
"They used my computer as the trusted endpoint."
Owen swore.
"So Victor's technically telling the truth."
Norah looked at him.
"He is using true facts to build a false conclusion."
Emily's face changed.
"That's how Creed works."
Norah looked toward the audio feed.
"And how Victor learned to work."
In the conference room, Gabriel slowly closed the forged ledger folder.
"If Norah stole the money, why warn me?"
Victor shrugged.
"To control the investigation."
"Why lead us to Rivergate?"
"To recover evidence connecting her family to Meridian."
"Why fake her sister's death?"
Victor's expression tightened.
"I didn't."
"Why shoot at us?"
"I didn't."
"Convenient."
Victor leaned forward.
"You know what is convenient?"
"A twenty-five-year-old accountant shows up less than a year ago."
"She gains access to every clean business you own."
"Three million disappears."
"Then she tells you the thief is inside your organization."
"And suddenly you distrust Marcus, Owen, me, Elena, and your own blood."
Gabriel's face remained still.
Victor's voice lowered.
"She has done more damage to your organization in twelve hours than the FBI managed in twelve years."
Norah heard the sentence through the van speakers.
It hurt because it was designed to.
She had watched Gabriel suspect everyone around him.
She had helped him do it.
Emily touched her arm.
"Don't listen."
Norah shook her head.
"I need to."
Victor kept going.
"Ask yourself one question, Gabriel."
"Why was she sleeping against you when the attackers came?"
Gabriel's eyes went cold.
"Choose your next words very carefully."
Victor smiled.
"Because trust is easiest to steal when someone thinks it was their idea."
Norah looked away from the speaker.
Emily's voice was soft.
"He's trying to make you leave."
"Maybe I should."
"No."
"What if Gabriel believes him?"
Emily stared at her.
"Then Gabriel is an idiot."
Owen made a cautious noise.
"Maybe don't say that where his microphone can hear it."
Norah almost laughed.
Then she noticed something on Victor's forged documents in the live camera feed.
A footer code.
Every page showed KMR-0900-S.
Kane Municipal Recovery.
Nine o'clock.
Settlement.
Her mind snapped back to the bond transfer.
"Victor isn't trying to convince Gabriel I'm guilty."
Emily looked at her.
"What?"
"He's keeping Gabriel in that room."
Norah checked the time.
8:31 a.m.
"Thirty minutes until settlement."
Owen looked toward the tower.
"Then who's running the transfer?"
Norah studied the internal architecture.
Victor's CFO credentials were active in the conference room.
That meant someone else had settlement authority.
She searched executive delegations.
One emergency authorization had been created at 6:02 a.m.
It granted full temporary CFO authority to Elena Hart.
Norah looked at Emily.
"Victor isn't the operator."
"Elena is."
Emily shook her head.
"Elena works for Creed."
"Maybe."
Norah opened the metadata.
The emergency authorization had been approved using Gabriel's stolen physical token.
The one taken at Northline.
"Elena is the operator," Norah said.
"But Victor gave her the door."
She connected the final piece.
"They're not enemies."
"They're partners."
A new alert appeared.
Kane Holdings had just initiated an emergency transfer authorization for $320 million.
Norah stared at the figure.
The dry run had ended.
Norah opened a second screen and compared the active transfer to the three-million-dollar dry run.
The structure was almost identical, but the live version added one dangerous improvement.
Instead of routing all payments through Kane-controlled vendors, it mixed legitimate outside contractors into the chain.
That would make an emergency freeze politically difficult.
Stopping every payment could halt real infrastructure work and create immediate public damage.
Victor had designed the fraud so that preventing theft would look like sabotage.
"Smart," Owen said grimly.
Norah looked at him.
"Do not compliment the criminal architecture."
"Professional observation."
Emily leaned toward the screen.
"Can you separate the fake vendors from the real ones?"
"Eventually."
"We do not have eventually."
Norah knew.
She searched for the routing token they had recovered earlier.
The same token appeared beneath dozens of vendor profiles, hidden in metadata rather than displayed account fields.
That was their fingerprint.
"There."
Emily leaned closer.
"Can you flag all of them?"
"Yes, but my account does not have authority to stop settlement."
Owen said,
"Gabriel does."
Norah looked at the audio feed.
Gabriel was still in the room with Victor.
If she asked for Gabriel's master credentials too early, Victor would know they had seen through the plan.
They needed more proof first.
Norah searched the emergency authorization that promoted Elena into temporary CFO authority.
The request metadata showed it was created from an internal computer at Kane Tower.
The device identifier belonged to Victor's office.
Not enough.
Someone could spoof it.
She checked keyboard language settings.
English US.
Time zone Eastern.
Still generic.
Then she found a hardware certificate tied to Victor's personal security token.
The certificate had signed the delegation before his physical token was supposedly locked in the CFO safe.
"He authorized Elena himself," Norah said.
Emily looked at her.
"Can he claim it was cloned?"
"He will."
"And?"
"The token requires fingerprint confirmation."
Owen gave a humorless laugh.
"We have already seen fingerprints cloned tonight."
Norah nodded.
Every proof was contaminated by methods Meridian had demonstrated deliberately.
That might have been part of the design too.
By showing they could fake biometrics, voices, images, and credentials, they gave Victor a defense against any digital evidence later used against him.
Norah sat back.
"That is why they showed us every trick."
Emily frowned.
"What?"
"They were not just confusing us. They were establishing reasonable doubt in advance."
If Victor's token authorized a theft, he could say it was cloned like Owen's.
If security footage showed Elena, she could say it was manipulated like Emily's.
If an audio recording captured a confession, they could point to voice cloning.
Meridian had spent the night poisoning the concept of evidence itself.
Emily stared at the screen.
"Then how do we prove anything?"
Norah thought of her father using microfilm.
Physical media.
Independent copies.
Multiple witnesses.
A pattern stronger than any one piece.
"We don't prove it with one perfect item," she said.
"We prove it with a hundred imperfect items that all point the same direction."
She began exporting logs to three offline devices simultaneously.
One copy went to Emily.
One to Owen.
One into a sealed drive Norah placed in her own pocket.
Then the settlement dashboard flashed.
A live transfer request had moved from queue to execution.
Norah looked at the amount.
Hundreds of millions.
May you like
This was no longer preparation.
The real theft had begun.
