Rachel called me before nine the next morning. I was already at my desk, reviewing the recovered authorization history, when her name appeared on the screen. I answered immediately.
“The backup logs have arrived,” she said. “Denise has reviewed the first set. We need you at the office this morning.”
“Have they identified who changed the settings?”
“They have identified the management account used to change them. That is an important distinction. We still need to establish who was operating the system.”
I closed my laptop and reached for my coat.
By the time I arrived, Denise had arranged the recovered records across the conference table. Rachel stood beside a large monitor displaying a timeline of system activity. Several entries were highlighted, including changes made to the authorization settings and approvals recorded shortly afterward.
Denise explained that the original system had retained only partial logs, but a backup copy preserved information that was no longer visible in the live records. The recovered data showed that my former profile had remained active after I requested its removal. It also showed that the approval settings had been modified from a management account associated with Dad's office.
“The changes occurred shortly before several disputed invoices were processed,” Denise said. “The timing is significant, but it does not establish who made them or whether every transaction was connected.”
I studied the dates. They matched periods when I had been working elsewhere, sometimes in another city. I could not have approved the invoices in person, but that alone did not prove that I had not authorized them remotely. The records needed to establish more than my location.
Rachel opened the emails I had supplied. My first written request to deactivate the profile had been sent months before the disputed invoices appeared. A second request followed after I learned that the company had missed several loan payments. Dad had acknowledged the messages but had never confirmed that the credentials were disabled.
I remembered the conversations. Each time I asked, he said the office would handle it. I had trusted him because he was my father and because the access was supposed to be an administrative detail.
Denise pointed to a particular entry.
“This is the first change we can connect directly to the disputed approval process. The account altered the settings to permit approvals under your profile without the usual secondary verification.”
I looked at Rachel.
“Could someone have done that accidentally?”
“It is possible to make mistakes in a system,” she said. “But we need to understand why the setting was changed, who requested it, and whether the same configuration was used for legitimate transactions.”
Denise added that the changes had not affected every approval. Some transactions continued to require secondary verification, while the disputed invoices passed through the altered process. That distinction made the pattern more concerning, though the investigation still needed to determine who was responsible.
I leaned back and stared at the ceiling for a moment.
For years, Dad had told me that the company needed money because business was difficult. I had responded by lending him money, covering expenses, and helping the family maintain a lifestyle that did not reflect the company's financial position. If the disputed invoices were part of an intentional scheme, then my willingness to trust him had become one of the conditions that allowed it to continue.
“Has he been told about the recovered logs?” I asked.
“Not yet,” Rachel replied. “We are preserving the evidence and allowing the relevant parties to respond through the appropriate process.”
I nodded. I did not want Dad to hear about the findings from me. If he had a legitimate explanation, he could provide it with supporting records. If he did not, I would not help him prepare one.
We spent the next hour reviewing the transactions. The accountant identified several invoices that had been approved through the altered settings. One was connected to the $185,000 transfer to Sterling Advisory. Another involved a payment that had ultimately reached an account associated with Madison.
The latter transfer was for $62,000, described as consulting fees. There was still no evidence of services performed.
I remembered Madison's reaction at the family meeting. She had insisted that she knew nothing about the payment. Her response might have been genuine. It might also have been an attempt to distance herself from money she knew she had received.
I wanted to believe the first possibility, but belief was no substitute for evidence.
“Can we trace the funds after they reached her account?” I asked.
“Some of the money was transferred onward,” Denise said. “We have requested the relevant statements. We also need to determine whether the payments were described to her as compensation, a gift, or something else.”
Rachel closed the file.
“We should not confront her until we have a clearer picture. If she has relevant information, it needs to be obtained without pressure or assumptions.”
I agreed, although the thought of questioning my sister through lawyers made me feel as if the family had crossed a boundary from which it could never return.
At noon, Rachel received a call from the company. Dad had requested a meeting to discuss the loan and the disputed records. He wanted me to attend in person, without the accountant, and insisted that the discussion remain private.
Rachel declined the request for an informal meeting. She offered to arrange a formal discussion with the relevant advisers present.
Dad's response arrived shortly afterward.
He accused me of hiding behind lawyers and refusing to speak to him like a daughter.
I read the message without replying.
That afternoon, I returned to my apartment and tried to work. I reviewed a portfolio report, answered two business emails, and joined a video conference with my team. For an hour, I managed to focus on something unrelated to Bennett Construction.
Then my phone rang.
Madison.
I let it ring once before answering.
“Emily, I need to talk to you.”
“About what?”
“About the money.”
I stood beside the kitchen window.
“Which money?”
“The payment from the company. The sixty-two thousand dollars.”
I said nothing.
She took a breath. “Dad told me it was compensation for helping with a business project. He said the company needed someone to handle some planning and family arrangements, and that I would be paid for my time.”
“What work did you do?”
“I helped Mom organize some events. I spoke to people. I handled a few things Dad asked me to do.”
“Did you provide consulting services to Bennett Construction?”
“Not in the way those invoices make it sound.”
I closed my eyes.
“Did you know the payment was recorded as consulting fees?”
“No. Dad told me it was an allowance for the work I'd done.”
“Did you receive an invoice or sign any documents?”
“I signed a receipt. It said the money was compensation.”
“Do you still have it?”
“Yes, I think so.”
“Please preserve it. Don't alter it, delete it, or send it to anyone before you speak with Rachel.”
Madison's voice became defensive.
“You sound as if you think I stole something.”
“I am asking you to preserve a document connected to a payment that is under investigation.”
“You know I didn't steal anything.”
“I don't know what happened yet. That's why the records matter.”
She was silent for several seconds.
Then she said, “Dad told me you were helping with the company's finances. He said you had approved the payments.”
My grip tightened around the phone.
“I did not approve that payment.”
“He said the money had been authorized.”
“By whom?”
“I don't know. I never asked.”
The answer was painfully familiar. No one had asked where the money came from, whether the company could afford it, or why the payment had been recorded as consulting fees. They had accepted the explanation that money was available because someone had told them it was.
“Madison, did Dad ever ask you to return any of the money to another account?”
“No.”
“Did you transfer any of it to Victor or Sterling Advisory?”
“No. I used some of it for personal expenses and kept the rest.”
“Then preserve the records showing what happened.”
She exhaled shakily.
“Are you going to have me arrested?”
“I am not making decisions about criminal charges. The people investigating the transactions will determine what the evidence shows.”
“I'm your sister.”
“I know.”
“Then why can't you just help me?”
The question hurt more than I expected. It was not because she was asking for money. It was because she still seemed to believe that being my sister should protect her from the consequences of any question involving our family.
“I am helping you by telling you not to destroy or change anything,” I said. “If you received the money in good faith, your records may help establish that. But I cannot tell the investigators something is true just because you want me to believe it.”
She began crying quietly.
“I didn't know Dad was doing anything wrong.”
I could not tell whether she was frightened, ashamed, or genuinely surprised. I wanted to reach through the phone and comfort her, but I also knew that doing so could turn the conversation into another attempt to manage her feelings instead of addressing the facts.
“Talk to Rachel,” I said. “She can explain how to provide the documents.”
Madison ended the call without answering.
For the rest of the afternoon, I found it difficult to concentrate. I remembered my sister as a little girl, sitting beside me on the kitchen floor while we built towers out of wooden blocks. She had followed me around the house, asking me to help with her school projects and telling me secrets she did not want our parents to hear.
I had wanted to protect that version of her. Even after she became an adult, I had continued treating her mistakes as temporary lapses that I could repair with money.
But she was no longer a child, and neither was I.
The following morning, Rachel confirmed that Madison had agreed to provide the receipt and relevant bank records. She had also requested independent legal advice, which Rachel encouraged her to obtain. That was appropriate. Madison needed someone whose responsibility was to protect her interests, not mine.
Meanwhile, Victor's attorney had contacted the forensic accountant. Victor was willing to provide additional documentation relating to Sterling Advisory, but he disputed any suggestion that his firm had knowingly participated in improper transactions.
Denise examined the documents and found that several invoices had been generated from templates stored on Bennett Construction's internal system. The templates contained descriptions of consulting services, but the supporting files were incomplete.
The discovery narrowed the investigation without resolving it. Someone had created or modified the invoices, someone had approved the payments, and someone had benefited from the transfers. The question was how those actions were connected.
Late that afternoon, Dad sent me a message.
“You have taken this too far. If you want the family to recover, stop cooperating with people who are trying to destroy us.”
I read it once, then forwarded it to Rachel.
She replied that I should preserve the message and avoid discussing the investigation with him directly.
I followed her advice.
That evening, I sat on the balcony outside my apartment with a blanket over my knees. Traffic moved through the streets below, and the air carried the smell of rain. I thought about the life I had built and the family I had tried so hard to support.
I had believed that financial security would allow me to protect the people I loved from hardship. I had not understood that protecting someone from every consequence could also protect them from the need to change.
My phone rang again. This time, it was Rachel.
“The company has submitted a preliminary explanation of the authorization changes,” she said. “They claim the settings were modified to accommodate an administrative transition.”
“Does the explanation identify who requested the change?”
“No. It also doesn't explain why your credentials remained active after your written requests to deactivate them.”
I looked toward the darkening sky.
“So we still don't know who did it.”
“Not conclusively. But the recovered logs have narrowed the period and established that the changes were made through a management account. We are now requesting the related internal emails and system-administrator communications.”
“Will Dad know what we've found?”
“He will receive the relevant questions through the formal process. He will have an opportunity to respond.”
I thanked her and ended the call.
For the first time since the investigation began, I understood that the truth might not arrive as a single dramatic revelation. It might emerge through a series of small, undeniable facts: an email, an access log, a receipt, a transfer that could not be explained.
Each fact would narrow the space available for excuses.
And somewhere in those records was the answer to a question that had followed me since the night Dad threw me out.
Had I simply been a convenient source of money for a family that had grown careless with its spending, or had someone deliberately used my trust to conceal a much larger financial problem?
I did not know yet.
But I was no longer willing to stop looking.
Click here to continue reading: PART 7: My Mother Begged Me to Save the Family Home Before the Records Revealed What She Had Been Told
The Night My Father Threw Me Out, My Sister Asked for the One Thing I Could No Longer Give
Part 6 of 12
