Chapter 5 - Gathering the Evidence

I sat frozen in Marcus’s office, the hum of the air conditioner sounding like a distant roar in my ears.
“Claire?” Marcus asked, his expression a mix of professional sternness and personal concern. “Are you alright? You look pale.”
I took a deep, steadying breath, forcing my racing thoughts to organize themselves. My brain surgery had removed a tumor, but it hadn’t removed my wits. If anything, the fog that had clouded my focus for the past two years—likely caused by the slow-growing tumor—was completely gone. I was sharper than I had ever been.
“Marcus,” I said, looking him dead in the eye. “I did not approve those invoices.”
“I believe you, Claire, but the digital audit trail points directly to your IP address and login token.”
“Give me twenty-four hours,” I said firmly. “I can prove that I was incapacitated at the time several of these batch approvals were submitted, and I can trace the external IP addresses where the logins actually originated.”
Marcus studied me for a long moment, then nodded slowly. “Alright, Claire. I’ll hold off on escalating this to HR and legal for twenty-four hours. But if you can't clear your name by tomorrow morning, my hands are tied. This is corporate fraud. It’s a prison-level offense.”
“Understood. Thank you, Marcus.”
I hurried back to my desk, my heart hammering against my ribs. I pulled up our internal server logs, database access timestamps, and VPN connection histories.
For the next eight hours, I didn't eat, I didn't drink, and I barely breathed. I cross-referenced every single fraudulent transaction timestamp with my medical records from the hospital.
The results were damning.
On three separate occasions—including the exact morning of my brain surgery while I was lying in the pre-op room—batch approvals totaling fifteen thousand dollars were pushed through my account.
Even more incriminating: the IP address logging into my corporate account during those exact timestamps didn’t belong to my apartment's Wi-Fi network. It belonged to a residential IP address in a suburban neighborhood twenty miles away.
Madison’s house.
She had logged into my account from her home laptop while I was being prepped for brain surgery. She thought she was being clever, hiding her embezzlement under the cover of my medical emergency, assuming nobody would audit my department while I was recovering.
She didn't count on the internal audit catching the financial discrepancy before I even returned to work.
I exported all the logs, matched the IP addresses with internet service provider routing records that I legally subpoenaed through our IT security department’s emergency protocol, and compiled a comprehensive forensic dossier.
May you like
By 5:00 p.m., I had an airtight case proving that Madison—along with her husband, who worked in Pinnacle Logistics’ accounting department—had orchestrated an internal fraud scheme and framed me for it.
I saved the file onto a secure encrypted flash drive, packed up my things, and walked out of the office with a cold, iron resolve.