Chapter 8 - MELISSA’S PASSWORD
The board hired an independent forensic firm.
Good.
I did not want my own employees “clearing” me.
The first discovery made everything worse.
My executive assistant, Melissa Grant, had accessed my password manager six times during the period BrightPath payments were approved.
Melissa had worked for me nine years.
She remembered Rachel’s pregnancy.
She sent flowers to the hospital when Lily was born.
She had held Lily at Rachel’s funeral.
I trusted her almost reflexively.
Claire asked whether Melissa ever managed personal banking.
“Rarely.”
“Trust matters?”
“No.”
Melissa came to the interview with her own lawyer.
She looked exhausted.
“Daniel, I didn’t steal from Lily.”
“I didn’t say you did.”
“You thought it.”
I had.
She admitted giving Vanessa emergency access to my password manager.
“When?”
“Last year.”
“Why?”
“You asked me to.”
I stared.
“No.”
Melissa produced an email.
From me.
Please give Vanessa emergency household access. I’m tired of getting calls every time a bill needs authentication.
Same style as me.
Same account.
Home IP.
I had never written it.
Melissa had obeyed what looked like my direct instruction.
“Did you call me?”
“No.”
“Why?”
“You were in Singapore. It sounded exactly like you.”
That hurt.
Not because she failed.
Because the impersonation worked by using my known impatience.
I did hate getting authentication calls while traveling.
Vanessa had written a lie that sounded true because she understood my flaws.
Then Melissa revealed something else.
“After I gave her access, she asked about Lily’s trust.”
“What did you tell her?”
“Nothing confidential.”
“What did she ask?”
“How distributions worked.”
“Why?”
“She said she wanted to understand college planning.”
Lily was three.
College planning.
Melissa laughed bitterly.
“I should’ve known.”
“No.”
She looked at me.
“You would’ve known.”
Would I?
I had not known anything happening in my own living room.
The board’s forensic team examined Melissa’s access history.
She had not approved BrightPath payments.
But one payment contained a note from her account.
Confirmed per Daniel.
Melissa denied writing it.
Her work laptop had been in the office.
Vanessa did not have physical access.
That opened another branch.
Someone inside Carter Equity had assisted.
The IP came from the company network.
User:
MG.
Melissa.
Either she was lying or her credentials were compromised.
The Information Twist came when Melissa remembered a request from our family-office controller, Marcus Reed.
“Marcus asked me for my token one night.”
“Why?”
“He said the Westbridge integration was failing.”
“Did you give it?”
“For five minutes.”
“When?”
She checked.
The date matched the first BrightPath payment.
Marcus had worked for Carter Equity for twelve years.
He ran internal controls.
He was the person I expected to detect unauthorized transfers.
Now he had touched the authentication chain at the exact moment the fraud began.
I wanted to call him immediately.
Claire stopped me.
“Not yet.”
For once, I listened.
May you like
The person protecting our controls had just become the most dangerous unanswered question in the room.
📖 Melissa’s suspicious access turned out to follow forged instructions, but the first BrightPath payment traced to the very controller Daniel trusted to protect his financial systems. 👇
