Chapter 2: Follow the Transfers

I had never heard Daniel mention it.
The name sat on my screen while the city outside the hotel window slowly turned from black to gray. I wrote it at the top of a fresh page, then added three columns beneath it: date, amount, and what I could actually prove.
Not what I suspected. Not what I feared.
What I could prove.
Rachel read over my shoulder.
“That distinction is going to matter,” she said.
“It always matters.”
She had taken off her coat but kept her phone beside her coffee, ready to make another call. Neither of us had slept. The hotel had sent up toast and eggs, and the warmth of the room had finally reached my fingers. I ate because Rachel put the plate in front of me and waited until I took a bite.
Then I went back to the records.
The emergency account had been meant for the kind of ordinary catastrophe people dreaded but planned for anyway: a medical bill, a roof repair, a stretch without income. It had not been a pile of money we never touched. We paid some household expenses from it, and we moved funds between accounts when timing made that convenient.
So a falling balance alone didn’t tell me anything.
I opened the oldest statement I had downloaded and began rebuilding the account month by month. Mortgage payments went on one line. Property taxes, utilities, insurance, and the plumbing repair from the previous spring went on another. Transfers to our checking account were not automatically suspicious; some had covered bills I could match to receipts.
I marked each item green when I could support it with a statement, invoice, or record I already had. Gray meant I could identify the transaction but not its purpose. Red meant I didn’t yet know enough to classify it.
The red lines accumulated.
Not all at once. That was the unsettling part. The withdrawals weren’t a single dramatic leap from a full account to an empty one. They appeared in different months and different amounts, separated by routine expenses and transfers that had legitimate explanations.
I understood why a person might miss them. I understood how a balance could shrink by degrees while every individual transaction looked small enough to postpone questioning.
I also understood that this was exactly why I had questioned Daniel three months earlier.
“He told me it was probably a timing issue,” I said.
Rachel sat across from me. “And now?”
“Now I know that answer doesn’t match every line.”
I didn’t say the money had been stolen. I didn’t know that. I didn’t know who had received it, what it paid for, or who had requested the transfers. An unexplained entry was a question, not a verdict.
I entered the three NORTHLINE ADMIN SERVICES payments into the ledger. They were close enough in description to belong together, but the amounts differed. I compared their dates with the rest of the account history.
The first came after a transfer from our checking account. The second followed a month in which Daniel had asked me to leave the “cash planning” to him. The third was dated several weeks after I challenged him about the withdrawals.
The pattern didn’t prove that one event caused another. It did make the timing worth preserving.
“Can we find out who Northline is?” I asked.
“We can ask the bank for the payment details and records we’re entitled to request,” Rachel said. “We shouldn’t guess from the statement label.”
She helped me prepare a request for the underlying transaction information. We listed the dates and amounts and asked for the available transfer confirmations, recipient details, and authorization records. Rachel made it clear that making a request wasn’t the same as getting a complete answer. It also didn’t mean we could reach into Daniel’s private accounts.
“We’re not going to log into anything that isn’t yours or jointly accessible,” she said. “And we’re not going to move, hide, or dispose of disputed property.”
“I don’t want to.”
“I know. I want that boundary written down before the pressure starts.”
She added the note to her file.
For the next hour, I checked what I could reach without crossing that line: statements for the joint accounts, receipts in the household folder we both used, and copies of documents I had kept from our shared tax preparation. I didn’t open Daniel’s personal email or try passwords I knew from years of marriage. Being married did not make every account mine to inspect.
The distinction felt almost absurd after he’d left me in a storm without my coat. But anger didn’t turn a boundary into evidence.
A folder from the previous tax year contained a printout Daniel had left with our joint paperwork. It was not a secret account record or a private file. It was a business document he had included among the materials he wanted gathered for taxes, then never collected.
At the top was a name I recognized from the transactions.
NORTHLINE ADMIN SERVICES LLC.
I turned the page. The printout described administrative work for small businesses. It gave an office address and a list of managers. Daniel’s name appeared under one of the management headings.
I read it twice.
“That connects him to the business,” I said. “It doesn’t tell us whether the payments went there, or why.”
Rachel leaned in but didn’t take the paper from me.
“Good. Keep saying exactly that.”
I scanned the document and saved a copy in the evidence folder. Then I wrote down where it had come from and when I had found it. I left the original in its folder.
Northline was no longer only a label I couldn’t place. There was a business bearing the same name in a file Daniel had used for our shared taxes, and the document connected him to its management.
That was a lead. Not proof of what the payments were for.
I went back to the three entries and sorted the transactions by date. Once they were lined up, I saw that one had been followed by another transfer that didn’t say Northline at all. It had a reference number and an abbreviated processing description. I had skipped past it earlier because it didn’t match the words I was searching for.
I opened the details.
The record identified a payment channel and listed a destination account title that included NORTHLINE ADMIN SERVICES. It did not show the final use of the money. It did not tell me who had typed the instruction or whether the company had done the work its description suggested.
But the money had passed through a channel bearing Northline’s name.
I added the entry to the same column as the three payments and linked it to the scanned business document—not as a conclusion, but as a reason to keep asking for records.
“Is this enough to show Daniel controlled the payments?” Rachel asked.
“Enough to show he was connected to the company and that some of our funds were routed through a channel with its name. Not enough to say where the funds ended up.”
She nodded.
“Then that’s what we say.”
I added a note beside the entry: Recipient route indicated; ultimate destination and purpose unconfirmed.
The ledger had changed shape. The routine household expenses still formed one picture. The unexplained transactions formed another, smaller and more troubling one. I could see how the account had been reduced over time, but I could not yet account for the full $186,000.
My throat tightened when I looked at the total again.
Rachel set her coffee down.
“Claire, you can stop for a while.”
“I’m not finished.”
“You don’t have to finish today.”
“I know.” I rubbed my thumb over the edge of the paper. “But I need to know what we have before he tells someone else what it means.”
She didn’t argue. She just stayed with me while I checked the dates again.
There it was: one of the Northline-linked transactions had been processed shortly after the night I confronted Daniel about the withdrawals. A few days earlier, the account activity had been ordinary enough that I could match most of it. Afterward, another unexplained payment appeared.
The dates did not prove Daniel had accelerated anything in response to my questions. They did show the activity continued after the confrontation.
I wrote both facts down separately.
The first was a timeline.
The second was only a possibility.
By late morning, Rachel had made another call about the records request. She told me the process could take time and that the documents might still leave gaps. I understood. A partial trail wasn’t a failure. It was a partial trail.
I saved my working ledger, checked that the original statements remained unchanged, and made another backup. The list of questions in my notes had grown:
Who initiated the transactions?
What services, if any, were performed?
Where did the money go after the Northline channel?
What records showed my authorization?
I paused over the last question, then added a line beneath it.
Do not assume a name on a form means consent.
The bank’s response did not arrive in that room, and I didn’t pretend I could conjure it by refreshing my inbox. The day had brought one thing I could stand on: a route connecting some of the unexplained money to a business Daniel managed.
It had also brought one piece of paperwork I had not expected to see.
While sorting the tax folder, I found a payment instruction attached to the Northline materials. The copy was faint, and the page was folded through the center. I flattened it carefully beside the ledger.
The date matched one of the transactions.
Near the bottom, the form listed an authorization under my name.
I stared at the signature line.
I knew my own signature. I had signed thousands of checks, tax forms, and work papers. I knew the quick slant of it, the way the last letter ended, the small mark I made when I was hurrying.
This one looked enough like mine to make my hands go cold again.
But I did not recognize signing it.
May you like
I placed the page beside the three NORTHLINE entries, then looked at Rachel.
“I never authorized this.”