5. Nora
Nora
The ink smudge reaches the joint of my left thumb before the fraud resolves into one line.
Arlo’s real tow comes first.
Eighteen months ago, Highwall recovered his disabled Silverado from Black Branch Road. The original invoice carries Knox’s signature, the old storage footer, and the mileage line repeated across the false records.
One authentic document. Five altered copies.
I write TEMPLATE across the real invoice and draw lines to the scanner streak, the toner dot, and the fixed angle of Knox’s signature.
“Access to one invoice,” I say. “Not access to your system.”
Knox stands at the lower camera monitor. The pickup hasn’t passed again, but he checks the road every few minutes.
“Pettit paid cash,” he says. “Paper copy left with him.”
“That explains the form. It doesn’t explain the VINs.”
I arrange the donor-vehicle summaries by claim date. Two came through Tennessee. Two from North Carolina. One from Virginia. Different owners, adjusters, and salvage outcomes.
The same contractor appears in all five access histories.
Evan Baird’s regional field desk.
I copy the timestamps beside the claim numbers. Baird opens each donor file before its matching forged packet appears. The shortest gap is nineteen minutes. The longest is two days. None of the owners share an adjuster, repair shop, or county. Baird is the only repeated hand in the records.
The sequence matters. He does not search after a theft to see whether a VIN has been used. He searches first. Arlo’s crew steals or alters a matching vehicle second. Then someone builds a Highwall packet around the identity Baird supplied.
I number the five rows. One through five. By the last row, coincidence has stopped being a credible explanation.
My stomach tightens harder than it did at the locked road.
Baird doesn’t need to hack my work phone. He’s authorized to see rural assignments and employee safety check-ins. He can open the donor files, copy a valid VIN from a matching vehicle, and watch me travel toward whatever address his desk approves.
The protection system did exactly what it was built to do.
It reported me to the wrong man.
“I need your phone,” I say.
Knox turns from the monitor. “Who are you calling?”
“My fraud director. Not Baird’s chain.”
“Speaker.”
“You don’t get to supervise the call.”
“I get to hear whether the person on the other end tells you to leave this house.”
“And if she does?”
“She’ll be wrong.”
Consistent. Infuriating. Useful.
I call the insurer’s public fraud line from his clean phone, enter my employee code, and ask for the director by title. No corporate application. No field check-in. No number tied to my assigned device.
When the director answers, I give her the short version: five connected donor claims, counterfeit Highwall records, Baird’s false inspection assignment, attempted abduction, and a dropped phone naming Arlo Pettit.
She asks whether I am safe.
I look at Knox.
“Physically,” I say.
He gives me half a nod.
I request silent preservation of Baird’s access logs, messages, file downloads, and safety-dashboard views. I also tell her not to suspend his credentials yet.
“Preserve the original timestamps and session identifiers,” I say. “No exports that replace the native record. Limit notice to legal, security, and you.”
“You’re asking me to leave an internal account available to a suspected accomplice.”
“I’m asking you to mirror it while he thinks no one is watching.”
“Nora,” she says, “Baird reported that you abandoned an assigned inspection after assaulting a vendor.”
Baird made his move.
“The vendor broke my passenger window and demanded my phone.”
“I’m preserving both reports. Until security reviews the conflict, I have to place you on field hold.”
I press the pen hard enough to mark my palm.
Field hold means no new assignments, no vehicle access, and no authority to inspect the physical clone I need to finish the case. Baird has turned an abduction attempt into a reason to remove me from my own work.
“Do not reassign the file,” I say.
“I can’t promise that.”
“Then record my objection and preserve authorship. My notes, analysis, and controlled actions stay under my employee ID.”
The director pauses. “Recorded.”
“Keep Baird’s account live. Mirror everything. I’ll send a written request through a clean channel.”
“You understand the risk.”
“I’m looking at it.”
Knox’s blue eyes hold mine across the table.
I end the call.
Before Knox can speak, I write the time, number dialed, director’s name, and every preservation request in my notebook. The call came from his phone, but the record of it belongs in my chain.
He waits until I finish.
That restraint gets my attention more effectively than an order would.
“Cut his access,” Knox says.
“No.”
“He put men on you once.”
“If we cut him now, Arlo moves the vehicles and burns the records.”
“You’re on hold.”
“That changes what my employer lets me touch. It doesn’t change what I know.”
“It changes whether you go near a stolen truck.”
This isn’t the road argument. I’m not asking for transportation. I’m fighting for the work that proves I did not assault a vendor, abandon a case, or build a theory around the wrong company.
“If another investigator finishes from my notes,” I say, “Baird’s report becomes the official reason I disappeared. I become the adjuster who made a reckless accusation and got removed. He keeps the lie even if Arlo loses the cars.”
Knox’s jaw hardens. “Your name stays on the file.”
“You can’t order my employer.”
“No. I can make sure the evidence proves who wrote it.”
He says it like protection can include a byline.
I return to the release packets before I can believe him.
Different destination names cover the same receiving-terminal code: 17-HG. I search the contractor directory saved with the claim summaries.
Harrow Produce Storage. Unit 17. Closed six years ago.
The warehouse sits on a private service road outside Harrow Gap, large enough for multiple vehicles and close enough to let a false Highwall truck look legitimate.
County photographs show three loading bays and a fenced refrigeration yard.
The tax record belongs to a dissolved holding company.
The permit history goes quiet with the produce business, then shows an electrical service reactivation four months before the first false recovery packet.
Lights, outlets, and one compressor circuit.
Enough to work after dark. Not enough construction to attract a question.
I mark the service entrance, the rear fence, and the drainage road on the printed map. One legal parcel. Three ways for a vehicle to disappear after dark.
I turn the screen toward Knox. “Storage site.”
He studies the map, approach road, and loading-bay diagram. “You don’t enter it.”
“I have the claim photographs.”
“You can give them to me.”
“Can you distinguish an original factory seam from a replaced VIN panel?”
“Yes.”
“Can you tell which donor claim supplied the visible identity and document the insurer’s physical markers without contaminating them?”
Silence.
“That part is mine,” I say.
He doesn’t agree.
He also doesn’t tell me I’m wrong.
The clean laptop chimes.
Baird’s still-active account has issued a new field assignment under my employee ID.
Tomorrow night. 9:30.
Harrow Produce Storage, Unit 17.
Knox reads over my shoulder. “Second trap.”
“Yes.”
I open my notebook to a clean page.
“This time we know who set it.”