Chapter 3
The Saturday dinner told me nothing and everything.
Nothing, because Nate and Marin didn't touch.
Not once. No lingering glances, no inside jokes I wasn't part of, no body language that screamed affair.
They moved around our small patio the way they always have — friendly, easy, the comfortable geometry of people who see each other often enough that proximity stops being remarkable.
Everything, because Marin bought me a birthday gift three weeks early.
She pulled it from her bag while Nate was flipping burgers — tissue paper, a ribbon, the whole presentation.
Inside: a cashmere scarf, dove grey, softer than anything I'd buy myself.
The label said Loro Piana. I know what Loro Piana costs because I once priced one for my mother's birthday and put it back.
"I saw it and thought of you," she said, holding it up so the patio light caught the weave. "I know your birthday isn't until August but I couldn't wait. The second I touched it I was like — this is Blair."
"Marin. This is too much."
"Shut up. You deserve nice things." She looped it around my neck herself — standing behind me, arranging it, her fingers brushing my collarbone. "See? Perfect. You look like a woman who has her shit together."
I laughed. Touched the fabric. It was absurdly soft — the kind of soft that makes you aware of every other scarf you've ever owned and how rough they were by comparison.
"You're insane," I said. "Thank you."
"Happy early birthday, babe." She kissed the top of my head — the same spot Nate kisses every morning — and went back to her wine.
Nate looked over from the grill. "Nice scarf."
"Your friend is too generous," I said.
Marin waved her hand. "Consulting is going great. Let me spoil people."
What I was thinking: where does a woman with zero clients and zero revenue get the money for a $400 cashmere scarf? Where does a woman whose "consulting practice" has been running for six months without a single verifiable engagement find the budget for Loro Piana?
I smiled. I said thank you. I let her wrap something around my neck that was purchased with stolen money and I didn't know it yet. But my body knew something. My fingers tapped the arm of my chair under the table — a calculation running beneath the surface of a perfectly pleasant Saturday evening.
I know the answer now. I found it Monday afternoon in the QuickBooks payment history. Marin's Chase account received $47,200 on June 30th. She bought the scarf on July 3rd. Three days later. With money my husband's company paid her for services she never rendered.
The trail is embarrassingly simple once you pull the thread.
I cross-referenced the scarf purchase with Marin's Instagram — she posted a "treat yourself" selfie on July 3rd from a boutique on Madison.
I Googled the boutique. They carry Loro Piana.
Then I pulled up the ACH confirmation for the Q3 invoice payment: June 30th, 8:42 AM, $47,200 deposited.
Three business days later, she's on Madison Avenue spending it.
I ran the same logic backward on the Q2 payment. April 15th — $47,200 deposited. April 19th — a weekend trip to a spa in Connecticut. Posted publicly. Geotagged. The kind of place that charges $800 a night.
Q1 payment: January 18th. January 22nd — new boots on Instagram. Valentino. Not tagged, but I recognize the sole from the photo angle. $1,290 retail.
The payments trigger spending sprees. Every single time. Like clockwork — deposit hits, and within a week, Marin's lifestyle inflates. The pattern is so consistent it could be an algorithm.
She bought me a birthday gift with my husband's money. Our money. Investor money. Money that belongs to the people who believed in Gallagher Builds enough to write checks.
That's the thing about shell companies. The money doesn't disappear — it goes somewhere.
It buys things. It lives in the world as objects and experiences that the victim walks past every day without knowing.
Mrs. Kellerman's husband bought his girlfriend a Peloton.
The Martinez wife found $3,000 in poker chips in a safe deposit box.
And my best friend bought me a cashmere scarf with funds she received for work she never did.
I'm wearing it now, actually. Wednesday morning. It's draped over my desk chair because the office runs cold and I grabbed it on my way out this morning without thinking.
I should throw it away. I don't. Evidence is evidence.
* * *
The hotel charge appears on our joint credit card statement at 11:47 AM on a Tuesday in April. I find it by pulling three months of statements — something I should have done years ago, something any forensic accountant would tell a client to do on day one of a suspected fraud.
I'm sitting at my desk with both monitors dedicated to this.
Left screen: our Chase credit card portal, three months of transactions downloaded into a CSV.
Right screen: Excel, where I've sorted the data by merchant name.
That's how I do it for clients — sort by merchant, look for patterns.
Recurring charges. Unusual amounts. Names that appear more than twice.
The Marlowe Hotel appears three times. Same amount each time. Same day of the week.
The Marlowe Hotel. $289. April 14th. A Tuesday.
I was at a conference in Philadelphia on April 14th.
The annual ACFE meeting — three days of presentations on fraud detection methodology and networking dinners where everyone drinks too much wine and complains about expert witness fees.
I remember because I gave a presentation on shell company identification.
Standing at a podium, walking forty forensic accountants through the exact methodology I'm now using on my own husband.
$289 at The Marlowe. That's a room, not a dinner. The Marlowe doesn't have a restaurant — I've walked past it enough times. It's a boutique hotel on the West Side, the kind with exposed brick and a lobby that smells like expensive candles. The kind of place that charges $289 for a Tuesday night.
I check March. Another charge: The Marlowe, $289, March 11th. Also a Tuesday.
February: The Marlowe, $289, February 18th. Tuesday.
Three months. Three charges. All Tuesdays. All $289. All while I was somewhere else — the February one was a client meeting in Hartford, the March one was a day I worked late past eleven.
He's not even varying the day. Same hotel, same room rate, same pattern. In my professional opinion: sloppy. Amateurs repeat. Professionals randomize.
But Nate isn't a professional at deception. He's a construction-tech founder who thinks his wife doesn't look at the credit card statement.
He was right. Until Friday.
I screenshot all three charges. Add them to 07-11-GALLAGHER. The folder is growing — anonymous email, corporate searches, QuickBooks vendor file, invoice details, and now three hotel charges on our joint card.
I open a new document. Start building a timeline:
January 18: First payment to Marin Voss Associates ($47,200)
February 18: The Marlowe Hotel ($289) — Blair in Hartford
February: Marin moves into office adjacent to Nate's
March 11: The Marlowe Hotel ($289) — Blair worked late
March: Marin celebrates "incorporation" with champagne at Blair's apartment
April 14: The Marlowe Hotel ($289) — Blair at ACFE conference in Philadelphia
April 15: Second payment to Marin Voss Associates ($47,200)
July 1: Third payment to Marin Voss Associates ($47,200)
July 3: Marin buys Blair cashmere scarf
I stare at the timeline. The pattern is clear to anyone trained to see patterns: the hotel charges start AFTER the payments begin. Marin moves in after the first payment. The affair — if that's what the hotel charges represent — started after the financial arrangement was already in place.
Which means one of two things.
Either the money came first and the affair followed. He hired her fake company, they grew close in the adjacent offices, and proximity became something else.
Or — and this is what's itching at the back of my brain like a number that won't reconcile — the money is the point. Not the affair. The affair is the means. The money is the end.
I've seen this before. Not often. But enough.
In the Whitfield case, four years ago: a business partner was sleeping with the CEO's wife.
Everyone assumed the affair was the scandal.
It wasn't. The affair was leverage — the partner used the relationship to access company accounts.
The wife was a vector, not a destination.
He stole $1.7 million before anyone looked past the sex to see the spreadsheet.
What if Marin isn't sleeping with Nate because she wants Nate?
What if she's sleeping with him because a man who's having an affair doesn't scrutinize invoices from his mistress's company?
My phone buzzes. Marin.
Lunch Thursday? That new salad place on 53rd has a wait list but I know someone.
I stare at the text. She always knows someone. She always has a connection, a reservation, an in. For a woman with no clients and no revenue, she moves through the world like someone with unlimited access.
Because she does. $141,600 of access.
I type: Can't Thursday — client meeting. Next week?
Send. Keep the distance natural. Don't change the pattern. If I suddenly stop responding or start declining everything, she'll notice. Marin notices things. That's what makes her good at whatever this is.
* * *
Damon finds me at the end of the day. He doesn't knock — just appears in my doorway with his vending machine cup and that flat expression that means he's about to say something I need to hear.
"Your hypothetical," he says.
"Still hypothetical."
"Mmm." He leans against the doorframe. "Hypothetically, did you find hotel charges?"
I don't answer. My face must do it for me.
"Here's the thing about hotel charges," he says. "Everyone fixates on the affair. Is he sleeping with her, how long, how many times. But that's the wrong question."
"What's the right question?"
"Follow the money, Gallagher. That's always the right question. Hotels are $300. That's noise. You said the vendor payments are — what, $47K a quarter? That's the signal." He sips his coffee. "Someone's getting rich off this arrangement. Figure out who, and you'll know what it actually is."
"You think it might not be an affair?"
"I think $141,000 is a lot of money to spend on sex." He straightens up. "I think someone's running a scheme, and the question is whether your — the hypothetical subject — is the perpetrator or the mark."
He leaves. I sit with that.
Perpetrator or mark.
Is Nate paying Marin because he's complicit — because the shell company is their shared secret, their affair infrastructure, their exit fund?
Or is Nate paying Marin because she's convinced him it's legitimate? Because he trusts her the way I trusted him — without checking?
I pull up the QuickBooks dashboard again. Look at who authorized the vendor setup. Look at who approved the first invoice.
Authorized by: Nathan Gallagher, CEO.
He approved every payment. He set up the vendor. His login, his authorization.
But that doesn't mean he knows what's underneath.
In half my cases, the person authorizing the payments genuinely believes the vendor is real.
They're not covering up — they're duped.
Signing off on invoices they never verified because the amounts seemed reasonable and the service descriptions sounded legitimate and who double-checks their business partner?
Who double-checks their mistress?
I close the laptop. The cashmere scarf is still draped over my chair. I touch it. Soft. Expensive. A gift from a woman who might be stealing from my husband, or a gift from a woman who's conspiring with him. I don't know which is worse.
I fold the scarf. Put it in my desk drawer. Close the drawer.
Tomorrow I need the bank records. The actual account activity for Marin's Chase account — what's going in, what's coming out, where the $141,600 is ending up. I can't subpoena those without revealing myself. I can't access them without a court order.
But I know someone at Chase's fraud department. A woman I worked a case with two years ago — money laundering through art purchases. She owes me a professional courtesy.
I pick up my phone. Scroll to the contact. Hesitate.
This is the line. Everything before this — the QuickBooks access, the credit card review, the corporate searches — could be explained away. A wife checking the family finances. Unusual, maybe. But defensible.
Calling a bank contact to pull third-party account activity without authorization? That's not defensible. That's the kind of thing that ends careers. The kind of thing I'd tell a client never, ever to do.
My finger hovers over the number.
I put the phone down. Not yet. I'm not ready to cross that line yet.
Instead, I do what I can do legally. I pull up the New York Secretary of State's database again and run a broader search — not just Marin's name, but variations.
Her maiden name, her mother's maiden name (Ashworth, which I know from fifteen years of friendship), any combination that might reveal a second entity. A holding company. A pass-through.
Nothing. Nothing. Nothing.
Then I try something else. I search the Chase routing number against public filings — specifically, against any SARs (Suspicious Activity Reports) that might have been flagged.
I can't access the actual reports without law enforcement credentials, but I can check whether the routing number appears in any public court documents from fraud cases.
It doesn't. The account is clean. Officially.
But $141,600 flowing into an unregistered business from a startup funded by angel investors? That's textbook misappropriation of investor funds. Whether Nate knows it or not, whether Marin is his lover or his con artist or both — his investors are being defrauded.
And the anonymous emailer — whoever they are — already knows.
I lock my office. Walk to the elevator. Pass Damon's door, which is open. He's still at his desk, two monitors glowing, red pen in hand, marking something on a printout. He doesn't look up. Doesn't need to.
"Night, Gallagher."
"Night, Damon."
The elevator doors close. I stand alone in the fluorescent hum, my reflection staring back at me from the brushed steel. I look the same as I did a week ago. Same dark hair pulled back. Same reading glasses pushed up on my head. Same blazer, same posture, same woman.
But a week ago I didn't have a folder called 07-11-GALLAGHER. A week ago the math balanced. A week ago I trusted two people without auditing them, and now I'm building a case against both.
The doors open. I walk into the evening. The cashmere scarf is in my desk drawer upstairs, folded neat, filed like evidence.
Because that's what it is.
I'm closer to the line than I was yesterday. Tomorrow, I might cross it.