Chapter 4
I don't call my contact at Chase. Not yet.
Instead, I do what I should have done from the beginning — I look at what's already in front of me. The QuickBooks data. The payment confirmations. The ACH transfer records that show routing and account numbers for every transaction Gallagher Builds has ever made.
Thursday morning. Office door closed. Both monitors dedicated to this. Left screen: the vendor payment history for Marin Voss Associates. Right screen: a spreadsheet I'm building — every transaction, every date, every amount, cross-referenced with our joint credit card activity and my own calendar.
The pattern sharpens.
Four payments. All $47,200. All processed within the first three weeks of the quarter — January 18th, April 15th, July 1st. The Q2 payment on April 15th is one day after the April 14th hotel charge. The Q3 payment on July 1st is two days before Marin bought me the scarf.
Money flows in. Money flows out. In through the fake invoices, out through purchases, dinners, hotels. The cashmere scarf. The champagne she brought to my kitchen. The expensive sunglasses she wore last month that I complimented — "Oh these? Treat yourself energy," she'd said, laughing.
Treat yourself with someone else's money. That's not treat yourself energy. That's theft.
But here's what's been bothering me since Damon said it: $141,600 is a lot of money. Not for an affair — affairs are cheap. A hotel room is $289. Dinner is $150. Even a cashmere scarf is $400. You could fund a year of Tuesday hotel rooms for under $15,000.
So where's the rest going?
I pull up the ACH transfer details for the July 1st payment. The receiving account: Chase, Midtown branch, account ending in 4471. I write it down.
Then I look at something I haven't looked at yet — Gallagher Builds' accounts payable system.
Not just Marin's vendor file, but all of them.
Every vendor. Every payment. Because if there's one phantom invoice scheme running through a company's books, there's often more than one.
That's what the data says. ACFE Report to the Nations: when fraud is present, 42% of cases involve multiple schemes running simultaneously.
I pull up the full vendor list. Twenty-three active vendors. Most are immediately recognizable — the office lease, the cloud hosting, the software licenses, the payroll service. Normal operating expenses for a seven-person tech startup.
But there's one I don't recognize.
Horizon Strategic Partners LLC
Vendor since: March 1
Total payments (YTD): $36,800
Payment method: ACH transfer
March. Two months after Marin's payments started.
I click into the details. Two payments — $18,400 each. Q1 and Q2. Service descriptions:
Q1: Market research and competitive analysis
Q2: Strategic growth advisory services
Same vague language. Same lack of deliverables. Same ACH payment method. Different account — this one routes to a different bank entirely. A credit union in New Jersey.
I run the search. New Jersey Division of Revenue and Enterprise Services.
Horizon Strategic Partners LLC.
No results.
I'm not surprised. The confirmation doesn't hit me like a revelation — it settles in like a known answer on a test you've already studied for. Two phantom vendors. Two shell companies. Both unregistered. Both receiving regular payments from my husband's startup for services that produce nothing.
$141,600 plus $36,800. That's $178,400 year-to-date flowing out of Gallagher Builds into entities that don't exist.
My husband's company raised $1.8 million in seed funding. He's burned through $178,400 of it on fake invoices in seven months. That's almost 10% of total investment diverted to fraud.
The investors. The people who wrote those checks — they believed in Nate's software, his team, his projections. They trusted him with their money the way I trusted him with our life.
My fingers tap the desk. Faster now. Less deliberate.
Who owns Horizon Strategic Partners?
The vendor file lists a contact name: H. Voss.
H. Voss.
I sit with that for a full minute. Breathing. Thinking. Running the letters through every possibility my brain can generate.
H. Voss. Not Marin Voss. H. Voss.
Marin's mother's name is Helen. Helen Voss. Retired teacher in Westchester. I've met her six times — Thanksgiving once, Marin's birthday twice, a brunch that felt endless. Pleasant woman. Talks too much about her garden.
Is Marin running invoices through her mother's name?
Or is H. Voss someone else entirely? A husband I don't know about. A sibling. A fabricated identity.
I need to see the bank account information for Horizon Strategic Partners.
The routing number goes to a credit union in New Jersey — Bayshore Federal Credit Union.
If I can match the account holder to Marin, the two schemes connect.
One person running two shells through the same company.
A pattern. Not an affair — an operation.
This is where the line lives.
I could stop here. Take what I have to Nate — confront him.
Show him the two phantom vendors, the unregistered companies, the missing deliverables.
Let him react. Watch his face when I say "H.
Voss." If he's complicit, he'll know immediately what I'm showing him.
If he's the mark, he'll look confused. Maybe scared.
But confrontation means losing access. The moment he knows I've been in his QuickBooks, the password changes.
The invoices could be deleted. Marin could close the accounts, dissolve whatever digital footprint remains.
I'd have my screenshots, but screenshots aren't subpoena-proof.
A good defense attorney could argue I fabricated them.
I need the bank records. Actual account statements showing the money moving from Gallagher Builds into Marin's account. That's the evidence that holds up.
* * *
Lunch. I leave the building because I need air that doesn't smell like recycled carpet.
The deli on 48th has a line out the door — Thursday crowd, everyone grabbing sandwiches they'll eat at their desks.
I get in line because standing still feels productive right now.
My brain works better when my body has a simple task.
Turkey on rye. Mustard, no mayo. The same thing I've ordered three times a week for seven years. Routine as a formula.
My phone buzzes while I'm waiting. Marin again.
Saw this and thought of you!! ??
Attached: a photo of a handbag in a store window. Kate Spade. Blush pink. The price tag isn't visible but I can guess — $350, maybe $400.
She's shopping. On a Thursday afternoon. For bags she'll probably buy, with money she's stolen from a company funded by investors who think it's building estimating software.
I look at the text. At the heart emoji. At the casual warmth of a woman sending her best friend a photo of something pretty, the same way she's done a hundred times in fifteen years of friendship.
I type: Cute! You should get it.
Send.
Let her spend. Let the money move. Every purchase she makes is another line on the forensic trail — another data point proving lifestyle inconsistent with stated income. A woman with zero clients doesn't buy Kate Spade bags on a Thursday afternoon. A woman with $178,400 in embezzled funds does.
I get my sandwich. Walk back to the office. Eat at my desk with the wrapper spread flat like a placemat. Mustard on my thumb. Turkey that tastes like nothing because my brain is somewhere else entirely.
* * *
At 3 PM, I pull up Marin's social media. Instagram. Public account — 2,400 followers, mostly people from college and her old corporate job. She posts three or four times a week.
I scroll back to January. The month the payments started.
January: photos of the office setup. "New year, new chapter! ?? So excited to launch my consulting practice." A photo of the empty desk, a fresh notebook, a coffee cup. Comments from friends cheering her on. My own comment: "SO proud of you!!!"
February: "Month one in the books! Already loving this entrepreneurial life." A photo of her laptop at a café. No clients mentioned. No deliverables shown. Just the aesthetic of working.
March: the champagne night at my apartment. She posted a photo of us — my arm around her shoulder, both of us laughing, the bottle between us. "Celebrating milestones with my ride-or-die. 15 years of this woman. ??" I'm smiling in it. I look happy. I look like someone who doesn't know.
April. May. June. Restaurant meals. New clothes. Weekend trips — a spa in Connecticut, a weekend in the Hamptons "with the girls." None of these girls have ever been tagged or identified. I've never met them. I've never been invited.
She's spending. Visibly, consistently, and above what any new consultant with zero visible clients should be able to sustain.
I screenshot the relevant posts. The expensive weekends. The new wardrobe. The restaurant check-ins at places I know charge $200 for dinner. Each one timestamped. Each one filed in 07-11-GALLAGHER.
This is how you build a fraud case. Not with the single damning document — with the accumulation. The pattern. The lifestyle that doesn't match the declared income. The purchases that don't reconcile with what's possible.
I used to do this for strangers.
Now I'm doing it for myself.
My desk phone rings. External number. I almost don't answer — but the area code is 212, Manhattan, and I don't ignore Manhattan numbers during business hours.
"Blair Gallagher."
"Ms. Gallagher. My name is Victor Shen. I'm an investor in Gallagher Builds."
I stop breathing. My hand finds the desk edge. Tap. One-two—
I stop myself. Breathe. Professional voice. "Mr. Shen. How can I help you?"
"I think we should meet. I have some concerns about your husband's company. And I believe you might be the right person to discuss them with."
The anonymous email. Victor Shen sent the anonymous email.
"I'm listening," I say.
"Not on the phone. Can you meet me tomorrow? Somewhere your husband wouldn't run into us."
I look at my office door. Closed. The Rothko on the wall. The cashmere scarf in my drawer. The folder on my drive that grows larger every day.
"Yes," I say. "I can meet you tomorrow."
He gives me an address — a coffee shop in the Financial District, the kind with leather chairs and slow wifi that caters to people who want to talk without being overheard. 8 AM. Before my office. Before Nate's.
I write it down on a Post-it, fold it once, and slide it into my wallet behind my MetroCard. Not on my phone. Not in an email. Paper. Old-school. Untraceable.
"Mr. Shen — one question."
"Yes?"
"The email you sent me last Friday. The one from the anonymous address. How did you know to send it to me, specifically?"
A pause. The sound of someone choosing words carefully.
"Because I Googled your name and saw that you're a forensic accountant who specializes in shell company fraud. And because your last name is Gallagher." Another pause. "I assumed you'd know what to do with the information. Was I wrong?"
"No," I say. "You weren't wrong."
I hang up. My hand is steady. My pulse is doing something I won't name — but my hand is steady, and that's what matters.
Victor Shen. An investor who noticed something wrong in the books. An investor who went looking for the vendor and found what I found — nothing. And then went looking for me.
He's using me. I know this. He doesn't care about my marriage, my best friend, or my feelings. He cares about his money — the money he invested in Gallagher Builds that's being siphoned through phantom invoices into accounts controlled by a woman who brings me cashmere scarves and heart emojis.
He's using me as a weapon.
I'm going to let him. Because his weapon and my weapon point in the same direction, and right now I need all the ammunition I can get.
Tomorrow, 8 AM. Financial District. Victor Shen is going to tell me what he knows.
And then I'll decide how much of what I know to tell him back.