Chapter 3 - L.B.

My father did not shout.
That frightened me more.
He pulled the ledger toward him and studied every entry marked L.B.
Dates.
Amounts.
Approvals.
One transfer for $420,000.
Another $185,000.
Another $760,000.
All routed through Lorenzo Bellini’s executive authorization code.
Dad looked at me.
“I did not approve these.”
Detective Quinn asked:
“Who had access to your credentials?”
“No one.”
Emilio laughed bitterly.
“Dad.”
My father turned.
“What?”
“Mom knew your password.”
Dad looked away.
Of course she did.
My parents had built the company together.
Mom handled his travel.
Bank files.
Passwords.
Everything.
Could she have used his authorization to move money?
Maybe.
That thought hurt.
Quinn asked:
“Did Isabella ever initiate transfers in your name?”
Dad answered slowly.
“For legitimate business. Sometimes.”
“Then these initials do not necessarily indicate you personally.”
Relief lasted two seconds.
Then Quinn said:
“They also do not clear you.”
Correct.
My father nodded.
“Investigate everything.”
That mattered.
No defensive lawyer.
No demand for trust.
“Everything.”
We spent the next day at Bellini Imports headquarters.
The building smelled like roasted coffee and old wood.
Mom had chosen every painting.
Her office remained locked.
Dad opened it with police present.
Desk neat.
Calendar.
Reading glasses.
A scarf over the chair.
I nearly broke.
Quinn searched carefully.
Laptop.
Files.
Receipts.
One drawer contained printed wire confirmations.
Marked by Mom with red ink.
FAKE L.B. AUTH.
So she knew Dad’s credentials were being used without his knowledge.
Relief hit him visibly.
Then another note:
Access likely internal.
Not Marco alone.
Who inside?
Emilio ran European finance.
I ran operations.
CFO David Russo controlled treasury systems.
Mom trusted him.
Dad trusted him more.
David had been with Bellini twenty-two years.
Quinn pulled system logs.
Many fraudulent transfers were initiated from a remote token assigned to Dad.
But the token itself had been replaced eighteen months earlier.
Dad remembered.
David told him the old device malfunctioned.
Issued new one.
What happened to old token?
“Destroyed,” David had said.
Was it?
Company security records showed no destruction certificate.
Problem.
David was called in.
He denied everything.
Calm.
Professional.
Offended.
Then Quinn showed him ledger entries.
His face changed at one name.
Costa Meridian Partners.
Tiny reaction.
Enough.
“What is Costa Meridian?” she asked.
“Freight consultant.”
“Owned by?”
“I don’t know.”
“You approved onboarding.”
“That was years ago.”
“Beneficial owner is your sister.”
Silence.
Dad closed his eyes.
David’s sister, Teresa Russo, lived in Florida.
Or so we thought.
She controlled a shell company receiving $2.4 million.
David asked for lawyer.
Interview over.
Another insider.
Mom’s “I know exactly who else is involved” began to make sense.
Marco plus David.
Maybe more.
Then we found the copies.
Mom had hidden them in the one place none of us expected.
Recipe binders.
She cooked constantly.
Italian recipes handwritten, stained with oil, inherited from her mother.
Between pages:
Wire transfers.
Emails.
Screenshots.
Notes.
One binder labeled SUNDAY SAUCE contained a complete flow chart.
At the center:
MARCO D.
DAVID R.
C.D.?
E.B.?
Question marks beside Clarissa and Emilio.
Mom was not sure about them.
That mattered.
She had not decided guilt before proof.
Below:
L.B. CREDENTIALS STOLEN.
Dad sat down.
Mom had cleared him in her own investigation.
Then another line:
Meeting with federal contact after Barcelona retrieval.
Federal contact?
Who?
No name.
Date scheduled:
Three days after her death.
She intended to go to authorities.
That created urgency for whoever knew.
Then recipe binder contained a photograph.
Marco entering Bellini Imports after midnight.
David letting him in.
Date:
Two weeks before Mom died.
Security logs had no record.
Deleted.
Mom photographed from parking garage.
Why was she there?
She had been following.
My mother had turned into an investigator without telling us.
Dangerous.
Brave.
Maybe reckless.
Quinn found more.
Email draft from Mom to me.
Never sent.
Sofia,
If I tell your father before I know who is involved, he will confront everyone and they will destroy evidence.
I laughed through tears.
She knew him.
Then:
Emilio may be compromised through Clarissa. Do not assume he is guilty. He lies when he is scared.
True.
Then:
If something happens to me, check the blue recipe box.
We searched.
At home.
Blue metal recipe box on top shelf.
Inside recipes.
Nothing.
False bottom.
USB drive.
Password hint:
OUR FIRST STORE.
Dad knew.
Mulberry1978.
Opened.
Audio recordings.
Mom recorded conversations.
One with David.
Isabella:
“You replaced Lorenzo’s token.”
David:
“It malfunctioned.”
Isabella:
“Where is old one?”
David:
“Destroyed.”
Isabella:
“You’re lying.”
Silence.
David:
“Isabella, leave this alone.”
She laughed.
“Why?”
Then David:
“Because Emilio will lose everything.”
My brother went pale.
Why him?
Recording ended.
Another with Marco.
Phone call.
Marco:
“Clarissa signed what she was told.”
Isabella:
“She isn’t a child.”
Marco:
“No. She is loyal.”
Isabella:
“To you?”
Marco:
“To survival.”
That phrase chilled me.
Then Marco said:
“You think Lorenzo will thank you for destroying his son?”
Mom:
“I’m trying to save my son.”
Again Emilio.
What had he done?
He finally confessed.
Not theft.
Something else.
Eight months earlier, Emilio discovered small irregularities in European accounts.
Clarissa told him her brother used temporary transfers for tax timing.
Emilio accepted explanation.
Then signed two reconciliation approvals.
Those approvals later legitimized millions.
He had been negligent.
Maybe criminally exposed.
Mom knew.
She did not want Dad to blame him before evidence showed intent.
That was why she sent Emilio to retrieve ledger.
Give him chance to correct mistake.
Emilio cried.
“I thought she was angry with me.”
Dad said nothing for a long time.
Then:
“She was protecting you.”
That broke him.
Clarissa looked devastated too.
Her signatures were more numerous.
She had knowingly signed shell company documents.
But she claimed she believed they were Marco’s tax structures.
Was that believable?
Investigators would decide.
Then USB contained final audio.
Date:
Night before Mom collapsed.
Mom’s voice low.
“Marco is downstairs.”
We heard footsteps.
She was recording secretly.
Marco:
“You made copies.”
Isabella:
“Yes.”
Marco:
“Where?”
Isabella:
“Somewhere you’ll never find all of them.”
Clarissa:
“Please stop.”
David’s voice appeared.
My stomach dropped.
He was there too.
David:
“Isabella, this can still stay inside the family.”
Mom:
“You’re not family.”
Then a fourth voice.
Male.
Older.
Unknown.
“You should listen to David.”
Dad froze.
“I know that voice.”
We looked at him.
“Who?”
He whispered:
“My brother.”
My uncle Gabriel.
He lived in Boston.
Retired from Bellini Imports ten years earlier.
Family legend.
Charming.
Generous.
Godfather to Emilio.
Mom’s secret investigation had just pulled another Bellini into the room.
And Uncle Gabriel had been present in our house the night before she died.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
May you like
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.
Company IT preserved authentication logs before anyone could delete them. The stolen executive token had been used from locations tied to David Russo and a virtual private network paid by Ferraro Holdings. Numbers were beginning to tell the story people had tried to hide.