Chapter 3 - THE ELEVEN LOGINS

Samantha did not call Marco.
Good.
She called Maya.
Then the FBI.
Special Agent Rachel Kim met them in a conference room at Halstead Tower the next morning.
No P3.
Samantha was done with P3.
For now.
The audit log showed eleven access events tied to a Bellini executive credential.
Dates spread across five months.
Three occurred after midnight.
Two from an IP address associated with Bellini headquarters.
One from an airport lounge.
Five through remote VPN nodes.
Marco had said he watched one recorded meeting.
He had not said he never accessed the file.
Important distinction.
Still.
Samantha wanted answers.
Agent Kim said:
“We verify before confrontation.”
Good.
She was beginning to love that sentence.
Halstead’s security team examined authentication.
The credential string did not belong to Marco personally.
It belonged to a shared executive portal account created for external insured clients to review document requests.
Display name:
MARCO BELLINI — EXEC.
Actual users could be delegated.
There.
Bad system design.
Delegation rights belonged to Paolo Serrano, Bellini general counsel, chief financial officer Elena Rossi, and Marco’s executive assistant.
Samantha almost laughed.
Eleven logins could mean eleven people.
Or one.
Halstead logs showed browser fingerprint.
Nine of eleven matched Paolo Serrano’s Bellini-issued laptop.
There.
Two matched a device used by Marco’s executive assistant.
None matched Marco’s personal devices.
Good.
He had not lied about accessing her file.
Maybe.
Agent Kim said:
“We still ask him.”
Of course.
Marco came to FBI offices voluntarily with counsel.
Samantha did not attend.
Good.
This was no longer a garage confrontation.
She reviewed a transcript summary later through counsel because some details affected her employment case.
Marco admitted:
his assistant downloaded document requests twice at his instruction.
He reviewed the meeting recording once.
He did not personally access the claim portal.
Serrano had executive delegation and apparently used Marco’s display credential.
Evidence matched.
Good.
Samantha felt relief.
Then irritation at the relief.
Maya noticed.
“You wanted him not to have lied.”
Samantha looked.
“That is not legally relevant.”
“No.”
Good.
Then Patricia Wynn.
Her brother’s consulting company had received $186,000 from Neil.
Patricia claimed:
legitimate consulting for a restaurant venture Neil planned.
No restaurant existed.
Bank records showed most money moved onward to a company controlled by Caleb Voss.
There.
Caleb had not just taken two thousand dollars for P3.
He had been paid for months to manipulate access logs, disable cameras, and alter visitor records.
The building itself had been manipulated around investigations.
Internal audit found:
five nights where cameras failed during unusual executive access.
Three overlapped with claim-file modifications.
Norlake.
Cadence.
Bellini.
There.
Samantha’s cases were not simply insurance reviews.
They were points where a fraud network reached into Halstead.
Then one more name.
Claims analyst Aaron Pike.
Samantha trained him.
Twenty-six.
Smart.
Nervous.
His credentials had exported Patricia’s reserve notes the day before P3.
When investigators interviewed him, he broke.
He had not been paid.
He had been threatened.
Someone sent photographs of his wife’s daycare pickup route.
There.
Same network.
Different leverage.
Agent Kim said:
“This is why we separate participants.”
Samantha nodded.
Paid.
Coerced.
Complicit.
Unaware.
Not one category.
Good.
Aaron cooperated.
He said Neil instructed him to reduce documentation on suspicious maritime files.
Patricia told him verbally:
“Do what Neil says on the port claims.”
That connected her.
Still needed proof.
Then emails recovered from Neil’s deleted archive.
Patricia:
If Reed keeps cross-linking vendors, we lose control of reserve exposure.
Neil:
She thinks the job is truth.
Patricia:
Then give her less to work with.
Samantha stared.
She thinks the job is truth.
For years, Samantha had thought that was literally the job.
Maybe that was why she was still alive.
People underestimated anyone who believed the instructions.
Then Ethan.
His attorney contacted prosecutors.
He wanted to cooperate.
Not because he had become noble.
Because Falcone men had already cut him loose.
His debt remained.
His charges remained.
The P3 assault, attempted theft, and bribery conspiracy remained too.
Ethan offered:
names,
messages,
betting accounts,
the intermediary who connected him to Arden.
In return, he wanted consideration.
Normal.
Ugly.
Useful.
Samantha did not attend proffer.
Good.
She did receive notice through victim services that Ethan admitted:
paying Caleb $2,000 for P3 access,
knowing Neil expected Samantha’s tablet to be taken,
knowing the visible cameras would be disabled,
grabbing Samantha’s wrist when she refused.
No:
I never meant to hurt her.
Good.
He did say it in a personal letter his lawyer tried to send.
Maya asked:
“Do you want it?”
“No.”
Good.
No obligation to consume apology.
Then Marco’s company.
Bellini’s outside audit produced bad news.
Paolo Serrano had used Arden for illegal recovery work with Marco’s knowledge at a high level.
Serrano then expanded:
staged thefts,
inflated claims,
resale of cargo,
kickbacks from Falcone intermediaries.
Marco had benefited indirectly from some of the fraud proceeds.
Bellini Logistics benefited from some insurance payments tied to inflated losses.
Marco did not personally engineer them.
But his companies kept money.
There.
He had exposure.
Civil.
Tax.
Possibly criminal depending knowledge.
And his broader organization had other problems.
Federal agents did not stop at insurance fraud once they saw:
cash recovery crews,
payoffs,
off-book route protection.
Marco’s lawyer negotiated evidence preservation.
No shredding.
No private cleanup.
Good.
Luca Ferraro was interviewed.
He admitted organizing recovery crews and acknowledged that threats had sometimes been used. When investigators asked about violence, he requested counsel.
There.
No sanitized security chief.
Samantha read only public filings.
She did not want to become investigator of Marco’s morality.
Not her job.
Then Halstead offered her a promotion.
Immediately.
Senior Investigations Director.
Twenty percent raise.
New office.
Direct reporting to internal audit.
Samantha stared at letter.
Maya said:
“Why now?”
Exactly.
The offer came before Patricia’s internal case concluded.
Before Samantha returned from leave.
It looked like:
reward,
retention,
reputation management.
All at once.
Samantha declined for now.
“I want to know whether I am being promoted because I’m qualified or because the company needs a photograph of the woman who caught the fraud.”
Good.
Halstead HR went silent.
Then agreed to pause.
Good.
She returned to work two weeks later under:
remote schedule,
no late parking,
transportation reimbursement,
building access alerts,
no contact with Neil or Patricia.
The first morning back, every coworker looked at her.
She hated it.
Aaron Pike came to her desk.
“I’m sorry.”
She looked.
“For what?”
“I knew Neil was hiding things.”
“Did you know he was targeting me?”
“No.”
“Did you export my files?”
“No.”
“Then what are you apologizing for?”
Aaron looked down.
“For deciding your questions were your problem.”
There.
That landed.
Samantha nodded.
“Thank you.”
No hug.
Good.
That afternoon, Marco sent one message through Maya:
My company’s audit confirms Serrano used my authority structure to commit fraud. I also confirm that the structure existed because I allowed off-book recovery operations. I will not contact Ms. Reed directly. If she needs records, counsel will provide them.
Samantha read twice.
No apology performance.
Facts.
Better.
Then FBI raided Arden Freight Recovery.
Warehouses.
Accounts.
Phones.
They found:
stolen electronics,
pharmaceutical packaging,
customs seals,
claim documents from six insurers,
and a ledger of payments to Falcone bookmakers.
The fraud was larger than Samantha’s three reports.
Much larger.
One column in the ledger had initials.
E.C.
Ethan Cole.
Another:
N.H.
Neil Harcourt.
P.S.
Paolo Serrano.
P.W.
Patricia Wynn.
And M.B.
Samantha’s heart tightened.
Marco Bellini.
Amount beside initials:
$900,000.
Not payment out.
Payment in.
Agent Kim said:
“We don’t know what the initials mean yet.”
Good.
But Samantha stared at them anyway.
Nine hundred thousand dollars had moved through a Falcone-linked ledger under M.B.
If that was Marco, then the black SUV had not arrived as rescue.
It had arrived because one criminal enterprise had been listening to another.
And Samantha had no intention of becoming collateral between them.
The eleven logins also exposed a problem Samantha had not expected to care about.
Shared credentials.
They were everywhere.
Halstead called them efficiency.
Bellini called them delegation.
Auditors called them a nightmare.
Samantha spent an afternoon with Halstead’s security architect reviewing how one external-client account had been used by four separate people without individual attribution.
She asked:
“Who approved this design?”
The architect looked embarrassed.
“Three committees.”
Of course.
No villain.
Just convenience repeated until accountability disappeared.
The same system existed in smaller forms across Halstead:
team mailboxes,
generic vendor IDs,
shared reserve-approval queues.
Samantha wrote one recommendation:
If a decision can move money, change evidence, or alter access, the person making it must be individually attributable.
Boring.
Important.
The board adopted it.
That reform later became useful in the criminal case because new logs separated Paolo’s actions from Marco’s.
Good controls did not only catch bad people.
They also stopped innocent people from inheriting somebody else’s fingerprints.
Samantha found that strangely comforting.
Then Patricia Wynn’s attorney tried a different strategy.
He suggested Samantha had exceeded her assigned scope and therefore created “unnecessary investigative exposure.”
Maya read the letter aloud.
Samantha laughed.
“Is that a legal argument?”
“No.”
“Good.”
“It is reputation framing.”
There.
Patricia wanted the story to become:
ambitious analyst went too far.
Samantha answered with documentation.
Her original assignment authorized:
invoice validation,
vendor verification,
reserve adequacy,
loss-cause analysis.
Cross-linking duplicate vendors fell squarely inside it.
Good.
No need to defend curiosity as heroism.
It was her job.
Halstead counsel finally said that publicly to employees:
Ms. Reed’s work was within her assigned investigative authority. Attempts to characterize appropriate escalation as misconduct are inconsistent with company findings.
Samantha saved the memo.
Not because she needed praise.
May you like
Because six months earlier, one sentence from management might have made her doubt herself.
Now the record existed.