Mara keeps the blue thumb drive secured inside her leather case. She and Alex leave the cafe, while Rachel, the therapist, the child, and the famous client remain concealed below.
They reach a quiet records lounge near South Station, where muted trains rumble beyond frosted windows. A middle-aged woman waits at a corner table, compact and sharply dressed in a charcoal blazer, with silver-streaked hair and a brass investigator’s badge clipped inside her coat.
Angela Stone
Mara said this would be a limited review. Paper records, metadata, and nothing identifying the child. I can work within that boundary.
Mara places the paper set between them but keeps the laptop and blue drive in her possession. The investigator studies the pages first, then compares timestamps and transaction references against the metadata.
Angela Stone
Harbor Meridian Holdings is a shell structure, but the Massachusetts login matters. The repeated case code suggests deliberate routing, not an accounting accident.
She asks no questions about the sealed placement and applies no pressure for access. Her notes remain precise, and every request stays limited to the records Mara authorized.
Angela Stone
Before we go further, decide whether you trust my handling. I will not copy anything until you are satisfied with the boundaries.
✓ Quest Accepted
Secure the financial investigator’s validation of Mara’s evidence handling
“Let us simply say, if I did not trust Mara's decision to include you in this, I would not be here. May I have one of your business cards? In case something like this arises." You gaze over to Mara with a trace of a smile, and then nod back to the investigator. "I will comply as well, within my own boundaries, but you are free to ask anything about the findings. I know most of it by memory, at this point."”
SUCCESS (Good Reasoning, rolled -1)
Alex Mishyma
If I did not trust Mara’s decision to include you, I would not be here. May I have one of your business cards, in case something like this arises?
Alex looks to Mara with a trace of a smile, then nods back to the investigator. His coffee cup shifts against the table and taps the paper records, drawing a brief glance from the next table.
Alex Mishyma
I will comply as well, within my own boundaries. You are free to ask about the findings. I know most of it by memory at this point.
Angela Stone
Fair enough. You have my card, and I will keep my questions tied to the records you authorized. No child-identifying details.
The investigator slides a matte white business card across the table. Her name and office number are printed beneath a state financial-crimes division seal.
Angela Stone
Start with the Massachusetts login. What makes you certain it belongs to the same operator behind the Harbor Meridian routing?
Mara Velez
Alex has given her enough trust to begin, but not enough to surrender control.
+ New Item Acquired
Business card
“"Simple. Because the same login credentials are used in all three situations. Look," you say, pointing to the three transactions, and their identical logins. "Unless this is one MAJOR coincidence, and that is incredibly unlikely, there's no mistaking it's the same person. The thing that puzzles me is, why would whoever it is be foolish enough to use a commercial grade VPN from home? THAT is the real question."”
SUCCESS (Legendary Computers, rolled +1)
Alex Mishyma
Simple. The same login credentials appear in all three transactions. Unless that is one major coincidence, it is the same person. Why use a commercial VPN from home?
Alex points across the three transaction entries and their matching login fields. The identical credentials sit beside the shared access window, while the residential Massachusetts address remains visible in the portal metadata.
Angela Stone
That is a strong linkage, especially because the credentials persist across separate payment events. The VPN did not hide the account activity, only the connection’s originating address.
The financial investigator circles the VPN sessions, then marks the later residential login. Her pen pauses over the transition, treating the inconsistency as evidence rather than a mistake.
Angela Stone
There are several possibilities. The operator may have believed a commercial VPN was sufficient, may have needed a familiar home workstation, or may have been trying to make the direct login look accidental.
Mara Velez
Or they wanted the records to point toward an ordinary home user while keeping the financial routing professional. Either way, the repeated credentials give investigators a precise place to start.
“"I rule out the accidental login. As I said to you earlier Mara, whoever this is, they are definitely not very tech savvy. I lean more towards he was complacent. Although," pause, lighting a smoke and taking a drag, politely keeping the smoke away from. "One other possibility. Something, or someone, spooked them, and made a desperate act. Let's review that transaction, and how long it has been since."”
SUCCESS (Good Reasoning, rolled +1)
Alex Mishyma
I rule out an accidental login. As I told you, Mara, they are not very tech savvy. Complacent, most likely. Although, something or someone may have spooked them into a desperate act.
Alex lights a smoke and takes a measured drag, angling it away from Mara and the financial investigator. The paper records remain spread beneath his hand.
Alex Mishyma
Let’s review that transaction and see how long ago it happened.
The financial investigator turns to the marked entry and checks its timestamp against the surrounding payment events. Her notes align the transaction with the later residential login.
Angela Stone
This payment cleared eleven days before the direct Massachusetts session. The VPN activity came first, then the home connection followed after a short gap.
Mara Velez
So the desperate act, if that is what happened, came after the money moved. Someone had time to react, or someone pressured them afterward.
Angela Stone
The sequence supports that possibility, but it does not prove motive. What it does establish is a clean review window: transaction, eleven days, then the exposed login.
“Eleven days," you repeat quietly. Something seems off about that. "How long do transfers of this size generally take to clear through the banking system and it's protocols?"”
SUCCESS (Good Reasoning, rolled +1)
Alex Mishyma
Eleven days,
Alex Mishyma
you repeat quietly. Something seems off about that. How long do transfers of this size generally take to clear through the banking system and its protocols?
The financial investigator studies the payment amount, then compares its posting date with settlement notes and the later Massachusetts login. Her pen moves steadily across the margin.
Angela Stone
For a domestic transfer of this size, ordinary clearance is usually one to three business days, depending on the institution and compliance review. Eleven days is unusually long.
Angela Stone
That delay suggests a hold, manual review, staged release, or deliberate scheduling. It does not look like routine banking friction, especially with the direct login afterward.
Mara leans over the paper records without touching them. The eleven-day interval now separates the payment from the exposed connection as an event requiring explanation.
Mara Velez
So the money may have been released on purpose, then followed by pressure or instructions. Can your office identify which institution imposed the delay?
“You sit back again, taking another drag of your cigarette, blowing the smoke to the ceiling, letting the two discuss the matter while you listen.”
Alex sits back and draws another measured drag from his cigarette, then exhales toward the ceiling. The smoke thins beneath the lounge’s muted lights.
He leaves the records untouched and listens while Mara and the financial investigator examine the eleven-day gap, their voices kept low beneath the distant rumble of trains.
Angela Stone
The originating bank can identify the hold, but access will require a formal request or cooperation from the account holder. I can determine which institution handled settlement.
Mara Velez
Would the settlement record show whether the delay came from compliance review, the sender, or the recipient’s bank?
Angela Stone
Usually, yes. The audit trail may show a review code, release authorization, or a scheduled-value instruction. It may also identify which office touched the payment.
Mara marks the question beside the transaction entry, careful not to write over the original figures. The paper trail remains within its agreed boundary, revealing no child-identifying detail.
Angela Stone
I will request the settlement history through the proper channel. If the delay was engineered, that record could show who had the authority to release the funds.
“"Moreso, it will give us a bigger clue on who was on the sending end. And if it points to that Massachusetts residence, you'll have something solid."”
SUCCESS (Good Reasoning, rolled +0)
Alex Mishyma
More importantly, it could identify who was on the sending end. If it points to that Massachusetts residence, you will have something solid.
Alex taps ash into the lounge tray and indicates the eleven-day gap without touching the papers. The cigarette ember catches his fingertip, forcing him to drop it and crush it out.
Angela Stone
Correct. The settlement record can identify the originating institution, the sending account, and the authorization path. If the Massachusetts residence appears in the sender profile or release approval, that is a concrete link.
She writes a request reference beside the transaction number, documenting the precise records needed: sender details, hold code, release authority, and any address attached to the payment instructions.
Mara Velez
Then we are not merely explaining a delay. We are testing whether the home connection belonged to the person who initiated or controlled the transfer.
Angela Stone
I have enough to begin that review through official channels. The settlement trail will show who sent the money, who released it, and whether the Massachusetts address was part of either action.
The request leaves Alex with a confirmed investigative path, though his burned fingertip throbs and the cigarette is gone. The records remain intact beneath the investigator’s careful notes.