Chapter 3 - The Cart That Shouldn’t Have Existed

The message came from Nolan Pierce.
Senior account analyst.
Forty-two.
Divorced.
Excellent with databases.
The kind of man who remembered everyone’s coffee order but somehow forgot every birthday.
We were not friends, exactly.
But we had worked together long enough that I trusted his competence.
That mattered more to me than charm.
I reread his message.
Emily, we need to talk before you go into the office tomorrow.
I typed:
About what?
Three dots appeared.
Disappeared.
Appeared again.
Finally:
Not over text.
That answer would have terrified someone who did not spend all day around fraud cases.
To me, it was useful.
People hiding wrongdoing usually overexplain.
People carrying sensitive information often do the opposite.
I did not decide which category Nolan belonged to.
Not yet.
Can you meet at 7?
His reply came immediately.
Parking garage. Level 4.
I looked upstairs.
Khloe was asleep in my bed.
No.
I was not leaving her.
Tomorrow. 8:15. Coffee shop across from office.
Done.
I closed the chat.
Then I changed every password attached to the grocery account.
Primary email.
Bank login.
Credit card.
Cloud storage.
School portal.
Utilities.
I enabled hardware-based two-factor authentication wherever possible.
At 12:18 AM, Mom tried to log into the grocery account.
Failed.
12:19.
Failed.
12:21.
Password reset requested.
Denied.
12:25.
Tyler tried.
Failed.
12:33.
Mom called.
I watched the phone vibrate.
12:34.
Again.
12:37.
A text.
Did you lock me out of groceries???
I took a screenshot.
At 12:40:
Your father needs food.
Interesting.
Dad suddenly needed food when my card stopped working.
I replied.
Dad can call me directly for anything he needs.
Mom answered:
He is sleeping.
I looked at the time.
Then at Dad’s earlier message.
Everything okay?
For the first time, I wondered how much of my financial support ever reached him.
I opened my banking history.
Utilities.
I had been paying Mom directly because she told me she preferred handling the household accounts.
That had been mistake number one.
I searched for the water-heater emergency from last winter.
$4,600 transferred.
Memo: emergency plumbing / water heater.
I found the date.
Then checked my email.
Mom had sent me a photograph of a leaking tank.
I downloaded the image.
Metadata had been stripped.
Not unusual for a phone image.
Then I ran a reverse internal comparison against files she had previously sent me.
I found the same photograph embedded in an email from three years earlier.
Subject:
Look what happened to Linda’s basement!
Linda was my mother’s cousin in Ohio.
The broken water heater had not been in my parents’ house.
It had been Linda’s.
Three years before Mom asked me for $4,600.
I sat back.
There are moments in an investigation when suspicion becomes certainty.
Not legal certainty.
Not complete certainty.
But the emotional kind.
The moment when your brain stops asking whether somebody lied and starts asking how many lies there were.
I created a new column.
Confirmed Misrepresentation.
Water heater.
$4,600.
Then I searched.
Dad’s dental emergency.
$1,800.
Tyler’s transmission repair.
$2,300.
Mom’s property-tax shortage.
$5,200.
My fingers moved faster.
For every transfer, I searched the supporting text or photo.
I found inconsistencies.
Dad’s supposed dental invoice had the wrong provider phone number.
Tyler’s transmission receipt used an invoice template available free online.
The property-tax amount did not match county records.
I did not sleep.
At 5:40 AM, I heard footsteps.
Khloe stood at the bottom of the stairs wearing my oversized cardigan.
“Mom?”
I closed the laptop.
“What are you doing awake?”
“You weren’t upstairs.”
She sounded afraid.
I crossed the room immediately.
“I’m here.”
She hugged me.
“Are you working?”
“A little.”
“Because I ate too much?”
That sentence nearly destroyed every professional wall I had left.
“No.”
I crouched.
“None of this is because of what you ate.”
She looked toward the laptop.
“Are you fixing the debt?”
“There is no debt.”
“Then what are you fixing?”
I thought about it.
“A grown-up problem.”
“Grandma?”
“Yes.”
She nodded.
Then she whispered, “Uncle Tyler too?”
“Yes.”
Another nod.
She did not look surprised.
That bothered me.
“Khloe, did Uncle Tyler ever tell you things about money?”
She picked at the sleeve of my cardigan.
“Sometimes.”
“What things?”
“He said Grandma was right.”
“About what?”
“That you had enough money because you don’t have a husband.”
I stared at her.
“He said that?”
“He said you only have one kid, so it’s easy for you.”
I sat down slowly.
Tyler had no children.
No job.
No mortgage.
No medical debt that I knew of.
Yet somehow I was the one whose life was easy.
Khloe continued.
“He said when he gets a job he’ll pay you back.”
“Did he say how much?”
“No.”
“Did he ever ask you not to tell me things?”
She nodded.
“What things?”
“When packages came.”
“What packages?”
“Big ones.”
“How often?”
“A lot.”
“What was inside?”
“I don’t know. Grandma made me go upstairs.”
I took a breath.
“Anything else?”
Khloe hesitated.
Then:
“Grandma has another card with your name.”
Every muscle in my body locked.
“What card?”
“A blue one.”
“Credit card?”
“I think.”
“Where did you see it?”
“In her purse.”
“How do you know it had my name?”
“Because she dropped it and I picked it up.”
I held completely still.
“What exactly did it say?”
Khloe shrugged.
“Emily Carter.”
A credit card in my name.
At my mother’s house.
One I did not possess.
I stood.
My investigation had just changed categories.
Until that moment, I was looking at misuse of money I voluntarily transferred.
Deception.
Manipulation.
Possibly insurance fraud regarding the watch.
A credit account opened in my name without permission was different.
Identity theft.
Potential credit fraud.
I opened my credit-monitoring service.
I had not checked the full report in four months.
My score looked normal.
No obvious new revolving accounts.
Then I opened the detailed inquiries section.
There.
An inquiry from eleven months earlier.
Midland Community Bank.
I did not remember applying.
I searched email.
Nothing.
Then the closed-account section.
A credit card.
Opened eleven months ago.
Closed three months ago.
Maximum balance: $14,870.
Current balance: $0.
Why had I never noticed?
Because it had been paid off.
Fraudsters who steal identities usually leave debt.
Unless the purpose is not to take money permanently.
Unless the account is being used to create transaction history.
Move funds.
Wash purchases.
Hide reimbursements.
My stomach tightened.
I pulled the address.
My parents’ house.
I called Midland at 6:12 AM.
The fraud department opened at seven.
Fine.
I waited.
At 6:30, I made Khloe pancakes.
Three.
She ate two and wrapped the third.
“What are you doing?”
“Saving it.”
“For later?”
She nodded.
I almost told her she did not need to.
Then I stopped.
Control around food had been taken from her.
I would not take more control by forcing her to behave normally before she felt normal.
“Good idea.”
She smiled.
At seven, I called Midland.
Identity verification took eleven minutes.
The representative confirmed the account existed.
“I need application records.”
“You’ll need to submit an identity-theft affidavit if you’re disputing authorization.”
“I am.”
“Did you authorize another cardholder?”
“No.”
A pause.
“There was one.”
“Who?”
“I can’t disclose the full information until the case is opened.”
“Open it.”
The representative transferred me.
Twenty-six minutes later, a fraud specialist named Janet said something that made my blood run cold.
“Ms. Carter, the application was completed online using verification documents.”
“What documents?”
“Driver’s-license image. Social Security verification. Proof of address.”
I stared at my kitchen wall.
Someone had not guessed my information.
They had possessed documents.
“Can you tell me the authorized user?”
“Yes, now that the fraud claim is active.”
I waited.
“Margaret Carter.”
My mother.
Of course.
Then Janet added:
“There was also a secondary employee card attached to a business sub-account.”
My heart stopped for half a beat.
“Business account?”
“Yes.”
“I don’t own a business.”
Silence.
Typing.
“That may be another issue.”
“What business name?”
More typing.
“EC Risk Consulting LLC.”
I stood so fast the chair scraped the floor.
I had never formed EC Risk Consulting.
But somebody had formed it using my initials.
I searched the state corporate registry.
There it was.
EC Risk Consulting LLC.
Created fourteen months earlier.
Registered agent:
Nolan Pierce.
My coworker.
The man who wanted to meet me before work.
I looked at his text again.
8:15. Coffee shop.
Then another message appeared.
7:04 AM.
Emily, don’t confront your family yet.
A second message arrived before I could respond.
They’re not the only people using your name.
Then a third.
And this one contained a photograph.
A photograph of a file sitting on Nolan’s desk.
Across the cover, in thick black letters, someone had written:
CARTER — INTERNAL REVIEW.
May you like
Below it was yesterday’s date.
Someone at my company had opened an investigation into me.