“Megan, did you authorize eighteen thousand four hundred dollars for orchids?”

I looked up from my laptop.

Tara Webb, my controller, stood at the end of the conference table holding a printed expense report.

“Orchids?”

“Imported ones.”

It was Monday morning. Six department heads were sitting around the table at the Manhattan office of my company, Hartwell Event Systems, waiting for me to approve the quarterly budget.

Tara placed the report in front of me.

$18,400.

The merchant description belonged to a floral company I had never used.

Underneath it was another charge.

$62,000.

Hudson Valley.

Event deposit.

I stared at the two numbers.

“What card?”

Tara gave me the last four digits.

I knew them.

The card belonged to my personal premium account.

But the person carrying that particular authorized-user card was supposed to have destroyed it four months earlier.

My ex-boyfriend, Ryan Mercer.

I picked up my phone.

“Give me ten minutes.”

The meeting ended without anyone asking why.

I went into my office and shut the door.

Four months earlier, Ryan and I had ended a three-year relationship after I found messages between him and a woman named Brooke Lawson.

He called her a business contact.

Then a friend.

Then someone who had been “helping him through a difficult period.”

I didn’t need a fourth explanation.

Ryan had been an authorized user on one of my cards because we traveled frequently together. I owned a technology company that built payment systems for luxury hotels, and my work sometimes required last-minute travel.

The arrangement had once been practical.

After we separated, I asked him about the card.

“Already cut it up,” he told me.

I believed him.

That Monday morning, I learned I shouldn’t have.

The Wedding Website

Tara came into my office carrying her laptop.

“There’s more.”

She turned the screen toward me.

The $18,400 orchid payment wasn’t random.

Neither was the estate.

Both vendors appeared on a wedding website.

Ryan Mercer and Brooke Lawson.

Saturday.

Five days away.

Three hundred guests.

For a few seconds, neither of us spoke.

Then Tara scrolled.

There was Ryan standing beside a vintage black Mercedes.

My Mercedes.

Another photograph showed Ryan and Brooke drinking champagne in an apartment overlooking Manhattan.

My company leased that apartment for visiting executives.

Then I saw Brooke.

She was wearing a green emerald necklace.

I leaned closer to the screen.

“Go back.”

Tara did.

I recognized it because I had seen the invoice three weeks earlier.

$11,700.

I had assumed it was a corporate hospitality expense waiting to be properly categorized.

It wasn’t.

I pulled out a legal pad.

“Don’t call him.”

Tara looked at me.

“I wasn’t going to.”

“Don’t call any vendors either. Don’t dispute anything yet. First I want every transaction connected to that card.”

She nodded.

“How far back?”

“April nineteenth.”

That was the day Ryan moved out.

By lunchtime, we had a spreadsheet.

Venue.

Flowers.

Jewelry.

Band.

Champagne.

Transportation.

Hotel rooms.

Bridal gown.

Honeymoon suite.

The number at the bottom was $347,860.

I checked it twice.

Tara sat across from me.

“How does someone spend nearly three hundred fifty thousand dollars and assume nobody will notice?”

I looked again at the wedding website.

Ryan was smiling beside my car.

“Because he thought I wouldn’t look until after Saturday.”

That part bothered me almost as much as the money.

He had planned around my silence.

My Company Was Apparently Paying for the Wedding

At 2:15 that afternoon, Tara found the first invoice carrying my company’s name.

HARTWELL EVENT SYSTEMS
CORPORATE SPONSOR

I read it twice.

“We don’t sponsor private weddings.”

“I know.”

Then she showed me another document.

It was a letter sent to the estate.

According to the letter, Hartwell Event Systems had agreed to sponsor Ryan’s wedding as part of a hospitality-industry promotional partnership.

At the bottom was my name.

Megan Hartwell.

And beneath it was my electronic signature.

I hadn’t signed it.

I stood up and walked to the window.

Traffic moved slowly below my office.

Tara remained silent behind me.

I had started Hartwell Event Systems nine years earlier from a rented desk in Brooklyn. We processed hotel event payments, deposits, guest billing, and vendor settlements.

My company’s name mattered because hotels trusted it.

Ryan knew that.

He also knew vendors would treat a payment differently if they believed a company worth tens of millions of dollars stood behind it.

I returned to my desk.

“Save everything.”

“Already started.”

“Not just screenshots. Original emails. Attachments. Metadata if we have it. Put copies somewhere he can’t access.”

Tara closed the laptop.

“You think he still has company access?”

I didn’t answer immediately.

Ryan had occasionally helped with business development when we were together. His regular account had been disabled after our breakup.

At least, that was what I had been told.

I called our attorney, Allison Grant.

I gave her the shortest version possible.

She interrupted only once.

“Has Ryan contacted you?”

“No.”

“Good. Don’t contact him.”

That was easy.

I had no intention of warning him.

Someone Had Been Inside

By Tuesday afternoon, our IT administrator found something I hadn’t expected.

Ryan’s normal login was dead.

But an old storage portal had been configured incorrectly during a system migration.

A previous access token connected to Ryan’s account still worked there.

Someone had used it.

Multiple times.

Usually after midnight.

The activity included uploading sponsorship letters.

One of them was the letter carrying my signature.

I sat beside our IT administrator while he pulled up the access history.

“Can you tell where this came from?”

He pointed at the screen.

“Not from this alone. But we can preserve the logs.”

Later that evening, additional records narrowed the access to an internet connection associated with Ryan’s apartment building.

I called Allison.

“We found the door he used.”

“Close it. Preserve everything first.”

So we did.

Ryan still hadn’t called me.

Wednesday passed.

Then Thursday.

Meanwhile, the wedding website kept changing.

A countdown appeared.

TWO DAYS TO GO.

Brooke posted a photograph from the estate.

Behind her stood a huge wooden frame being covered with white orchids.

I recognized those flowers immediately.

$18,400.

I saved the photograph.

Friday Morning

At 8:07 Friday morning, I called the bank’s fraud department.

I had Tara beside me and Allison on another line.