Chapter 2 - The Account Daniel Never Touched

The ambulance took me from the banquet.
I hated leaving.
Victor probably loved watching me disappear on a stretcher.
But Marcus leaned beside me before the doors closed.
“Do not turn medical stupidity into strategy.”
I almost smiled.
That was his way of saying:
Stay alive.
The emergency team removed my soaked dressings.
The burns were painful but mostly superficial where the robe and surgical padding had absorbed some heat.
The incision remained closed.
My sternum had not reopened.
That mattered more than Victor’s humiliation.
By midnight, I sat in a private hospital room with fresh dressings and an IV while Marcus opened his laptop.
Detective Nora Hall sat across from us.
Daniel’s criminal attorney joined by video.
The Zurich account appeared on screen.
Holder:
Cresswell Advisory AG.
Swiss corporate entity.
Opened eleven months earlier.
Incoming transfers:
$1.2 million.
$900,000.
$2.4 million.
$1.1 million.
Then several smaller amounts.
Total:
$7.96 million.
Almost exactly the amount Daniel was accused of stealing.
But the timing was wrong.
The first transfer arrived eleven months earlier.
Daniel’s alleged scheme supposedly began six months ago.
“Where did the money come from?” I asked.
Marcus enlarged the source records.
Ashford Development Reserve.
Ashford Family Office.
Ashford Medical Ventures.
Three entities.
All connected to Celeste and Victor.
None controlled by Daniel.
Then:
“Why was Daniel arrested?”
Detective Hall answered carefully.
“Because the eight million dollar loss identified by the trust audit was routed through accounts that appeared to terminate at Daniel controlled entities.”
“Appeared?”
Marcus opened another diagram.
Cayman shell:
DHL Advisory Partners.
Daniel’s initials.
A Delaware company:
Hale Strategic Consulting.
Daniel’s surname.
A digital wallet registered using Daniel’s work email.
All roads pointed toward him.
But the actual transfer chain forked.
Some funds went Cayman.
Some Zurich.
The Cayman trail was visible.
Zurich was not.
Why?
Because the audit report prosecutors received contained only one branch.
“Who prepared the audit?”
“Ashford Trust internal compliance.”
“Who signed it?”
Victor.
Of course.
Then security footage.
Daniel entering trust office at 12:41 a.m.
Three nights before the main transfer.
Marcus played it.
Daniel walked through a marble lobby.
Looked toward camera.
Entered elevator.
Timestamp clear.
I knew immediately something was wrong.
“What?”
Marcus looked at me.
“Daniel was with me that night.”
“Where?”
“My hospital.”
Six weeks before surgery, I had collapsed during a cardiac test.
Daniel stayed with me until morning.
Marcus visited because we were finalizing patent sale paperwork.
Hospital visitor logs.
Parking records.
Cafeteria receipt.
Security cameras.
Daniel could not have been at Ashford headquarters simultaneously.
Then what was the footage?
A real recording of Daniel from another date with altered timestamp.
Marcus had already found matching clothing.
Same coat.
Same folder.
Video from three weeks earlier.
Someone copied it.
Changed time display.
Exported as separate file.
Then Detective Hall said:
“The prosecution did not have the original server archive when Daniel was arrested.”
“Why not?”
“Ashford said a server migration corrupted it.”
Marcus looked at me.
“That migration never happened.”
He knew because Meridian financed Ashford’s data center upgrade.
No migration was scheduled.
Someone lied.
Then Daniel’s phone messages.
Marcus displayed them.
Daniel:
Move eight before audit.
We cannot let Elena see.
Second message:
Use offshore route.
Delete after.
The number belonged to Victor.
Except Daniel’s phone extraction showed none of these messages.
They existed only in screenshots submitted by Ashford.
No carrier metadata.
No device metadata.
Images.
Fabricated.
“Then why is Daniel still in custody?”
His attorney answered.
“Because the digital signature on the Cayman transfers is real.”
That stopped me.
“What?”
Daniel’s cryptographic certificate signed three approvals.
Not a screenshot.
Not copied handwriting.
A valid certificate.
“How?”
Nobody knew yet.
Daniel had used that certificate for Ashford advisory work two years earlier.
It should have been expired.
It had been renewed.
Without him knowing.
Renewal required identity documents.
Phone verification.
And a notarized confirmation.
The notary:
Celeste Ashford.
My stepmother.
Marcus looked at me.
“She certified Daniel appeared before her.”
“He didn’t.”
“No.”
Celeste had created the key that made the framing believable.
Then Zurich.
Why hide it from prosecutors?
Because the Cayman path existed to blame Daniel.
Zurich likely contained the actual destination.
The family had split one flow into two stories.
One criminal narrative.
One real money trail.
Then Marcus opened a bank alert from the banquet.
The Zurich account had been frozen because Meridian, after acquiring Ashford Fiduciary’s secured debt, invoked an enhanced fraud review on related entities.
That was why Celeste panicked.
Not because police approached Victor.
Because money she thought hidden had stopped moving.
Then another detail.
Cresswell Advisory’s authorized representative:
C. ASHFORD.
Could be Celeste.
Could be another Ashford.
The Swiss file used only initial.
But passport nationality:
United States.
Year of birth:
Celeste was born in 1970.
My pulse changed.
Then Marcus said:
“There is still a problem.”
“What?”
“The Zurich account is not the oldest destination.”
He opened another ledger.
Seven years earlier.
Three transfers.
Same routing family.
Different account.
Recipient:
Bellmere Custodial Trust.
Amount:
$14.6 million.
Seven years.
Long before Daniel had any role in Ashford finances.
Long before Victor could blame him.
I stared.
“Who was managing the family trust then?”
Marcus answered:
May you like
“Your father.”
Continue to the next part: The hidden money trail began years before Daniel could possibly be responsible, when Elena’s late father still controlled the Ashford trust and Celeste was only his second wife.