The exposure of Scanguards’ internal theft conspiracy is the turning point that connects Delilah Sheridan’s audit, John Reardon’s embezzlement, and Milo’s larger plan to seize Samson Woodford’s wealth. What first appears to be a problem of altered bookkeeping expands into an organized betrayal involving access privileges, encrypted files, stolen passwords, family loyalty, and an attempted flight from San Francisco. The discovery also changes the meaning of several earlier encounters: Delilah’s presence with confidential company records, Ilona Hampstead’s suspicious interest in company computers, and the timing of John Reardon’s death all become parts of one connected criminal design.

Causes and Background

Delilah’s investigation begins with an anomaly in the company books. She finds that someone has been manipulating depreciation entries in a methodical pattern that seems to have continued for almost a year. The timing itself is suspicious: records from the current and previous year have already been placed in storage, even though most companies would not archive material until it was more than three years old. That premature removal threatens the audit trail by separating the transactions from the original documents needed to identify who initiated and approved them.

The accounting method gives John Reardon an opportunity to exploit Scanguards’ internal controls. John is authorized to write off old assets valued below $2,500 without obtaining another signature from headquarters. By accelerating depreciation, he can force an asset’s book value beneath that threshold and approve its disposal himself. The asset can then be passed to someone outside the company, who sells it for its actual value. John returns only the artificially reduced write-off amount to Scanguards and keeps the difference, turning an authorization designed for routine low-value disposal into a channel for concealed theft.

Delilah recognizes that the cash-transfer controls are more secure. Every cash transfer requires two approvals, so John could not have carried out the same method alone through direct cash movement. This distinction leads her and Amaury to reconsider the scale and structure of the crime. John’s smaller embezzlement explains the manipulated asset records, but it does not explain the encrypted material being uploaded to Scanguards’ headquarters or the later attempt to authorize a much larger transfer.

The investigation also reveals that the conspiracy is protected by personal pressure. Delilah reasons that John became nervous when the audit began to expose what he had taken, and that he hired his brother-in-law, Billy, either to kill her or to drive her away. John is subsequently murdered before he can explain the full arrangement. Because Billy has already been caught, the killing cannot be treated as a random act or as a complete explanation of the threat. John’s death instead suggests that someone had a reason to prevent him from identifying the larger operation behind his own theft.

What Happens

Amaury discovers that John Reardon’s encrypted data concerns something more substantial than a few thousand dollars. He asks Thomas, Scanguards’ technical expert, to break into the files and determine their contents. While the investigation proceeds, a company employee recalls seeing Ilona at John’s computer when John was away. When Ilona noticed the employee, she pretended to be looking for a pen and paper; later that same night, Samson threw her out. The recollection becomes newly significant when the employee remembers seeing Delilah at a computer and links the two incidents through the same suspicious setting.

The immediate crisis occurs when Amaury opens the transaction screens and sees Thomas logged in while encrypted files belonging to John Reardon are being authorized. Approval notices fill the screen, making it appear that Thomas himself is carrying out the transfers. The visible evidence points toward Samson’s trusted information specialist, but the apparent authorization is a constructed deception: Thomas’s credentials have been compromised, and his account is being used to move the stolen funds.

Thomas is found in serious condition and is given blood by Ricky. Once he can speak, he explains that Milo stole his password and is trying to ruin him. Thomas apologizes to Samson, but Samson recognizes that none of them anticipated the betrayal and is relieved that Thomas has survived. Thomas insists that the transfers can still be reversed if they hurry, then identifies the wider danger: Milo is acting for Ilona, and Ilona is his sister. Her objective has been Samson’s money all along.

Thomas’s explanation reconstructs the conspiracy’s sequence. Milo first infiltrated Samson’s circle and won Thomas’s trust. He then sought a way to reach Samson’s finances, discovered whom he needed to pressure in order to obtain the relevant books, and stole Thomas’s username and password to complete the operation. His resistance to letting the group speak with the accountant now makes sense: that conversation could have exposed the missing link between John’s accounting fraud and Milo’s transfer scheme. The timing is equally revealing. Milo appeared directly after Samson ended his relationship with Ilona, suggesting that his arrival was not accidental but part of Ilona’s continuing effort to reach Samson’s wealth.

Thomas is able to track a chip he secretly placed in Milo’s phone while recording Milo’s conversations. He recognizes Ilona’s voice on the recordings and confirms that they are siblings. Their resemblance had previously gone unnoticed, but after the revelation their shared gestures become visible to him. The chip places Milo near Ilona’s apartment, where the two are apparently packing to leave the city. Their escape gives the investigation an urgent physical dimension: the financial crime is no longer confined to screens and ledgers, because the conspirators may still harm anyone who can identify them.

Participants and Methods

Delilah supplies the audit logic that makes the fraud legible. Her attention to depreciation, archival timing, original authorization records, and the difference between data entry and approval prevents the company from treating the irregularities as mere clerical mistakes. She understands that computer records show which employee’s credentials were used, not necessarily who actually initiated the transaction. The original documents are therefore essential to reconstructing responsibility, especially in a workplace where employees may share passwords despite company rules.

John’s role is the first layer of the theft. He exploits a precise authorization threshold, disguises valuable assets as low-value write-offs, and uses an outside party to recover their real market value. Milo’s role is more ambitious and technologically aggressive. He steals Thomas’s login credentials, uses them to authorize encrypted files, and attempts to redirect Scanguards’ money through delayed transfers. The contrast separates ordinary-looking accounting manipulation from a larger operation designed to conceal both the destination of the funds and the identity of the person approving them.

Ilona’s role changes from former lover to hidden organizer and beneficiary. Samson had assumed that ending their relationship ended the danger, but Thomas’s testimony shows that Ilona continued pursuing his money. Milo’s infiltration of Scanguards becomes an extension of her campaign, while his intimate knowledge of the company’s personnel and systems supplies the access she could not obtain openly. Their familial bond gives the conspiracy a private center concealed inside professional and romantic relationships.

The plot also exposes a conflict between visible evidence and actual agency. The computer displays Thomas’s name, authorization codes, and active session, yet Thomas is the victim rather than the perpetrator. The system records credentials but cannot distinguish legitimate use from theft of identity. The audit therefore has to move beyond the apparent digital answer and connect permissions, motives, physical observations, recordings, and the movement of the conspirators themselves.

Consequences and Aftermath

The immediate consequence is the rescue of Thomas and the preservation of a chance to recover Scanguards’ money. His condition improves after Ricky gives him blood, and he returns to his computer with Samson and Amaury supporting him. Thomas explains that the transfers are caught in a time-delayed loop created by a small security program he installed weeks earlier. He believes the transactions can be reversed, provided Samson captures Milo and Ilona before they escape or injure anyone else.

The discovery also changes Samson’s understanding of Delilah. Ricky had suspected that she might have selected Samson deliberately because she arrived carrying Scanguards’ confidential financial and asset records. He points out that she has already wrapped Samson around her finger, making her seem potentially connected to the scheme. Yet the evidence does not establish Delilah as a conspirator. Her audit uncovers the theft rather than enabling it, and her questions about the books place her in opposition to John, Milo, and Ilona. The suspicion nevertheless matters because it shows how completely the conspiracy has contaminated Samson’s ability to trust appearances.

Samson’s response to the danger reveals an additional personal consequence. Ricky suggests wiping Delilah’s memory so that she cannot learn the truth about the vampires or become a liability. Samson acknowledges that the suggestion is practical, but he cannot bring himself to use mind control on her. He does not want anything to taint their relationship. In the midst of a corporate theft investigation, the question of evidence becomes inseparable from the question of consent: protecting Delilah could require controlling what she knows, yet Samson’s attachment makes that solution morally unacceptable to him.

The conspiracy therefore produces two recoveries at once. Thomas regains enough strength to identify Milo, Ilona, and the stolen credentials, while Scanguards gains a chance to recover the money through Thomas’s delayed-transfer safeguard. At the same time, Samson recovers the true shape of the threat. John’s manipulated assets were only the visible edge of the crime; the deeper operation depended on infiltration, family collaboration, digital impersonation, and the exploitation of trust. The exposure turns scattered suspicions into a coherent chain and propels Samson’s group from investigation toward pursuit.