John Reardon plots to embezzle funds

John Reardon’s plan to embezzle from Scanguards started with understated asset values and a seemingly limited opportunity to take the difference from discarded equipment. The scheme was driven by personal financial pressure, but it became entangled with a blackmailer who demanded access to company records and ordered him to remove an auditor. As Delilah Sheridan’s investigation uncovered the mechanics of his theft, encrypted transactions and suspicious system activity pointed beyond John’s relatively small fraud toward a larger operation.

Origins and financial pressure

John later explained that he began altering the books through accounting entries that reduced equipment to scrap value, then arranged for the assets to be sold and kept the difference. He had recently bought a new house, and a rise in his mortgage interest rate left him unable to keep up with payments. He knew that financial strain did not justify stealing, but regarded the pressure as the reason he had acted.

The records suggested that the depreciation manipulation had continued for about a year. That short period became a clue as well as a measure of the apparent scale of the fraud: the entries looked systematic, yet the amount John could have taken this way seemed too small to explain the danger surrounding the audit. The mismatch between the methodical accounting and its limited apparent yield helped raise the possibility that the asset sales were only one part of the story.

How the asset scheme worked

John was authorized to scrap old assets valued below $2,500 without obtaining another sign-off from headquarters. He exploited that threshold by accelerating depreciation until an asset’s book value fell below the amount he was permitted to approve. This made the disposal appear to fall within his authority while circumventing the company’s internal controls.

The next step converted the accounting reduction into personal gain. John transferred an asset to someone outside Scanguards, who could sell it for its real value. The company received the recorded scrap value, while John kept the difference. The method depended on the gap between the depreciated figure in the books and what the equipment could actually fetch, rather than on taking cash directly from company accounts.

That distinction mattered to the investigation. Scanguards’ cash-transfer procedure required two approvals, making a solo theft of liquid funds harder to conceal. The asset route, by contrast, let John act within a low-value disposal limit after manipulating the values that governed it. Delilah’s review of the procedure manual and transaction records made the scheme intelligible as a control failure exploited from inside, rather than a simple disappearance of cash.

The blackmailer and the widening threat

After John had begun cooking the books, an unidentified man contacted him and threatened to expose him. In exchange for silence, the man demanded access to Scanguards’ books. John did not ask what the man intended to do with that access, reasoning that knowing less was safer. The demand placed John in a second compromising position: he was no longer only hiding his own theft, but was also allowing an unknown person to reach company information.

The pressure escalated when Delilah arrived from New York to investigate the San Francisco branch. John feared that the audit would expose his entries, end his career, and lead to criminal prosecution. The blackmailer made the danger more immediate by ordering him to get rid of the auditor and threatening to get rid of John if he failed. John had never met the man and knew him only through telephone calls, but the threat and the man’s persistent availability convinced him that it was serious.

John turned to his brother-in-law, Billy, whose criminal record and need for money made him useful to manipulate. He asked Billy to keep the matter from his wife, Karen, and considered using him to kill or frighten Delilah away. Billy balked at the explanation John offered, judging the theft of equipment and the resulting money insufficient grounds for attacking an auditor. John’s own reluctance to tell him about the blackmailer left Billy with only the smaller, self-serving account of the scheme.

The audit exposes the limits of John’s story

Scanguards’ central office had noticed that the San Francisco branch’s ratios between fixed assets and depreciation were abnormal. It chose an outside forensic accountant with no prior ties to the local staff, partly to reduce the risk that auditors would become too familiar with the employees they were examining. Delilah recognized both the unusual figures and the significance of the records: she needed the original documents to establish who had initiated and approved the entries, since computer records alone did not show the full authorization chain.

The timing of the archived paperwork also troubled her. Records from the current and preceding year had already been sent to storage, though businesses commonly retained documents on-site for longer. When Delilah asked John whether he had retrieved the original files, he said they were at the loading dock and promised to have them brought up. He understood that once she examined the underlying documents, she would be able to identify him as the person defrauding the company. His hostile response and the audit’s demand for source records thus converged on the same vulnerability: the entries could be disguised, but their authorization trail could expose the person behind them.

Even after the asset-disposal method was reconstructed, Delilah and Amaury questioned whether it explained the full threat. They reasoned that the possible proceeds—perhaps tens of thousands, or even a hundred thousand dollars—were small beside the risk of arranging an attack. John’s death before they could confront him further suggested that someone had a reason to prevent him from explaining what he knew. Their conclusion was that his depreciation fraud was not enough to account for the attempt to silence the auditor; John had helped someone with a much larger scheme.

Evidence of a larger operation

The investigation found that John had uploaded encrypted data to Scanguards’ headquarters. Amaury sought Thomas’s technical help to examine the files, suspecting that John’s involvement extended beyond embezzling a few thousand dollars. Later, transaction screens showed Thomas logged in and authorizing encrypted transactions associated with John, while approval notices appeared across the display. Those records intensified the distinction between John’s visible asset scheme and the unexplained activity moving through the company’s systems.

John’s plan therefore occupies two levels in the financial mystery. At the narrow level, it is a concrete fraud built on accelerated depreciation, a $2,500 disposal threshold, outside resale, and mortgage pressure. At the broader level, his willingness to provide access to company books, the blackmailer’s demand to remove Delilah, and the encrypted activity linked to his records make him a compromised point of entry into a larger theft. The audit does more than uncover how John pocketed the difference: it reveals that his small, traceable fraud may have concealed a far greater danger to Scanguards.