Ransom and secret theft plan against Scanguards

The plan targeting Scanguards is a layered corporate-crime scheme in which John Reardon’s small-scale fraud becomes the access point for a much larger operation. Delilah Sheridan’s audit exposes irregularities, the blackmailer uses John’s fear to control him, and encrypted transactions ultimately reveal that the threat extends beyond manipulated books to the company’s protected financial infrastructure.

Causes and Background

Delilah Sheridan arrives in San Francisco on her first business trip there because statistical reviews at the headquarters have identified abnormal accounting ratios in the San Francisco branch. Scanguards deliberately hires an external auditor with no prior relationship to the West Coast staff, since auditors can become too familiar with the employees they are meant to examine. Delilah’s specialty is forensic accounting, making her particularly suited to determine whether the unusual figures result from incompetence or deliberate fraud.

Her early findings establish the opening of the scheme. Depreciation has been manipulated methodically for almost a year, yet records from both the current and preceding year have already been placed in storage, an unusual decision because companies generally archive material more than three years old. Delilah therefore insists on seeing the original documents rather than relying only on electronic entries. The originals can show who initiated and approved each booking, while the computer system identifies only the employees who entered the data and the lower- or middle-management personnel whose passwords authorized it.

The scheme is enabled by weaknesses in ordinary workplace practice. Employees sometimes share passwords despite company rules, so a password attached to a suspicious transaction cannot by itself establish who was responsible. Delilah’s insistence on paper records turns the audit into an investigation of the entire authorization chain rather than a simple search for an incriminating username. Her question to John Reardon about whether he has obtained the files from storage intensifies his fear, because he knows the documents may directly identify him as the person defrauding the company.

John Reardon and the Blackmail Network

John’s own misconduct begins with falsified books and the embezzlement of several thousand dollars. He initially believes that manipulating the records has solved his financial problems, but an unidentified man later contacts him and says that he knows what John has done. In exchange for silence, the man demands access to Scanguards’ books. John never asks why the information is wanted, reasoning that ignorance will protect him, but the demand for his company username and password signals that the blackmailer’s objective is larger than John’s personal theft.

Delilah’s arrival from New York changes the pressure surrounding John. He fears that the audit will end his career and lead to criminal prosecution, yet the blackmailer imposes an even more immediate threat: John must get rid of the auditor or be eliminated himself. John has never seen the man and knows neither his name nor his identity; their relationship exists entirely through telephone calls. The blackmailer claims to have eyes and ears everywhere and condemns John for failing to act while Delilah was vulnerable.

The telephone exchange turns coercion into an operating command. The blackmailer says that he will handle the matter himself because Delilah is now protected, then gives John one more week to keep her, or any other auditor, out of the books. John apologizes, promises that there will be no further problems, and remains convinced that the situation is not under control. His fear makes him both perpetrator and compromised instrument: he has committed fraud, but the larger theft is being directed through him by someone whose plan he does not understand.

John also has access to a useful enforcer in Billy, his brother-in-law. Billy has a lengthy criminal record, enough contacts to carry out dangerous assignments, and a persistent need for money, while John can manipulate him in ways he cannot control the blackmailer. This family connection gives the operation a practical means of applying violence, but it also exposes the instability of the network: John’s compliance is produced by fear, and Billy’s by financial dependence.

The Accounting Mechanism

Delilah identifies a specific method behind John’s fraud. John is authorized to write off old assets valued below $2,500 without obtaining another signature from headquarters. He accelerates depreciation until an asset’s book value falls beneath that threshold, thereby bypassing Scanguards’ internal controls. Once the asset has been reduced on paper, he transfers it to someone outside the company, who sells it for its actual value. John returns the nominal write-off value to the company and keeps the difference.

The method explains why the fraud can persist while appearing comparatively minor. It converts accounting judgment into an opportunity for asset theft: depreciation changes the recorded value, the authorization threshold removes an additional review, and an outside seller realizes the difference between the artificial book value and the asset’s true market value. Delilah’s examination of original records is essential because the electronic approval trail alone cannot reliably distinguish the real initiator from the employee whose shared or misused credentials appear on the transaction.

The plan’s limits are also revealing. Scanguards keeps relatively little fixed property because many buildings are rented and vehicles are leased, but it operates with substantial liquidity. Directly stealing cash would seem easier than conducting a complicated depreciation fraud. Delilah explains that the company’s cash controls are stronger: every cash transfer requires dual approval, so John could not move the money alone. The low-value-asset threshold therefore provides the opening that the cash system denies him.

Expansion into a Larger Theft

The evidence eventually suggests that John’s embezzlement is only the visible edge of the operation. Delilah and Amaury revisit the facts and recognize that John may have been used to prepare access for a broader scheme. Amaury asks Thomas, Scanguards’ information-technology expert, to examine encrypted files uploaded to headquarters because John Reardon appears to be involved in more than stealing a few thousand dollars.

Thomas’s expertise matters because the files are not merely suspicious documents; they are encrypted data connected to the company’s central systems. Amaury can break the encryption himself, but Thomas can do it more quickly, making the investigation dependent on the same technical infrastructure that the conspirators are exploiting. The contrast is central to the plan: Delilah reconstructs the crime through anomalies, originals, and authorization records, while Amaury and Thomas follow the digital trail into the company’s protected systems.

The later transaction screens expose the escalation directly. Thomas is logged in and authorizing John Reardon’s encrypted transactions, while approval notices fill the screen with successive pop-up windows. This does not present John’s fraud as an isolated act of falsification; it connects his credentials and transactions to an active process for moving Scanguards’ assets through encrypted channels. The operation has shifted from quietly reducing the value of individual assets to using an internal account and an apparently legitimate authorization session to advance a larger transfer.

Consequences and Narrative Significance

The threat against Delilah is a defensive maneuver triggered by the audit. Her presence threatens to connect abnormal depreciation, stored originals, authorization responsibility, and John’s role in the fraud. The order to remove her therefore reveals the plan’s priorities: protecting the books is more urgent than protecting John, and violence becomes the means of preserving a financial concealment that ordinary accounting controls might otherwise uncover.

The conspiracy also creates a chain of escalating exposure. Delilah begins with statistical anomalies, then demands original documentation; John’s anxiety reveals that the records matter; the blackmailer’s demands reveal an unseen claimant to the company’s data; encrypted uploads widen the suspected crime; and the transaction screens show that access is being used in real time. Each stage changes the apparent scale of the offense, moving from possible incompetence, to John’s embezzlement, to coercion, and finally to an organized attempt to penetrate Scanguards’ financial operations.

Its lasting significance lies in the collision between institutional safeguards and the human relationships around them. A depreciation threshold, shared passwords, stored records, dual cash approval, telephone threats, family connections, and technical expertise all become parts of the same criminal architecture. Scanguards is not endangered by one spectacular breach but by the conversion of routine procedures into weapons. Delilah’s forensic method makes that conversion visible, while the attempt to silence her confirms that the audit has reached the point where hidden control of the company’s books can no longer remain safely hidden.