John Rillen's asset theft plan

John Reardon's asset-theft scheme is the accounting mechanism through which an apparent irregularity at the San Francisco branch becomes evidence of organized fraud. The plan exploits depreciation rules and internal authorization limits to remove company assets at artificially reduced book values, while the surrounding investigation reveals that the theft is connected to confidential records, intimidation, and a larger attempt to strip Scanguards of its wealth.

Discovery Through Forensic Accounting

Delilah Sheridan arrives in San Francisco as an outside forensic accountant after statistical reviews at headquarters identify abnormal relationships between fixed assets and depreciation in the branch accounts. Because she has had no prior contact with the West Coast staff, she is intended to investigate without the familiarity that can compromise a routine audit. The irregularities suggest either extreme incompetence or deliberate fraud, and Delilah quickly concludes that the depreciation figures have been methodically manipulated for almost a year.

The timing of the archived records deepens the suspicion. Documents from the current year and the preceding year have already been placed in storage, even though companies generally archive material only when it is more than three years old. Delilah therefore asks John Reardon for the original documents rather than relying solely on computer entries. The electronic records identify employees who entered transactions and managers who approved them, but the originals can establish who actually initiated and authorized each booking. The audit trail points toward John Reardon, whose authorization appears throughout the suspicious transactions.

The Mechanics of the Scheme

The plan depends on a specific weakness in Scanguards' internal controls. John is authorized to write off old assets valued below $2,500 without obtaining an additional signature from headquarters. He accelerates depreciation until an asset's recorded value falls beneath that threshold, then approves its disposal himself. By turning a valuable company asset into a supposedly low-value item, he bypasses the control that would otherwise require higher-level review.

After the write-off, John passes the asset to someone outside the company. That intermediary sells the object at its real value, returns only the depreciated amount to the company, and keeps the difference. The arrangement converts an accounting entry into a physical transfer of property: the books conceal the asset's worth while the outside sale captures it. Delilah recognizes that the scheme is neither especially sophisticated nor new, but its repeated use can still produce substantial illicit income.

At first, Delilah estimates that the theft may involve only fifty or one hundred thousand dollars. Such a sum is serious evidence of corporate betrayal, yet she questions whether it is enough to explain an attempt on her life. She also considers that John may have wanted merely to frighten her rather than arrange her murder. That possibility remains unstable because another auditor could simply continue the investigation, making intimidation only a temporary solution.

From Accounting Irregularity to Wider Conspiracy

The danger surrounding Delilah makes the financial evidence more consequential than an isolated embezzlement. While she is returning through heavy rain after leaving her umbrella behind, she becomes lost only a few blocks from her apartment and encounters a scarred man whose appearance immediately alarms her. Later, during her theater date with Samson Woodford, a gunman interrupts the private moment and orders Samson and Delilah against the wall. Samson must protect her without revealing his supernatural abilities, so the attack places both her safety and his secret under pressure.

The investigation also reveals that Delilah is carrying confidential Scanguards material, including financial statements, asset information, and internal documents. Ricky regards the discovery as suspicious because she has appeared at Samson's house with company records after only two nights in the city. Samson likewise sees no innocent explanation for the documents, and the audit begins to threaten not only John but anyone whose larger interests depend on keeping the records hidden.

Delilah's discussion with Amaury clarifies that John Reardon's visible theft may be only the surface layer. Amaury, who understands accounting well enough to test her theory, learns that John could have used the depreciation threshold to extract assets while avoiding headquarters' controls. Delilah's analysis links the accounting entries to John's signatures, but the limited duration and apparently modest proceeds make it difficult to explain the violence against her. The mismatch between the visible fraud and the severity of the response becomes a clue that the scheme extends beyond John's personal gain.

Encrypted Transactions and Escalating Stakes

Amaury later finds encrypted data uploaded to headquarters and asks Thomas, Scanguards' information-technology expert, to break into it. The encrypted material suggests that John Reardon is involved in something larger than diverting a few thousand dollars through asset write-offs. The story consequently shifts from a traceable depreciation fraud to a concealed digital operation whose contents may identify additional participants, beneficiaries, or planned transfers.

The danger is reinforced by John's reaction after the attack. He speaks nervously with Billy Reardon on the telephone, asks whether the attacker was armed, insists that Billy cannot simply abandon him, and reminds him that he has already been paid. The exchange connects the threat against Delilah with a paid arrangement and shows John panicking when the operation does not proceed as expected. His fear indicates that the accounting scheme has become entangled with coercion and criminal retaliation.

The encrypted operation ultimately exposes the weakness of treating visible authorization as proof of actual control. Later, Samson Woodford and Amaury examine transaction screens showing Thomas logged in and authorizing John Reardon's encrypted transactions, with approval notices covering the display. The scene demonstrates how access credentials and electronic approvals can make one person appear responsible while another person operates behind the system. It also extends the original fraud's logic: just as depreciation disguises an asset's real value, the login record can disguise the identity of the person directing the transfer.

Consequences and Narrative Significance

John Reardon's asset-theft scheme functions as the first legible pattern in the novel's broader financial conspiracy. Delilah begins with abnormal ratios, tests the archive dates, demands original documents, and reconstructs the authorization chain. Each step narrows the gap between a suspicious number and a responsible actor, while the attacks show that the accounting evidence has consequences outside the office.

The scheme is significant because it turns ordinary corporate procedures into instruments of theft. A depreciation threshold intended to simplify low-value disposals becomes an opportunity to convert valuable property into unauthorized private profit. Shared or misused credentials and encrypted uploads further weaken the distinction between recorded responsibility and actual control. The result is a layered fraud in which physical assets, accounting entries, digital permissions, and paid violence all serve the same purpose: to conceal who is taking Scanguards' resources and who stands to benefit.

The plan therefore does not end with the discovery of John's signatures. Instead, it redirects the investigation toward the hidden transactions and the people able to exploit Scanguards' systems on a larger scale. Delilah's audit changes from a routine branch examination into a threat-bearing inquiry, and the pressure placed upon her becomes evidence that the books are protecting more than one man's embezzlement.