I won $4 million lottery jackpot and bought my wife a pink SUV, a diamond ring, and the most expensive gift I'd ever purchased. Then I walked into her office and heard someone whisper, "After today, you won't need him anymore." I stayed silent... until my phone rang, and everything they had planned fell apart.

Vithera’s forensic team located the old terminal logs in an off-site backup.

At 2:11 a.m., Mariana’s employee badge entered the network operations room.

At 2:12, a temporary remote session connected to my employer’s email portal.

At 2:13, my account approved Northstar.

At 2:15, Mariana’s badge exited.

The logs did not show who sat at the terminal, but they disproved the claim that I sent the message from my workplace.

A second record established that Rodrigo’s administrator had requested emergency guest access to the same room that night.

For the first time, the evidence moved away from me.

Vithera placed Mariana and Rodrigo on unpaid suspension. The company’s board retained outside counsel and began reviewing every Northstar payment.

Rodrigo issued a statement through his attorney.

He denied owning Northstar, denied directing false invoices, and described his relationship with Mariana as a “brief personal lapse unrelated to company business.”

Mariana’s lawyer made a different argument.

She claimed I had authorized Northstar privately and later denied it after discovering her affair.

Priya placed the terminal timeline before Mariana’s attorney.

“If Ethan owned Northstar,” she said, “why did your client need to enter Vithera’s operations room at two in the morning and impersonate him?”

Mariana offered no explanation.

The lender froze Northstar’s remaining accounts.

Bank statements showed $3.2 million in deposits and $640,000 still available. Legitimate subcontractors had received approximately $740,000. Taxes, fees, and operational expenses accounted for another $310,000.

More than $1.5 million remained unexplained.

A portion had purchased the renovations in our house.

Another portion paid for Mariana’s trips with Rodrigo.

The Denver bracelet was not a company award.

It was purchased from a jeweler two blocks from their hotel.

I sat in Priya’s office reading receipts while eight years of marriage became a spreadsheet.

Room service.

Airfare.

A private suite in Miami.

A ski weekend Mariana had described as an executive retreat.

The affair had consumed $186,000.

I expected anger.

What came instead was embarrassment.

I had worked exhausting shifts believing Mariana’s promotions required sacrifice from both of us. When she missed my birthday, I sent flowers to her hotel. When she stopped asking about my work, I assumed she was overwhelmed.

I had mistaken neglect for ambition because ambition was one of the things I loved about her.

Priya turned to another account.

“Northstar transferred $1.2 million into the E.C. Family Preservation Trust.”

“E.C.?”

“Ethan Cole.”

“I didn’t create a trust.”

“You are listed as grantor and beneficiary.”

The structure made the missing money appear to belong to me.

Mariana was co-trustee.

The account had never paid my personal expenses. It held municipal bonds and short-term securities, untouched since funding.

“Why place stolen money where I could eventually find it?” I asked.

“Perhaps it was intended to look like your reserve.”

“Or my motive.”

If Northstar’s fraud became public, investigators would see a company in my name, approval emails from my account, and $1.2 million held for my benefit.

Mariana could claim she merely administered a business I controlled.

Rodrigo could claim he approved a qualified vendor recommended by an outside consultant.

I would occupy the center of every document.

A bank surveillance image showed who opened the trust account.

Mariana sat at a conference table beside a woman with the same dark hair and narrow face.

Elena Robles.

The half sister Mariana claimed she had not spoken to in years.

Elena presented a power of attorney bearing my forged signature.

The document granted Mariana authority over business assets if I became incapacitated.

It had been signed eighteen months before the Northstar guarantee.

The notary journal contained a thumbprint supposedly belonging to me.

The print did not match.