Not one fraudulent vendor, but several, layered. Variant identities built from the same administrative skeleton.
I sit back slowly, keeping the page in my hand while I think.
Across from me, Annie goes very still.
She knows what this means.
“This thief isn’t sloppy,” I say. “They’re experienced.”
Annie doesn’t argue. “Yeah.”
“They know how entities are screened.”
“Yes.”
“They understand approval thresholds.”
“Yes.”
“They know how to create duplicate vendors that survive a documentation pass but link back structurally if you know where to look.”
Her eyes hold mine. “Yup.”
I set the page down with more care than it deserves, because if I don’t, I’ll crumple it. And crumpling paper would be theatrically satisfying for roughly half a second and operationally worthless.
“They built a shadow path,” I say, half to myself now. “One that lets money move in increments through entities that appear separate unless you reconstruct the filing logic from the inside out.”
“That sounds very annoying,” Annie says.
“I’m very annoyed.”
That gets the faintest shift at the corner of her mouth.
Inappropriate, under the circumstances. But not unwelcome.
Still, I ignore that too.
“Pull every vendor tied to legal review windows,” I say. “Not just contract sign-offs. Anything routed through documentation support, compliance language, external counsel references, or advisory classifications.”
She’s already turning to the laptop. “On it.”
I do the same on my end, building the filter broader than I normally would because the narrower query assumes the answer sits where it belongs, and that assumption is no longer safe.
I cross-reference not just active vendors but archived ones. Dormant ones. Void later entities that only appeared once.
The search returns more entries than I want. Too many.
Which means whoever did this wasn’t improvising.
They were building options.
The room stills again except for keys, mouse clicks, the soft rasp of paper shifting against paper. Annie’s thumb taps once against the side of her camera, a rhythm I’ve now observed often enough to classify as active processing rather than nerves.
After another ten minutes, the pattern tightens.
Contract renewals, shipment disputes, staff overtime. Those are the camouflage points.
The fake consulting behavior spikes precisely when legitimate operational pressure is highest, because that’s when the system is least interested in small irregularities and most likely to prioritize continuity over scrutiny.