CEO Gave Christmas Gifts to Everyone Except the Single Dad—Then She Appeared at His Door That Night
PART 2
Marcus did not invite Elena inside immediately.
He opened the door.
Stayed in it.
She understood.
“Lily okay?”
“Yes.”
“Good.”
Then she held out the red box.
“This was in my office.”
Marcus stared at it.
“My gift?”
“Yes.”
“Then why wasn’t it downstairs?”
“Because HR never generated your distribution label.”
Marcus looked at her.
“That sounds like a very expensive way to forget somebody.”
Elena nodded.
“It was not an innocent clerical error.”
Lily appeared behind him.
“You’re the CEO.”
Elena blinked.
“Yes.”
“You forgot my dad.”
Marcus closed his eyes.
“Lily.”
“What?”
Elena looked at her.
“I did.”
Lily crossed her arms.
“Why?”
“Because I trusted a list instead of asking why his name wasn’t on it.”
That answer disarmed Marcus more effectively than an excuse.
Lily considered.
“Okay.”
Apparently executive accountability had been processed.
Marcus stepped aside.
“Come in.”
Elena entered.
She looked different outside Ward Industries.
Smaller somehow.
Not physically.
Less surrounded by position.
She noticed the Christmas tree.
Then the silver train ornament.
Her eyes lingered for half a second.
Marcus caught it.
“Coffee?”
“No.”
“Good.”
“My coffee is terrible.”
Lily said:
“It is.”
Marcus pointed toward the hallway.
“Bed.”
“But—”
“Now.”
She looked at Elena.
“Make sure he gets his present.”
Elena almost smiled.
“I will.”
Lily disappeared reluctantly.
Marcus sat across from Elena at the kitchen table.
“Talk.”
She did.
Three months earlier, Ward Industries’ outside auditors had noticed unusual movement in the Employee Emergency Assistance Fund.
The fund existed for workers facing:
medical crises,
fires,
funeral expenses,
temporary housing emergencies,
and other documented hardship.
Small grants.
Usually $500 to $5,000.
Funded partly by employee donations and partly by the company.
At first, the audit issue looked harmless.
Some approved payments were transferred from the fund into a temporary clearing account.
Then reversed.
Money returned.
No obvious permanent loss.
Marcus frowned.
“Testing?”
“That’s what we now suspect.”
“Someone learning which controls trigger review.”
“Yes.”
“Did money eventually disappear?”
Elena hesitated.
“Approximately three hundred and eighty-six thousand over thirty months.”
Marcus stared.
“How did nobody see that?”
“Spread across legitimate-looking claims.”
“Some employee IDs appear to have been attached to claims those employees never made.”
Marcus thought about his own profile.
“My ID?”
“One of them.”
There.
The missing Christmas gift suddenly became smaller than what it represented.
Elena continued:
“Your relief-fund record shows two emergency grants.”
“I’ve never applied.”
“I know.”
“How?”
“One for $1,240.”
Marcus pictured the paper from the garage.
“And?”
“Another for $2,600 nine months ago.”
“Where did the money go?”
“Not to your account.”
“Then where?”
“Outside forensic accountants are tracing it.”
Marcus leaned back.
“You think Daniel did it.”
Elena’s expression changed.
“I think we have evidence that requires investigation.”
Careful.
Good.
She did not say guilty because suspicion felt satisfying.
Marcus asked:
“Why Daniel?”
“The approval code on the paper you found six weeks ago is tied to a finance override group.”
“Four people have legitimate access.”
“Daniel is one.”
“Who are the others?”
“Our controller.”
“Benefits director.”
“And me.”
Marcus looked at her.
“You?”
“Yes.”
Elena did not flinch.
“My credential can authorize emergency exceptions.”
“That means investigators examine me too.”
That answer mattered.
“Does the board know?”
“The audit committee chair does.”
“General counsel.”
“Outside forensic firm.”
“No one else has been confronted.”
“Why come here?”
Elena looked toward the tree.
Then back.
“Because I watched you stand in front of a hundred people while I skipped your name.”
“I saw your face.”
“You acted like it didn’t matter.”
“It did.”
“I know.”
Then:
“And because after the auditor called tonight, I checked the underlying HR changes.”
“Your active status was altered for seventeen minutes.”
“That removed you from the gift distribution report.”
“It also temporarily excluded your employee ID from an audit extract scheduled tonight.”
Marcus understood.
“Someone was trying to keep my records out.”
“Possibly.”
“Or clean them before the audit.”
“Possibly.”
“You really love that word.”
“Tonight I do.”
He looked at her.
“Was the box supposed to scare me into silence?”
“That is one possibility.”
“Another?”
“Someone wanted you to react.”
“How?”
“Open something.”
“Access something.”
“Forward something.”
“Anything that could later be characterized as misconduct.”
Marcus thought about the note.
YOU SHOULD HAVE LEFT THIS ALONE.
Elena continued:
“That’s why I need you to do nothing.”
He almost laughed.
“You drove here to tell me not to become an amateur detective?”
“Yes.”
“That may be the first intelligent thing anyone has done tonight.”
Elena smiled despite herself.
Then she pushed the red box toward him.
Marcus did not open it.
“What’s inside?”
“A small model train.”
His face changed.
Elena noticed.
“How did you know?”
“Last summer.”
“You repaired the lobby holiday display after the vendor cancelled.”
“You told Frank you wanted to take Lily on a sleeper train someday because Anna had planned one.”
Marcus looked away.
He barely remembered the conversation.
“I didn’t realize you heard that.”
“I was behind you.”
“That’s unsettling.”
“I’ve been told.”
He opened the box.
Inside was a small silver train.
Not expensive.
Detailed.
Beautiful.
Lily appeared again.
Of course.
Her eyes widened.
“Oh.”
Marcus turned.
“You are supposed to be asleep.”
“I heard train.”
Reasonable.
Elena handed her the box.
Lily lifted the model carefully.
“Mom liked trains.”
Elena nodded.
“I heard.”
Lily looked at Marcus.
“We’re still going, right?”
Marcus’s throat tightened.
“Someday.”
Lily gave him a look Anna used to give him.
Someday was not a date.
Marcus knew.
Elena knew too.
But she did not interfere.
Good.
She stood.
“Tomorrow is Christmas.”
“The office is closed.”
“Outside counsel is preserving systems remotely.”
“Do not go back for files.”
“Do not contact Daniel.”
“Do not discuss this with coworkers.”
“If anyone contacts you about relief-fund records, call this number.”
She handed Marcus a card.
Not hers.
Outside counsel.
Professional.
Then she looked at him.
“Your employment is not in question.”
“It looked like it was.”
“I know.”
She reached for her coat.
Marcus asked:
“What happens next?”
“People better qualified than either of us follow evidence.”
“And if it leads somewhere ugly?”
Elena stopped.
“Then we do not protect the company by hiding what happened inside it.”
That was the first moment Marcus believed she might actually be able to fix what her title said she controlled.
PART 3
Christmas morning began at 6:08 because eight-year-olds rejected civilized scheduling.
Lily opened:
books,
art markers,
new sneakers,
a telescope Marcus had bought used and refurbished.
Then the silver train.
She placed it beneath the tree beside the paper star.
Marcus photographed both.
At 9:14, his phone rang.
Outside counsel.
Not Elena.
Attorney Priya Shah introduced herself.
“We need your cooperation as a witness.”
“Okay.”
“Not as an investigator.”
“Elena emphasized that.”
“Good.”
Priya asked him to recount November 17.
Marcus did.
Printer jam.
Two reimbursement forms.
Same approval code.
Different employees.
He remembered one employee name.
Carmen Lopez.
Shipping department.
Marcus had handed the forms to payroll before emailing Finance.
“Did you keep copies?”
“No.”
“Good.”
“Why good?”
“Because employees generally should not retain other employees’ financial documents.”
Fair.
“But your email exists.”
“Yes.”
“Did anyone contact you afterward?”
“Daniel replied.”
“Anyone else?”
“No.”
“Any change in treatment?”
Marcus thought.
Nothing obvious.
Then:
“My overtime approval started getting kicked back.”
“When?”
“Late November.”
“How many times?”
“Three.”
“Normal?”
“No.”
“Anything else?”
Marcus remembered a vendor-access request rejected under his name that he had never submitted.
At the time he assumed system error.
Priya wrote it down.
Tiny anomalies.
Individually meaningless.
Together:
possibly a pattern.
The investigation continued through the holiday week.
Marcus remained home.
For once, he was grateful Ward Industries closed between Christmas and New Year’s except essential operations.
He took Lily sledding.
Burned pancakes.
Fixed Mrs. Palmer’s bathroom faucet.
Tried not to think about whether the chief financial officer of his employer had somehow used his identity to steal from a hardship fund.
On December 28, Elena called.
“Daniel has been placed on administrative leave.”
Marcus sat straighter.
“Why?”
“Evidence-preservation concerns and apparent conflicts in the transactions.”
“Did he confess?”
“No.”
“Did you expect him to?”
“No.”
“What did you find?”
“I can’t give you everything.”
Marcus frowned.
“I’m the one whose employee ID was used.”
“You’re also a witness.”
Right.
She continued:
“Forensic logs show relief-fund exception approvals were repeatedly entered through a delegated finance account Daniel controlled.”
“Could someone else have used it?”
“Possibly.”
Marcus sighed.
“There’s that word again.”
“It remains useful.”
“Anything not possible?”
“Yes.”
“What?”
“The payments did not go to employees.”
Silence.
“They went through two clearing accounts.”
“Then to vendors.”
“Real vendors?”
“Some.”
“Others?”
“Entities that appear connected.”
“To Daniel?”
“We are still establishing that.”
The company eventually disclosed the issue to law enforcement and its insurer.
No Christmas-morning boardroom confrontation.
No CEO playing a recording.
No employee hero carrying banker boxes upstairs.
Paperwork.
Subpoenas.
Account records.
Interviews.
Audit trails.
Less cinematic.
Far harder to argue with.
The ugliest discovery came in January.
The fraud was not simply theft.
Daniel had used legitimate hardship cases as cover.
When an employee received a $1,500 emergency grant, an additional false payment might be created using another employee’s ID.
Sometimes reversed.
Sometimes redirected.
The amounts stayed small enough to look like correcting entries.
Over time they accumulated.
Marcus’s ID had been used twice.
Carmen Lopez’s three times.
A machinist named Robert Chen:
once.
A receptionist:
twice.
Twenty-eight employees altogether.
The company had allowed one executive group too much power to:
create,
approve,
and reconcile certain exceptions.
That was not only Daniel’s alleged misconduct.
It was a control failure.
Elena told the board exactly that.
Some directors resisted.
One said:
“This is an individual fraud event.”
Elena answered:
“An individual exploited a system we designed.”
“If we call the system healthy, we guarantee another person can try.”
The audit committee chair agreed.
Controls changed.
No one person could create and approve emergency-fund exceptions.
Inactive executive credentials removed.
Employee notification required whenever a relief grant was opened under their ID.
Quarterly independent reconciliation.
Anonymous reporting channel moved outside Finance.
Marcus learned all of this later.
At the time, he knew only that January arrived and his badge still worked.
The first day back, people stared.
Rumors had started.
Daniel “taking personal leave.”
Outside auditors in conference rooms.
IT reviewing old access logs.
Marcus hated rumors because they demanded either silence or dishonesty.
Elena addressed employees on January 3.
No names.
No accusation before charges.
She said:
“We identified irregularities involving the Employee Emergency Assistance Fund.”
“An independent forensic review is underway.”
“Appropriate authorities have been notified.”
“We have no evidence that legitimate employee grants will be reduced or delayed.”
“Any employee whose identification was used improperly will be contacted individually.”
Then:
“We also identified weaknesses in our internal controls.”
“That responsibility belongs to leadership.”
No inspirational speech.
No applause.
Good.
Afterward, Marcus returned to work.
His supervisor, Janet Reynolds, stopped him.
“Do you have a minute?”
“Sure.”
She closed her office door.
“I owe you something.”
Marcus immediately disliked where this was going.
“What?”
“Your annual review.”
She opened his file.
“You’ve been doing work outside your title for three years.”
Facilities planning.
Employee logistics.
Vendor coordination.
Emergency response.
New-hire setup.
Workplace-safety committees.
He knew.
That was what happened when a reliable person kept saying yes.
Janet continued:
“I nominated you twice for operations supervisor.”
Marcus stared.
“You never told me.”
“First time budget froze.”
“Second time Finance rejected headcount.”
“Daniel?”
“His division, yes.”
Marcus leaned back.
There it was.
A temptation.
Turn every disappointment into part of the conspiracy.
Janet immediately stopped him.
“I do not know that Daniel personally blocked you.”
“Don’t make that leap.”
Marcus looked at her.
Good.
Everybody in this story was becoming irritatingly responsible.
“What are you saying?”
“I’m saying your role has been underscoped.”
“Separate issue.”
“And I should’ve fixed it before any investigation reminded me to look.”
That mattered.
She asked whether he wanted to apply for a newly planned Employee Operations Manager role later in the year.
Marcus laughed.
“You’re offering me a promotion because somebody stole money under my name?”
“No.”
“I’m asking whether you want to compete for a job you’ve already been doing pieces of.”
“Different.”
“Yes.”
He thought about Lily.
Schedule.
Salary.
Management.
More hours?
Janet said:
“Think about it.”
Marcus nodded.
He had learned something from Elena.
“Possibly.”
