The bank could not identify the person solely from the name attached to the transactions.
However, the access logs showed that the withdrawals had been made from a device registered to Mom’s home internet service.
Mom closed her eyes.
“My girls’ laptop,” she said.
The investigator explained that the device had been used by multiple people, making identification difficult. But the transactions had occurred during school hours on weekdays, when Mom and Daniel were both at work.
“Who was home?” I asked.
Mom looked toward the floor.
“My daughters.”
The words did not sound like an accusation. They sounded like a mother realizing she had built a house full of unlocked doors.
The bank then showed us the education account records.
The funds had first been transferred into a protected account at another institution. The transfer was authorized under Grandma’s name, with Mom’s signature as assisting representative. That part matched what Mom had told me.
But three weeks later, the entire amount had been redirected again.
The receiving account belonged to a financial technology company that provided prepaid business accounts. The account had been opened under a variation of Daniel’s name, using an email address connected to his old account.
“Was it mine?” Daniel asked.
The investigator shook his head.
“No. The email address was one character different from yours.”
Daniel leaned closer to the screen.
“That was my old address. Someone could have created a similar one.”
“Do you recognize the phone number?” the investigator asked.
Daniel stared at the digits.
“No.”
Mom suddenly lifted her head.
“I do.”
Everyone looked at her.
“That’s the number my older daughter used when she applied for summer jobs,” she said. “She stopped using it last year.”
The room went silent.
The investigator continued carefully. “We have not concluded that either daughter acted intentionally. The phone number may have been entered without their knowledge, or the account could have been created by someone who obtained their information.”
“Can we recover the money?” I asked.
“Some of it,” he said. “The receiving account was used for several purchases and transfers. The remaining balance was frozen after the account was flagged. We are coordinating with the other institution and law enforcement.”
I felt no triumph.
Only exhaustion.
The money had not disappeared into some faceless mystery. It had moved through ordinary devices, familiar passwords, and a household where people trusted one another enough not to ask questions.