The morning after the meeting, I bought a notebook. Not a spiral thing that falls apart, but a hardbound ledger with numbered pages, the kind I used when I first started doing forensic work twenty years ago. I wrote the date on the first page and then I wrote a single line underneath it: "Cypress Lakes HOA — special assessment and vendor payments." Then I sat at my kitchen table and started building the file I wished someone else had already built.
I have a rule from my early years in this business: paper does not lie, but people arrange it so it looks like it does. My job was to un-arrange it.
I already had the assessment letter, the one demanding $8,600 per household, and I had the invoices Margaret had attached to the email she sent after I asked for backup. I laid them out on the table in chronological order and photographed every page with my phone, front and back, because I have learned never to trust that a document will still exist tomorrow in the form it exists today. Then I opened a fresh spreadsheet and started typing.
The columns were the same ones I always use: vendor, invoice number, date, description, amount, check or transfer number, approving signature, and a final column I label "notes," which is where the truth usually ends up hiding. I entered every invoice Margaret had provided. There were eleven of them. Seven were from Kane Property Services.
The first thing I noticed was the numbering. Invoice KPS-2214, dated March 3, billed $4,850 for what it called an "emergency pump repair." Invoice KPS-2214, dated March 17, billed $5,900 for what it called an "emergency pump repair." Same invoice number. Different date. Different amount. In any legitimate accounting system I have ever examined, that does not happen. Invoice numbers are sequential and unique. You do not get to reuse them like a favorite shirt.
The second thing I noticed was the amounts. Three of the Kane invoices in a single month were for $4,850, $4,900, and $4,950. Our HOA bylaws, which I had finally read all the way through the night before, required competitive bids for any single vendor payment over $5,000. Three invoices, all just under the line. I had seen that pattern before in fraud cases. It has a name. It is called splitting, and it is done for exactly one reason: to avoid the oversight that kicks in above the threshold.
The third thing I noticed was the math on the assessment itself. Cypress Lakes has eighty-four households. Eighty-four times $8,600 is $722,400. I added up every vendor payment Margaret's packet accounted for, and I got to roughly $190,000. I ran the numbers twice, then a third time, because I did not want to be the man who accused his HOA president of stealing half a million dollars on the basis of an arithmetic error. The numbers held. About a quarter of the money was accounted for in actual vendor work. The rest was described in the packet with phrases like "reserve allocation" and "contingency funding" and "administrative overhead," which are the kinds of phrases people use when they want a number to sound explained without actually explaining it.
I built a timeline on the second sheet of the spreadsheet. February: the assessment letters went out. March: the emergency invoices started arriving, fast and heavy. April: the first deadline for payment. May: the second round of notices, with late fees. The money came in from frightened homeowners and went out to Kane Property Services in a stream of just-under-the-limit payments, and the whole thing moved with a speed that told me it had been planned before the first letter was ever mailed.
I printed everything and put it in a binder with tabbed dividers, the way I would for a client engagement. Tab one: the assessment letter and all follow-up notices. Tab two: the invoices. Tab three: the spreadsheet and the timeline. Tab four: the bylaws, with the relevant sections highlighted. Tab five: the glass.
The glass got its own tab because by then the glass was evidence too. I had dated photographs of every incident: the first scattering near the shallow end, the cluster by the steps, the handful I found glittering in the skimmer basket. I had the shards themselves in labeled plastic bags, each one marked with the date and the location in the pool where I found it. A forensic accountant is not a crime scene technician, but I know enough to know that a bag with no label is just trash, and a bag with a label is a record.
Emma came over that Saturday, the way she always did. She stood at the sliding door in her swimsuit with a towel around her shoulders and looked out at the pool cover, and her face did the thing that nine-year-old faces do when they are trying not to cry about something they do not fully understand.
"Is the pool still sick?" she asked.
"Still sick," I said. "The doctor says it needs rest."
She accepted this the way kids accept the explanations adults give them when the adults are clearly lying but the lie is kinder than the truth. We played cards at the kitchen table instead, and every so often her eyes drifted to the sliding door, and I hated Margaret Cole a little more each time.
That night, after I took Emma home, I sat with the binder until past midnight. I added a new page to the ledger and wrote down everything I could not yet prove but believed to be true: that the assessment was inflated, that the invoices were manufactured or at least manipulated, that the money was going somewhere it should not go, and that the glass in my pool had started appearing right around the time I began asking questions in public. I underlined the last line twice.
I did not know yet where any of it would lead. I only knew that I had stopped being a homeowner with a complaint and started being an accountant with a case. The difference, I have learned, is mostly about the binder. Anyone can be angry. The binder is what makes you dangerous.