Vivian requested a limited review from the internal compliance office, taking care not to route the request through the station where the incident had occurred. The first answer arrived after four days and claimed Margaret had voluntarily accepted a rebooking. It included a timestamped customer-approval entry and a digital acknowledgment supposedly made by the passenger herself. Margaret, when contacted with her permission through an independent investigator, said she had never seen the acknowledgment and had been standing at a ticket counter in tears when someone told her there were no seats left.
The timestamp became Arthur's first real warning. It showed Margaret approving the change at a moment when gate surveillance, later preserved, placed her at a different terminal begging an agent for help. The airline's service system could be wrong, and a clerk could enter a mistaken code, but a false approval attached to a financial transaction demanded a closer look. Vivian expanded the review under an authorization recorded in the board's audit minutes, appointed outside counsel to preserve the evidence, and restricted Arthur to the role of sponsoring witness and owner rather than investigator.
"If you personally go tearing through records," Vivian told him, "every defense lawyer will spend a year arguing that a wealthy founder manufactured a case against employees he disliked." Arthur accepted the correction with the relief of a man whose instincts had found someone willing to challenge them. The airline belonged to him in one important sense, but its employees' rights, its passengers' privacy, and any future criminal case could not depend on the owner's temper. An independent team, not a dramatic confession, would have to establish what had occurred.
Their first audit found other complaints that looked disturbingly alike. One passenger's seat had been canceled minutes before boarding; another had paid a second charge to keep a reservation that was already confirmed. A veteran traveling to a medical appointment had been told that his ticket was invalid, while an elderly couple had been directed to a dubious payment desk to settle an invented compliance fee. The complaints had reached different customer service teams, but nearly all ended with the same classification: passenger error, voluntary change, insufficient documentation, or disruptive conduct.
Arthur did not assume every complaint proved fraud. Weather caused delays, genuine passengers sometimes misunderstood fare terms, and airline employees were routinely blamed for decisions made elsewhere. Vivian's team compared the complaints against original ticketing events, payment movements, approved fare changes, and the limited records they could lawfully obtain. Thirty-two reservation changes in the latest reporting cycle shared an unusual set of manual overrides, and several led to financial adjustments that did not reconcile against normal airline revenue.
A systems analyst named Anna Desai was the first employee to document the discrepancy in language a nontechnical director could understand. Anna was thirty-four, worked in airport operations support, and had spent ten years learning the difference between a database that displayed a comforting answer and the underlying event history that showed what people had actually done. She kept a notebook of questions she could not yet answer, each dated, each written with the restrained precision of someone who understood that a suspicion was not proof. At the top of one page she wrote, WHO AUTHORIZED CHANGES AFTER CUSTOMER CHECK-IN?