Sofia Reyes found the money at 2:47 AM, sitting cross-legged on the kitchen floor of her mother's restaurant with a cold taco in one hand and a laptop balanced on a crate of avocados.
She wasn't supposed to be here. She was supposed to be finishing a penetration test for a fintech startup in Santa Monica — a routine job, forty hours of poking at their security architecture, write up the vulnerabilities, collect the check, move on. Standard freelance work for an AI security consultant who couldn't afford to turn anything down.
But the restaurant's Wi-Fi was the only connection she had left this month. Her apartment's internet had been cut three days ago, a casualty of choosing to fix the restaurant's ancient refrigerator instead of paying Spectrum on time. So here she was, surrounded by the ghosts of her mother's cooking — cumin in the walls, chili oil stained into the wooden counters, a faded photo of Mamá taped above the stove — running security audits at three in the morning.
The fintech job was boring. So she'd done what she always did when she was bored: wandered.
Not physically. Digitally. The fintech company's servers shared cloud infrastructure with dozens of other clients. Most security consultants stayed in their lane, tested what they were paid to test, and went home. Sofia had never been good at staying in her lane.
She'd followed a routine API call that looked slightly off — a data packet routed through three unnecessary servers before reaching its destination. Probably nothing. An engineer's sloppy shortcut. But Sofia's instinct — the same instinct that had gotten her hired by three Fortune 500 companies and fired by two of them — said otherwise.
She pulled the thread.
Thirty minutes later, she was staring at something that made her forget about the taco, the fintech job, and the broken refrigerator.
A river of money. Flowing through AI-generated shell companies — hundreds of them, each with synthetic identities so convincing that no human auditor would ever catch them. The entities bought and sold properties to each other in cycles, each transaction generating just enough profit to look legitimate, each one laundering the real money underneath.
The amounts were staggering. Eight figures moving through the system every month. All of it converging on a single parent company.
Reeves Capital Partners.
Sofia knew the name. Everyone in LA knew the name. Daniel Reeves — thirty-two, Forbes 30 Under 30 alumni, the youngest real estate billionaire on the West Coast. His face was on bus shelters and magazine covers. He'd given a TED talk on "ethical urban development" that had twelve million views. He was LA's golden boy.
And his company was running one of the most sophisticated money laundering operations she had ever seen.
Sofia closed her laptop. Opened it again. Closed it.
"Shit," she said to the empty restaurant.
She should report it. That was the legal obligation — if you discover evidence of financial crimes during a security audit, you report it to the client and, depending on severity, to federal authorities.
But she hadn't been auditing Reeves Capital. She'd wandered into their infrastructure uninvited, through a shared cloud environment, following a thread she had no business pulling. If she reported it, the first question would be: what were you doing in their system? The answer — curiosity — would end her career and possibly land her in federal prison.
She could delete her logs, close her laptop, and pretend she never saw it.
She looked at the photo of her mother above the stove. María Elena Reyes, who had come to LA from Oaxaca with two hundred dollars and a mole recipe, who had built this restaurant from nothing, who had taught Sofia that the truth was the only thing worth protecting.
Mamá would tell her to do the right thing. Mamá would also tell her not to be stupid.
Sofia saved the data to an encrypted drive, hid the drive in the flour canister behind the stove, and went home.
She didn't sleep.