For several seconds, she said nothing.
Then whispered, "I was just cleaning up the queue."
The investigator asked whether she had reviewed the original customer requests before changing the statuses.
Cynthia hesitated.
Then shook her head.
"Not every one."
The investigator remained quiet.
Cynthia looked toward the table.
Finally, she said, "Martin told me the reporting categories weren't important as long as the account wasn't opened."
The investigator made a note.
Then asked what she understood the word withdrawn to mean.
Cynthia closed her eyes.
She knew the answer.
A customer who chose not to continue.
And she knew that wasn't necessarily what had happened.
For the first time, she realized that years of describing her actions as ordinary administrative work would not explain why the records no longer reflected the customers' decisions.
The evidence concerning Sofia was different.
The young receptionist had occasionally left sessions unattended, contrary to security policy. The review identified the control failure and recommended corrective training and stronger system safeguards.
But the available records did not support the allegation that she had deliberately misclassified the questionable applications.
Her notebook was consistent with several emails recovered from the bank's system.
In one, she asked Cynthia whether a customer who requested an appointment should really be recorded as having withdrawn.
The response instructed her to follow the branch classification process.
In another, Sofia asked for a copy of the approved written policy authorizing the branch to turn away ordinary deposit-account applicants based solely on estimated relationship value.
Keller replied that local management discretion was sufficient.
Sofia kept the correspondence.
She didn't forward confidential customer data to herself.
She didn't try to obtain records outside her authorization.
She simply preserved references to communications and reported the concerns when an independent channel became available.
The investigators concluded that her actions should be evaluated on their own merits, not treated as equivalent to the conduct of managers who designed or enforced the questionable practices.
When the review team informed Sofia that she would not be suspended as a participant in the account-classification scheme, she began crying.
She had spent days imagining her career ending.
She worried about rent.
Her younger brother's college expenses.
And the health insurance that helped cover her father's medical appointments.
The investigator explained that the bank would still address workstation security through normal corrective procedures.
Sofia nodded immediately.
"I understand."
Then she asked something that made the investigator pause.
"Can I keep working at the bank?"
The woman looked toward her.