Sarah returns home after David’s funeral to find Eleanor and several relatives searching the condo. Chloe grabs a mysterious blue folder, but David’s scheduled messages warn Sarah not to let anyone take it. Realizing the search was planned, Sarah calls attorney Martin Bell instead.

At Martin’s office, Sarah receives David’s handwritten letter explaining that Eleanor knew his will existed. The blue folder contains evidence of forged companies, fraudulent property transfers, and a corporation called Hayes Family Holdings that secretly connected David’s family to decades of financial deception.

The documents reveal another company, Northbridge Asset Management, controlling dozens of shell businesses worth millions. David had spent three years investigating hidden ownership before his illness, believing the network concealed stolen assets. Eleanor appears linked to the transactions but insists she followed someone else’s instructions.

A recorded conversation exposes David confronting Eleanor about forged signatures created when he was only nine years old. She admits warning him to stop asking questions because dangerous people stood behind Northbridge, hinting that his late father had uncovered the same conspiracy years earlier.

Back at the condo, police investigate a break-in after Eleanor steals David’s silver Omega watch. Rebecca discovers a hidden safe behind the bookshelf containing a second, identical Omega, proving Eleanor stole a decoy while David secretly protected the genuine watch and its concealed evidence.

The safe also contains a false passport identifying David as Daniel Hart and instructions to locate Henry Vale using a coded question. Soon afterward, Eleanor’s abandoned car is found without the stolen watch, while a photograph taken the previous day appears to show David alive.

Sarah obtains funeral-home security footage revealing David, under the Daniel Hart identity, personally delivering another man’s body for burial. The transfer documents bear Daniel Hart’s signature, proving someone else occupied the coffin buried beneath David’s name.

Finally, David calls Sarah. He admits faking his death to protect the ownership key hidden inside the real watch, the only file exposing Northbridge’s true controllers. His cancer is genuine, his time is short, and Sarah must finish exposing the truth he could not.