I opened a college savings account the exact day my granddaughter, Chloe, was born. I remember holding her in the hospital room, looking at her tiny hands, and making a silent promise that I would do everything in my power to give her a head start in life.

I had struggled immensely with student loans throughout my own young adulthood, and I didn’t want her to ever feel that suffocating weight. It was entirely my money, set up with my name and my Social Security number on the primary paperwork. However, wanting to include my son, David, in the process, I made the mistake of adding him as a co-signer.

The logic was simple: it would allow him to easily deposit her birthday checks, holiday money, and small cash gifts over the years without needing me to be there. Because David asked to handle the filing, claiming he wanted to keep all of Chloe’s financial documents organized in a fireproof safe at his house, the quarterly paper statements from the bank were always mailed directly to his address.

I never thought twice about it. For almost eighteen years, I trusted that the money was sitting there, quietly growing into a comfortable safety net. I made my regular deposits, smiled whenever Chloe talked about her dream of going to an out-of-state university, and rested easy knowing the financial foundation was secure.

That false sense of security shattered last month. A simple administrative glitch during a software update at my local bank caused an automated duplicate statement to be emailed directly to my personal email address. I almost deleted it. I wasn’t even going to open it at first, figuring I already knew exactly what was in there.

Based on my initial lump-sum deposit and the automatic monthly transfers I had faithfully made for nearly two decades, I knew the balance should have been a very healthy forty-two thousand dollars.

It was enough to cover a significant chunk of her tuition and housing.

But when I clicked the attachment and the PDF finally loaded on my screen, the breath was knocked completely out of my lungs. I took off my reading glasses, rubbed my eyes, and put them back on, praying my aging vision was just playing tricks on me.

It wasn’t. The balance staring back at me wasn’t forty-two thousand dollars. It was barely six thousand dollars. My first thought was panic. Pure, unadulterated panic. I was absolutely certain that my identity had been stolen, or that cybercriminals had somehow gained access to the account and drained my granddaughter’s future.

I didn’t even bother calling customer service. I grabbed my purse, printed the statement, and immediately drove to the local bank branch with the paper shaking in my hands. I demanded to see a manager, explaining through tears that someone had robbed my granddaughter. The branch manager sat me down in his glass-walled office, offered me a glass of water, and pulled up the detailed transaction history on his monitor.