<table><tr><th>From:</th><th>Karyna Shuliak</th></tr><tr><td>Sent:</td><td>Saturday, March 10, 2018 11:33 PM</td></tr><tr><td>To:</td><td>Bella Klein</td></tr><tr><td>Subject:</td><td>Re: Fraud Protection Alert</td></tr></table>

Ok, thank you Bella! <=iv> On Mar 10, 2018, at 5:49 PM, Bella Klein > wrote:

Your card is terminated and will be replaced. Card will b= received on March 13th to 9 East

Thank you,
Bella

On Mar 10, 2018, at 5:35 PM, Karyna Shuliak | wrote: <=t class="Apple•interchange-newline">

Hi Bella!

Yes, it is fraud! Gla= you caught it!

<change><s>On</s> <u>Mar</u></change> 10. 2018 at 5:32 PM. Bella Klein <=a wrote:

Hi Karyna,
Is it fraud?

Thank you,

Bella
=br>

Begin forwarded message:

From: "American Express" <AmericanExpress@welcome.aexp.com <mailto:AmericanE=press@welcome.aexp.com> >

Date= <u>March</u> 10, <u>2018 at 4:51:42 PM EST</u>
To:
Subject: Fra=d Protection Alert
Reply-To: "" <DoNotReplyUS@service.americanexpress.com<=a»

<mailto:DoNotRe=lyUS@service.americanexpress.com>

=td width="19.11%" rowspan="1" colspan="1">

<=td>
Accou=t Ending:

=td width="25.76%" rowspan="1" colspan="1">
<=td>

<http://www208.americanexpress.com/axp/card=rt/2008/AMEX_alert.jpg>

Fraud Protection

<= style="margin-top: 0px; font-family: Arial; margin-bottom: 0px; font-

siz=: 10pt;">

In regards to Karyna=Shuliak - Additional Card ending inM

For your security, we regularly monitor accounts for possible fraudule=t activity. Below are the details of an attempted charge:

Attempte= Date

Merchant

Amount

<=>03/10/18

Not Approved
=/td>

## Do you recogn=ze this attempt?

<https://cits-tracking-

prod.americanexpress.=om/clicktrk/Tracking?mid=HEICN030201803101451254149045840&msrc=ENG- =LERTS&url=https%3A%2F%2Fonline.americanexpress.com%2Fmyca%2Fcvp%2Fact=on%3Fg%3D349992331290054%26 x%3D005860335585776%26o%3De%26r%3D1%26c%3DHEICN0=0201803101451254149045840> =/a> <https://c=ts-tracking-

prod.americanexpress.com/clicktrk/Tracking?mid=HEICN030201803=01451254149045840&msrc=ENG-ALERTS&url=https%3A%2F%2Fonline.americanexpress.com%2Fmyca%2Fcvp%2Faction%3Fg%3D349992331290054%26x%3D0058603355=5776%26o%3De%26r%3D2%26c%3DHICN030201803101451254149045840>

Great! Click Yes to ve=ify and we'll email you shortly to confirm.

Okay. Click No and we'=l help you protect your account.
</=>

If you or a= authorized party has already addressed this concern, please disregard this=message.

Thank you for helping u= to protect the security of your account.

American Express Account Protection Services

Privacy Statement
=td width="2%" rowspan="1" colspan="1">|
Update Yo=r Email <https://cits-tracking-
prod.americanexpress.com=clicktrk/Tracking?mid=HEICN030201803101451254149045840&msrc=ENG-
ALE=TS&url=http://www.americanexpress.com/email>

Your account information is included=above to help you recognize this as a customer

care e-mail from American Ex=ress. To learn more about e-mail security or report a suspicious e-mail, pl=ase visit us at american=xpress.com/phishing <https://cits-tracking-

prod.americanexpress.com/c=icktrk/Tracking?mid=HEICN030201803101451254149045840&msrc=ENG-

ALERT=&url=https%3A%2F%2Fwww212.americanexpress.com%2Fdsmlive%2Fdsm%2Fdom%2=us%2Fen%2Ffraudprotectioncenter%2Ffraudprotectioncenter_identifytheft.do%3Fv=nextoid%3Db9c75c5d66a4c110VgnVCM100000defaad94RC

## Do you recogn=ze this attempt? (cont.)

RD>. We kindly ask you not to reply to this e-mail but i=stead contact us via Customer=Care <https://cits-tracking-prod.americanexpress.=om/clicktrk/Tracking?mid=HEICN030201803101451254149045840&msrc=ENG-=LERTS&url=https%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiN=tlContact%26extlink%3Dus-em-serv-footer-helpcenter>.

(t) 2018 American Express. All rights reserved.

4