<table><tr><th>From:</th><th>bellaklein</th></tr><tr><td>Sent:</td><td>Tuesday, February 19, 2013 2:54 PM</td></tr><tr><td>To:</td><td>Karyna Shuliak</td></tr><tr><td>Subject:</td><td>Re: Karyna Shuliak - please confirm CC activity and advise if fraud</td></tr></table>

Thank =ou Karyna, You can submit the receipts at the end of statement =eriod. Glad it is not fraud!

On =eb 19, 2013, at 9:44 AM, Karyna Shuliak wrote:

Hi =ella, I confirm the charges, this is not a fraud, do I need to send =ou the receipts?

On Tuesday, February 19, 2013, =ellaklein wrote:

Good Morning Karyna, Please =onfirm charges on your Chase Visa Card from statement below, as we =eceived a security alert from the fraud protection =epartment. Thank you, Bella

Begin forwarded =essage:

=ate: February 19, 2013 =:16:31 AM EST

=c: PB-Service1318 =lt;████████████████████████>

=ubject: Karyna Shuliak - =lease confirm CC activity and advise if fraud

DDA q =xxxx1472 - NES, LLC Karyna Shuliak — CC user

## Bella and =ich,

Please contact Karyna Shuliak and inquire on whether the following =harges are legitimate. JPM Fraud has reason to believe that the =harges stem from fraud. Please advise at your earliest =pportunity.

=span><image002.jpg> au> Credit Card Account belonging to Employee KARYNA SHULIAK = xxxx-xxxx-xxxx-2813 =nbsp; For reference, Authorizing Officers Account # xxxx-xxxx-xxxx-4927 (JEFFREY =PSTEIN) =nbsp; &n=sp; &nbs=; =nbsp; =Mkt> Please confirm recent =ransaction(s)

## Bella and =ich, (cont.)

Authori=ation time

Merchan= Name

MRCH =TATE

<pan style="font-size:10pt;font-family:Tahoma,sans-serif;color:white">Transac=ion amount

2/15/2013 =0:18:19 AM

Duane =eade

NY_36_New_York

$95.74

2/15/2013 =0:41:36 AM

MAISON =AYSER - 12

NY_36_New_York

$14.75

2/15/2013 =2:18:46 PM

HEALTHY =ANDLE CAFE, INC

NY_36_New_York

$27.22

2/15/2013 =5:05:31 PM

NAILS AND =PA ON 2ND AVE

NY_36_New_York

=/td>