From: i WY) 3) Subject: Re: [EXTERNAL EMAIL] - RE: J UK number Date: Wed, 07 Oct 2020 16:41:52 +0000 Attachments: Copy of - WITH_BROKER_INFO.xIsx; WORKINGTOLLS.xIsx; Copy_offfJ TOLLS.XLSx; Tolls _2323.xlsx Here are the spreadsheets. The individuals associated with the phone numbers are below, and we got that info from subpoena returns and whistleblower interviews. -_ zz — BH Morgan Stanley mz EE - From: AS (SA. YS) <i Sent: Wednesday, October 7, 2020 11:27 AM 1: ES (VY) (3!) Subject: RE: [EXTERNAL EMAIL] - RE: J UK number Hey thanks — yeah if you could please send the spreadsheets that would be great. And could you please let me know who those numbers (the “other individuals”) are subscribed to (or if not subscription information, how we know the numbers are associated with the relevant individuals)? Thanks again! From: as (NY) (!) Sent: Tuesday, October 06, 2020 21:31 1: ES (SANS) Subject: RE: [EXTERNAL EMAIL] - RE: |) UK number Hey, For theJ number, here are the first contact dates with other individuals: HE — uy 23, 2018 HE — June 11, 2018 BE — Luly 5, 2018 HE - uly 27, 2018 For the§J number, here are the first contact dates with other individuals: HR — January 23, 2018 HE — February 28,2020 HE — January 24, 2018 Let me know if you want the spreadsheets that show that and I can send those tomorrow. EFTA00085788

--=PAGE_BREAK=--

From: RE (NY) (FB!) Sent: Friday, October 02, 2020 2:14 PM To: iS (SANS) <>; eS (NY) (S|) < Cc: A (SANS) i; a (SANS) <i Subject: Re: [EXTERNAL EMAIL] - RE: J UK number Hi, Sorry | got a little inundated, will get this to you by the end of the weekend. From: aS (SANYS) <r Sent: Friday, October 2, 2020 1:50 PM To: ES NY) (Fo) a: a (VY) e) <r Cc: ES (SANS) i a (SANS) <i Subject: RE: [EXTERNAL EMAIL] - RE: J UK number a Wanted to follow up on the below, and our conversation, from Wednesday — just looking for any communications between the two [J phone numbers and another number (or numbers) relevant to the investigation from early 2018. | think there are a handful of calls that fit that description in the spreadsheets | sent at 1:30 on Wednesday, but wanted to confirm. Basically | want to make sure it’s true to say in the MLAT application that both numbers were utilized in contacts with other phone numbers relevant to the investigation in or about January 2018 (or February, or March, or whatever is accurate). thanks, = From: aS (NY) (5!) sere Wednesday, September 30, 2020 12:27 1: ES (SANS) a a (VY) (8) Cc: A (SANS) i; I (SANS) <i Subject: RE: [EXTERNAL EMAIL] - RE: J UK number It looks like that one is Vodafone too. I'll work on the second part. Can you give me a quick call when you get a chance (a) ? Thanks | | From: is (USANYS) (12ito i | Sent: Wednesday, September 30, 2020 11:57 AM To: ES (NY) (FS!) a; a (NY) (oS!) <a Cc: ES (SANS) i; a (SANS) <_ Subject: RE: [EXTERNAL EMAIL] - RE: J UK number Thank, and sorry, | meant to ask for both — could you please send the provider for i also. EFTA00085789

--=PAGE_BREAK=--

Additionally, do we have a date for the earliest communication between each of the [J UK numbers and a number for any other individual associated with the investigation? Let me know if that’s easier to discuss via phone. (And all of this still for the MLAT.) Thanks again. From: aS (NY) (FS!) <a Sent: Wednesday, September 30, 2020 11:23 re (NY) 5S!) | (SAN YS) <> Cc: (SANS) i; a (SANS) <a Subject: [EXTERNAL EMAIL] - RE: J UK number =. It looks like the provider is Vodafone UK. Best = On Sep 30, 2020 10:32 AM, "EY (USAN YS)" <> wrote: | Could you please send the provider info for the JJ UK number? We need it for the MLAT for subscriber and toll info. thanks, =. Pe Assistant U.S. Attorney Southern District of New York EFTA00085790