Raw source

Date: 2026-06-08
Title: "Is this legit?" Shea Winkeller asks JT about a spoofed email; JT calls it a scam (Sat 2026-06-06 to Mon 2026-06-08)
Source: mail:///messages/AAMkAGE2Nzc1MTNkLTA2MDUtNDc4MC1hNDg4LTcwZDk4OTg5NzU2MwBGAAAAAACzaNa_9qnVRYNdYXfKyCC_BwAGiQQE9_gzSoKwwf79iYOuAAAAAAEJAAAGiQQE9_gzSoKwwf79iYOuAAF766P9AAA%3D (JT's sent reply, which quotes Shea's message)
What this is: email body as read through the Microsoft 365 connector, HTML stripped to text, in order sent. Times are ET. Shea's original was not returned by the connector; its text is the quoted copy inside JT's reply. The suspicious email itself was not attached in text form (inline images only).

[Sat 2026-06-06 9:46 AM] Shea Winkeller <sheaw@triumphcapitalmanagement.com> to Jeffrey Thomas — Subject: Is this legit?
I received this email at 2AM this morning.
It appears to have been sent by myself.
Is this a scam?

Please excuse any spelling or grammar errors this correspondence has been sent from a mobile device.

Shea A. Winkeller, ChFC®
Financial Consultant

Triumph Capital Management

Registered Branch Address:
1610 Wynkoop Street
Suite 550
Denver, CO 80202

Phone / E-mail:
Cell: 303-564-2399
Fax: 720-399-5560
SheaW@TriumphCapitalManagement.com

Advisory services offered through Triumph Capital Management, a registered investment advisor.

[Mon 2026-06-08 8:44 AM] Jeffrey Thomas to Shea Winkeller — Subject: Re: Is this legit?
Yeah it seems like a scam. You can just go ahead and delete this. Thanks for sending it over

Jeff Thomas
Chief Operating Officer at Triumph Capital Management