We were sent this email this morning. The scammer is using a phishing email site to duplicate sponsor email headers:
On Sat, November 14, 2020 2:17 am, [email protected] wrote:
> This is my secondary email. If I want to send email from securenym.net I use
> below website to make up a new header. I know you warn your customers but you
> cant want everyone.
>
> https://emkei.cz/
>
>