From:  [CEO Name] <team@angel.co>
  Reply-To: [CEO Name] <ceo's email address>

They're not forging the from address, it was SPF/DKIM signed.