As it stands, you can only search for the sender, which is easily spoofed - it needs to look at the headers not just the sender - as it stands it's very hard to recommend using this crate internally as there are so many caveats to it's use (like no way to filter by time or subject - which is in another enhancement feedback post here, and this one where it is only checking a specific field that is easily faked)