Understood but where is the bcc’d email filtered out? At the sender’s or the receiver’s server? Let me give a few more details: at work we have a cms that picks up emails sent to staff members from organizations whose emails are registered with the cms. One of my colleagues noticed that email was being picked up for a recipient whose email does show up in the email (as far as I can see looking at headers, etc) but this recipient is actually associated with the sending organization and the only way we can think of this happening is the recipient is bcc’d. We don’t see it but the cms grabs the email before the receiving server strips off bcc’s.