correct me if i'm wrong, but doesn't every email service scan emails? be it for spam, security, viruses. they have to scan them. i thought this is standard industry practice.
Typically, that's based on the email metadata such as the sender address, or mime types of the attachments as opposed to the actual content of the email.