Below are the reasons why emails are quarantined byt the Content Filtering policy:

1. TMEMS counts both envelope and MIME header recipients.
2. TMEMS counts all recipients. This includes TMEMS-managed domain or other non-TMEMS domain.
3. BCC recipients are NOT counted. These envelope recipients do not appear in MIME header recipients.

To check the header recipients, do the following:

1. Log on to the TMEMS web console.
2. Go to Logs > Mail Tracking.
3. Search for the quarantined email.
4. Click on the email timestamp.
5. You can check the header recipients in Mail Tracking Details.