An improved method is provided for managing a whitelist. Upon receipt of an electronic message from an approved sender, the message is reviewed for references to other potential sender that may be added to the whitelist. For example, the potential sender may be copied on the electronic message. Based on this reference, the potential sender is deemed trustworthy and placed on the recipient's whitelist.