In some embodiments, techniques may include receiving an email message; determining a non-recipient email addressee associated with the email message, wherein the non-recipient email addressee has an address that is unaffiliated with a recipient for which the email message has been received; receiving a directive to whitelist the non-recipient email addressee; and responsive to receiving the directive to whitelist the non-recipient email addressee, adding the non-recipient email addressee to a whitelist.