Checking the BCC header is unreliable; it is usually omitted from messages. Instead, we can use the SMTP "to" list for deduplication.