When phishing or spam messages are sent, Network Services needs the first email in the conversation for its contents as well as headers.
Anyone with an email account.