I've noticed a few (2-3 per month) getting through with names of people in my address book, but not the email address, so it seems to be doing some type whitelisting there, other than that, its catching everything.