It usually takes more than one email unless its flagged as having malicious contents.