A scan-to-email function in a networked scanner device checks a destination email address entered by the user at the local user interface of the scanner against pre-programmed criteria for allowed email addresses. If the destination email address does not fulfil the criteria, the scan-to-email process is automatically stopped.