An apparatus and method are disclosed for selectively filtering and inspecting incoming e-mail. The steps to selectively filter and inspect incoming e-mail include: assigning a risk value to each section of an incoming e-mail, presenting the incoming e-mail with sections blocked based on the risk value, and selectively disclosing blocked sections of the e-mail to a reviewer based on input from the reviewer. The method provides a way for a reviewer to filter risky e-mails based on multiple criteria, and safely review filtered e-mails to ensure legitimate e-mails are not incorrectly filtered.