sametime just search the mail address, but not the whole
We became fake mails from a user with the address firstname.lastname@example.org
Users see a green button next to the mail, because my address is email@example.com
Sametime doesn't search the whole address, just the beginning.
This is a security issue.