I'm not sure what you mean by "read the mail from user mail". If you mean from the user's local mailbox, Mail::Audit is typically used on mail before it's delivered locally.