I do this all the time with accounts we need to monitor ....
We just simply toss in an "unseen deliver" line to do that in
the /etc/antivirus.exim filter file for the email address that
we want to monitor and we get copies of all inbound and
outbound mail for that account.