Hi,

Since it does not have watermark & is a not a Reply mail it will create an incident as the conditions are met & is expected. In your case you can create a business rule on incident table that runs before insert & checks the short description. Tf there exists you need to abort the action.