Yes, you would implement this using a content filter.
WARNING: In the KB that I listed below, for item #2, you can use the Credit Card number as your IF condition.
Can a Content Filter divert messages to the IronPort Spam Quarantine?
http://tinyurl.com/coebj3
Hello there,
Is there a way I can quarantine a mail containing a Credit Card Number and send a message to the recipient with a link to the quarantined mail, and only to that mail?
It's because of a PCI requirement.
Thank you!