Pipe email to program after spamassassin

SYSTEM INFORMATION
OS type and version Rocky 8.10
Webmin version 2.202
Usermin version 2.102

I am trying to pipe incoming email to a php script.
When I try to add that in usermin I’m getting an error
unknown user: “/home/…/pipe.php”

If I create a .forward in the user’s home dir then it works, but the email doesn’t get checked for spam first. Which means spam gets into the ticketing system and a ticket gets opened and the ticket info gets send to an non-existent or spoofed email address.

How can I get forward to pipe to work after spamassassin?

Thanks,
Seb.