...
Where an encrypted field is mapped with Inbound Mapping: Identity Matching key, it can no longer be used to query records in the usual manner. In this case Send2CRM falls back to a search (SOSL) query instead of a standard database (SOQL) query. This has some limitations:
...