Rejecting emails with mismatched Header/Envelop FROM

We've been receiving some spam/phishing emails that are managing to get through on occasion and the majority have a MAIL fROM our domain but their ENVELOPE from is whatever spammy address.

My understanding is that SPF only checks the envelope so I was thinking, if it was possible, to set up a rule that detects messages with a MAIL FROM using our domain and a mismatched ENVELOPE FROM address.

If MAILFROM = <ourDomain> then (If MAILFROM != ENVELOPEFROM then REJECT email)

Thanks in advance.