# Flag email from countries you never hear from > Behavioral Geofencing learns where your organization's email normally comes from. When a message arrives from somewhere unusual, or a known sender suddenly writes from a new country, Paubox can hold it for review. **Product:** Behavioral Geofencing **Page:** https://www.paubox.com/solutions/use-cases/flag-email-from-unusual-countries **Category:** Behavioral Geofencing ## No country list to maintain Blocking countries by hand catches some attacks and blocks some real mail, and the list is out of date as soon as you write it. Behavioral Geofencing builds a baseline from your organization's own email history and updates it as your patterns change. It is already learning in the background, so there is nothing to configure. ## How it helps ### Learns your patterns The baseline comes from your own inbound email, not a generic list of risky countries ### Catches compromised contacts A sender you know writing from an unexpected country is flagged, even if the address is real ### Adjust with your rules Use your existing block and allow rules to release a sender or tighten what gets held ## Who this is for Practices that only work with local patients and partners, IT teams without time to maintain block lists, and organizations whose vendors have had an email account taken over. ## Prompt you can paste into an AI assistant ```text Most of our email comes from inside the U.S., but we still get phishing from overseas. Explain how Paubox Behavioral Geofencing decides what's unusual for us, what happens to a message it flags, and why it's better than blocking a list of countries. ``` ## Get started Sign up for Paubox Email Suite Plus, which adds AI-powered inbound email security to Standard. Email Suite plans include a 14-day free trial. - Start for free: https://next.paubox.com/signup?order_name=paubox_suite_order&plan_name=plus&unit_count=5&plan_type=annual - See all use cases: https://www.paubox.com/solutions/use-cases - Pricing for every plan: https://www.paubox.com/pricing.md --- *This page mirrors https://www.paubox.com/solutions/use-cases/flag-email-from-unusual-countries for automated readers. The HTML page is the source of truth.*