logo
search
Security Policy Errors

How to Block Emails from Specific Countries in Microsoft Defender

Tauseeq MagsiTauseeq Magsi Sep 28, 2026 869 views

Question details

The user needs to know how to block incoming emails originating from specific countries or regions using Microsoft Defender for Office 365, particularly navigating the updated interface.

How to Block Emails from Specific Countries in Microsoft Defender
Product
Microsoft Defender for Office 365
Device & OS
not provided
Scenario
Setting up inbound anti-spam policies in the Microsoft 365 environment to reduce international spam or targeted phishing attempts.
Observed behavior
The user is trying to find and configure the country blocking feature, noting that the interface now uses a text field instead of a traditional drop-down menu for country selection.
Before you start

Ensure you have the necessary administrator permissions (such as Security Administrator or Global Administrator roles) in the Microsoft 365 Defender portal to create or modify threat policies.

Solution 1Recommended

Configure Country Blocking in Anti-Spam Policies

Use the Microsoft Defender portal to create or edit an inbound anti-spam policy that restricts messages based on their geographic region of origin.

Microsoft Defender allows administrators to filter incoming emails based on the sender's origin country. This is done by modifying your organization's inbound anti-spam policies.

1
Access the Microsoft Defender Portal

Log in to the Microsoft Defender portal using your administrator credentials. In the left-hand navigation menu, expand the 'Email & collaboration' section.

2
Navigate to Threat Policies

Click on 'Policies & rules', and then select 'Threat policies' from the available options to view your security configurations.

3
Open Anti-Spam Settings

Under the Policies section, click on 'Anti-spam' to access the list of your current anti-spam configurations.

4
Edit an Inbound Policy

Click to create a new inbound anti-spam policy, or click on an existing inbound policy and select 'Edit spam and bulk actions' or 'Edit allowed and blocked senders and domains' depending on your specific portal view.

5
Input the Countries to Block

Locate the country and region blocking section. If the interface displays a text field instead of a drop-down menu, type the names of the countries or regions you wish to block and select the matches that appear.

6
Save and Test the Policy

Save your changes. It is highly recommended to monitor your quarantined messages closely for the next few days to ensure legitimate emails are not being inadvertently rejected by the new geographic blocks.

Configure Country Blocking in Anti-Spam Policies
Limitation on Geographic Blocking: Geographic blocking relies on the IP address of the sender. It may not stop spam or phishing attempts if the attacker uses spoofed IP addresses, VPNs, or compromised email servers located in countries that are not blocked.
Free Microsoft Office alternative

Need a Lightweight, Secure Office Suite? Try WPS Office

While Microsoft 365 and Defender handle enterprise email and security infrastructure, WPS Office provides an excellent, cost-effective alternative for your everyday document, spreadsheet, and presentation tasks. It is highly compatible with Microsoft formats, fully featured, and completely free to use.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install the Suite: Run the downloaded installer and follow the simple on-screen instructions to set up the suite on your computer.
  3. 3. Open Your Files: Launch WPS Office and seamlessly open your existing Microsoft Office files to start editing immediately.
Fully compatible with Microsoft Word, Excel, and PowerPoint file formats (.docx, .xlsx, .pptx).Lightweight installation that consumes minimal system resources compared to traditional suites.Free to use with a familiar, user-friendly tabbed interface for a seamless transition.Built-in PDF editing tools for comprehensive and secure document management.
microsoft office alternative - wps office

Frequently Asked Questions

Why can't I find the country drop-down list in the anti-spam policy?

Microsoft frequently updates the Defender interface for better performance. The country selection may now appear as a searchable text field where you must type the country name instead of scrolling through a traditional drop-down menu.

Will blocking specific countries stop all spam emails?

No. While it reduces spam originating from those specific regions, attackers often use spoofed IP addresses, virtual private networks (VPNs), or compromised servers in unblocked countries to bypass geographic restrictions.

How do I unblock a country if legitimate emails are getting rejected?

Navigate back to the Microsoft Defender portal under Email & collaboration > Policies & rules > Threat policies > Anti-spam. Edit your inbound anti-spam policy, locate the country blocking field, remove the specific country from the list, and save the changes.

Does country blocking affect my outgoing emails?

No, the inbound anti-spam policy country blocking settings only affect messages being received by your organization, not the emails you send out to external recipients.