8. A computer-implemented method, comprising: receiving an e-mail message for a recipient; detecting a country of origin for the e-mail message; detecting a language of the e-mail message; determining at least one of a country frequency with which the recipient communicates with a country of origin by e-mail, or a language frequency with which the recipient communicates in a language by e-mail; assigning a first score to the message according to the country frequency; assigning a second score to the message according to the language frequency; and using the first score and the second score to determine whether the e-mail message is spam.
8. A computer-implemented method, comprising: receiving an e-mail message for a recipient; detecting a country of origin for the e-mail message; detecting a language of the e-mail message; determining at least one of a country frequency with which the recipient communicates with a country of origin by e-mail, or a language frequency with which the recipient communicates in a language by e-mail; assigning a first score to the message according to the country frequency; assigning a second score to the message according to the language frequency; and using the first score and the second score to determine whether the e-mail message is spam. 9. The computer-implemented method of claim 8 , comprising using network address of the e-mail message to determine the country of origin.