As a datapoint: I have routinely been using Claude Code through a VPN for 9 months and am in the UK. I think it has to be more than this. I sometimes shift endpoint mid session and worry I might get flagged. It hasn’t happened yet at least.
I don't mean that to say that anyone outside the US is suspicious. Just that parent commenter might be from one of a set of countries that tend to be flagged as suspicious. (But I did not want to directly ask him where he lives.)
I can almost hear the “famous last words”…