Email blacklists work by collecting data on email sending behaviors from various sources, including spam traps, user complaints, and honey pots. When an IP address or domain exhibits suspicious activity, it is flagged and added to the blacklist. Email servers then reference these lists to determine whether to accept, reject, or route incoming emails to the spam folder.