Email trace works by analyzing the email headers, which contain metadata about the email's journey. This includes information such as the sender's IP address, the servers it passed through, and any delays or errors encountered along the way. Tools like SMTP and third-party services can be used to decode this information and provide a clear picture of the email's path.