A system and method for identifying email campaigns. A first embodiment uses an email client local to email recipients to report email header back to an email monitor server application. The email analysis server application compares the email header information received from many sources and identifies email messages having substantially similar from addresses, subjects and dates as being part of a single email campaign. In a second embodiment, an email monitor program in a mail server local to email recipients is used to report back email header information.