Trying to find someone’s email address is one of the most common challenges in sales, recruitment, networking, and business development. You know who you want to reach. You know the company they work for. But that one piece of contact information — the email address — is the wall between you and the conversation you need to have.
The good news is that finding a person’s email address is entirely achievable with the right combination of tools, techniques, and verification steps. This guide covers 11 proven methods ranging from free manual techniques to professional-grade email finder tools, complete with a decision matrix to help you choose the right approach for your situation.
What Is the Best Way to Find Someone’s Email Address?
The best method depends on three factors: your budget, how many emails you need, and how accurate those addresses must be. If you need one email for a high-priority contact, a manual approach works fine. If you need hundreds of verified addresses for a sales campaign, you need a dedicated tool.
Here is a quick decision framework. For each method below, the effort, cost, accuracy, and best use case are laid out so you can pick the right one without wasting time.
| Scenario | Recommended Method | Effort | Cost | Accuracy |
|---|---|---|---|---|
| One email, any budget | Google search operators | High | Free | Medium |
| One email, fast | LinkedIn email finder extension | Low | Free/Paid | High |
| 10-50 emails per month | Email finder tool (free tier) | Low | Free | High |
| 100+ emails per month | Email finder tool (paid) | Low | $34-49/month | High |
| Bulk prospecting (1000+) | B2B database (Apollo, Lusha) | Low | $49+/month | High |
| Developer/automation | API-based email finder | Medium | Varies | High |
| Warm introduction | Mutual connection ask | Medium | Free | Very High |
Using a Dedicated Email Finder Tool
A dedicated email finder tool is the fastest and most reliable way to find someone’s email address at scale. These tools maintain massive databases of professional contacts and can return verified email addresses in seconds.
How it works: You enter a person’s name and company domain (or search by job title, location, and company size). The tool scans its database, cross-references multiple sources, and returns the best match. Most tools also verify the address in real time.
Best for: Sales teams, recruiters, and marketers who need verified emails in bulk.
Popular tools include:
- Hunter.io — domain-based email search with confidence scores
- Snov.io — email finder with built-in verification and LinkedIn integration
- Apollo.io — large B2B database with intent data
- Lusha — contact data with phone numbers and emails
- FindThatLead — email finder with social URL search
Pros: Fast, accurate, scalable, includes verification
Cons: Costs money at scale, some tools have limited database coverage for niche industries
Using LinkedIn Email Finder Extensions
LinkedIn is the largest professional network on the planet, and most people keep their profiles reasonably up to date. While LinkedIn does not display email addresses publicly, browser extensions can find them by cross-referencing profile data with external databases.
How it works: Install a Chrome extension, visit a LinkedIn profile, and click the extension button. The tool searches for a matching email address and returns it along with a confidence score.
Best for: Sales professionals who spend most of their prospecting time on LinkedIn.
Popular extensions include:
- Snov.io LinkedIn Email Finder
- Lusha
- Apollo.io Chrome Extension
- Skrapp.io
Pros: Works directly within LinkedIn, no context switching, often includes one-click export to CRM
Cons: Requires a LinkedIn account, some extensions have daily limits on free tiers
Using Google Search Operators
Google search operators are the most powerful free method for finding publicly available email addresses. This technique works because many people list their email addresses on websites, forums, PDFs, press releases, and conference speaker pages.
How it works: You combine the person’s name, company, and relevant keywords with Google search operators to narrow results.
Example queries:
- `”John Doe” “company.com” email`
- `”Jane Smith” “marketing” “contact”`
- `”John Doe” “conference speaker” email address`
- `site:company.com “John Doe” email`
- `”@company.com” “John Doe”`
Pros: Completely free, no tool required, works for anyone who has ever published their email online
Cons: Time-consuming, requires manual effort, no verification, misses unlisted addresses
Free Methods to Find Someone’s Email Address
Not every situation calls for a paid tool. When you need a single email address and have time to do some digging, these free methods are effective.
Searching Social Media Profiles
Social media platforms are surprisingly good sources for email addresses, especially for creators, freelancers, and public-facing professionals.
Twitter / X: Check the profile bio and website link. Many professionals list a business email in their bio or on their linked website. You can also search for tweets containing the person’s name and “email” or “contact.” The advanced search feature lets you filter by keywords, making it possible to find tweets where someone has publicly shared their email address in a conversation.
GitHub: Developers often include their email address in their GitHub profile or in the commit history of their repositories. Check the profile page and the “Contributing” section of popular projects. You can also look at the commit history of repositories they contribute to — many developers have their email visible in commit metadata even if it is not on their profile page.
Facebook: Look at the “About” section and “Contact and Basic Info” tab. Some users display their email publicly. Company Facebook pages sometimes list a business contact email in the page description or in posts about job openings.
Instagram: Email addresses are rarely in bios, but many creators link to a website or Linktree page that includes contact information. If they have a business or creator account, Instagram sometimes shows a “Contact” button that reveals the email they have registered with the platform.
LinkedIn: While LinkedIn does not display email addresses directly, you can sometimes find them in the “Contact Info” section if the user has chosen to share it. Look for the “Contact and Personal Info” link on their profile page. Some users list their email alongside their website and social links.
Best for: Creators, developers, freelancers, and public figures who want to be contacted.
Checking Company Websites and Press Releases
Company websites are an underutilized source of email addresses, especially for executives and department heads.
Where to look:
- “About Us” or “Team” pages — many companies list direct emails for leadership
- “Contact” page — department-specific addresses like marketing@ or sales@
- Press releases — often include the PR contact’s direct email
- Investor relations pages — include CFO and IR contact details
- Downloadable resources — brochures, pitch decks, and investor reports sometimes include personal emails
Pro tip: Use `site:company.com “email”` in Google to find all pages on a company domain that mention email addresses.
Best for: Finding executive contacts, PR contacts, and department heads.
Subscribing to Newsletters
Many professionals send newsletters from their personal email addresses rather than a no-reply address. Subscribing to someone’s newsletter can reveal their direct email in the welcome message or footer.
How it works:
1. Find the newsletter signup form on the person’s blog, website, or LinkedIn
2. Subscribe with your own email address
3. Check the welcome email for the sender’s direct contact
4. Replying to the newsletter sometimes goes straight to their personal inbox
This method has the added benefit of starting a natural conversation — you are already engaging with their content when you reach out.
Best for: Connecting with creators, founders, and content marketers.
Using Email Permutators
When you know a person’s name and their company domain but not the exact email format, an email permutator can generate all possible variations.
Common email formats:
- [email protected]
- [email protected]
- [email protected]
- [email protected]
- [email protected]
- [email protected]
How it works: Enter the first name, last name, and domain into a permutator tool like Email Permutator by Mailmeteor. The tool generates a list of possible email addresses. You then run each through an email verification tool to find the valid one.
Pros: Free or low cost, works when you have partial information
Cons: Slow, requires verification, accuracy depends on the verification tool
Asking Directly Through Mutual Connections
Sometimes the most effective method is also the simplest. If you have a mutual connection with the person you want to reach, ask for an introduction.
How to approach it:
- On LinkedIn, check if you share a connection
- Ask the mutual connection for a warm introduction
- If no direct connection exists, try reaching out to someone in the same department
Sample message:
“Hi [Name], I am trying to reach [Target Person] at [Company] about [Topic]. I noticed you are connected with them on LinkedIn. Would you be open to making an introduction or sharing the best way to reach them?”
Best for: High-value targets where a cold email might not work, and when you have a network connection.
Paid Email Finder Tools: A Detailed Comparison
When you need to find email addresses regularly or at scale, a paid email finder tool is worth the investment. Here is a comparison of the most popular options.
| Tool | Starting Price | Free Tier | Database Size | Verification | LinkedIn Extension | Best For |
|---|---|---|---|---|---|---|
| Hunter.io | $34/month | 25 searches/month | Domain-based search | Yes, with confidence score | Yes | Domain-level email discovery |
| Snov.io | $39/month | 50 credits/month | 2B+ contacts | Yes, 7-tier verification | Yes | All-in-one finder + outreach |
| Apollo.io | $49/month | 10,000 credits/month | 275M+ contacts | Yes | Yes | Large-scale B2B prospecting |
| Lusha | $36/month | 5 credits/month | 100M+ contacts | Yes | Yes | Quick individual lookups |
| FindThatLead | $49/month | 50 credits/month | Domain + social search | Yes | Yes | Social URL-based finding |
| Skrapp.io | $49/month | 100 credits/month | Domain-based | Yes | Yes | LinkedIn + domain search |
Key features to look for in an email finder tool:
- Real-time email verification
- LinkedIn integration (Chrome extension)
- Bulk search and export capabilities
- CRM integration (Salesforce, HubSpot, Pipedrive)
- Credit refund for invalid emails
- API access for automation
Using APIs for Automated Email Finding
For developers and teams that need to integrate email finding into their own workflows, most major email finder tools offer REST APIs. This allows you to build custom prospecting tools, automate lead enrichment in your CRM, or run batch lookups without manual intervention.
How API-based email finding works:
1. Send a request with the person’s name and company domain
2. The API returns the best matching email address with a confidence score
3. Optionally request verification of the address
4. Process the result in your application
Example API use cases:
- Automatically enrich new CRM contacts with email addresses on import
- Build a custom lead scoring tool that includes email findability as a signal
- Create a Slack bot that looks up email addresses on demand
- Integrate email finding into your sales engagement platform
Tools with strong APIs:
- Hunter.io — simple REST API with domain search and email verification
- Snov.io — API for finding, verifying, and sending emails
- Apollo.io — GraphQL API for contact and company data
- Lusha — API for contact and company enrichment
API-based finding is particularly valuable for teams that process large volumes of leads and need to maintain data freshness. Most APIs charge per lookup, with rates ranging from $0.01 to $0.05 per verified email depending on volume.
How to Verify an Email Address Before Sending
Finding an email address is only half the battle. Sending to an invalid or inactive address damages your sender reputation and increases your bounce rate, which can lead to domain blacklisting.
Email verification is the process of confirming that an email address exists, is active, and can receive messages without bouncing. It is a critical step that separates professional email outreach from guesswork. Every email finder tool has a different accuracy rate, and even the best tools occasionally return invalid addresses. Running every address through a verification step protects your campaigns from unnecessary bounces.
What Happens When You Send to an Invalid Email?
Every bounced email counts against your sender reputation. Internet service providers (ISPs) track bounce rates, and a high bounce rate signals that you are sending to poorly maintained lists. This can result in:
- Emails landing in spam folders
- Temporary blocks from major ISPs
- Permanent domain blacklisting
- Damaged deliverability for all future campaigns
Industry best practice is to keep your bounce rate below 2%. For cold email campaigns, aim for under 5%.
Email Verification Checklist
A thorough email verification process checks multiple signals before you send. Here is a seven-step verification workflow used by professional verification tools.
1. Syntax check — confirms the email follows proper formatting rules (no spaces, valid characters, correct @ placement)
2. Domain validation — verifies the domain exists and is configured to receive email
3. MX record check — confirms the domain has mail exchange records and can accept messages
4. Role-based account detection — flags generic addresses like info@, sales@, support@ that may not reach a specific person
5. Disposable email detection — identifies temporary or one-time email addresses from services like Mailinator or Guerrilla Mail
6. Catch-all server check — detects domains configured to accept all email at a catch-all address, which means delivery is not guaranteed
7. Spam trap identification — identifies addresses designed to catch spammers, which if hit can damage your reputation
Professional verification tools like DoYouMail automate this entire process and return a deliverability score for each address. Most tools claim 98%+ accuracy in identifying invalid addresses.
Email Format Patterns by Company and Industry
Understanding common email format patterns helps you guess the correct format when you have partial information. Different companies and industries tend to follow specific patterns.
| Company Size | Most Common Pattern | Example | Prevalence |
|---|---|---|---|
| Enterprise (10,000+ employees) | [email protected] | [email protected] | 60-70% |
| Mid-market (200-10,000) | [email protected] | [email protected] | 50-60% |
| Small business (10-200) | [email protected] | [email protected] | 40-50% |
| Startup | [email protected] | [email protected] | 50-60% |
| Tech companies | [email protected] | [email protected] | 45-55% |
| Finance/Legal | [email protected] | [email protected] | 60-70% |
| Healthcare | [email protected] | [email protected] | 55-65% |
| Education | [email protected] | [email protected] | 50-60% |
| Government | [email protected] | [email protected] | 60-70% |
How to find the pattern for a specific company:
1. Check the company’s “Team” or “About Us” page for employee email examples
2. Search `site:company.com “@company.com”` in Google to find publicly listed emails
3. Use a tool like Hunter.io which shows the most common pattern for any domain
4. Check press releases which often include formatted email addresses
Legal and Compliance Considerations
Finding and using someone’s email address comes with legal obligations, especially when operating across different jurisdictions.
Is It Legal to Find Someone’s Email Address?
Yes, finding someone’s email address is legal when you use legitimate methods and the address is either publicly available or obtained through a compliant data source. However, how you use that email address is regulated by privacy laws.
GDPR Requirements for Email Finding
If you are finding email addresses of people in the European Union or the United Kingdom, the General Data Protection Regulation (GDPR) applies. Key requirements include:
- Lawful basis for processing: You need a legitimate interest to collect and use personal data, including email addresses
- Transparency: You must inform individuals about how you obtained their data and how you will use it
- Right to erasure: Individuals can request deletion of their data at any time
- Data source documentation: You should document where and how you obtained each email address
GDPR fines can reach up to 20 million euros or 4% of annual global turnover, whichever is higher. Using a reputable email finder tool that maintains GDPR-compliant data sources reduces your risk.
CAN-SPAM Compliance for Cold Email
In the United States, the CAN-SPAM Act sets the rules for commercial email. Key requirements include:
- Accurate header information: Your from name, from address, and subject line must not be misleading
- Opt-out mechanism: Every email must include a clear way to unsubscribe
- Prompt opt-out processing: You must honor opt-out requests within 10 business days
- Content identification: The email must be clearly identified as commercial or transactional
CAN-SPAM does not require prior consent for B2B cold email, but it does require that recipients can opt out easily. Many email service providers also have their own terms of service that require consent before sending.
What to Do After You Find the Right Email Address
Finding the email address is step one. What you do next determines whether your outreach succeeds.
Verify Before You Send
Always verify the email address before adding it to your campaign. Even the best email finder tools return invalid addresses occasionally. Run every address through a verification tool like DoYouMail to confirm it is valid, active, and safe to send to.
Warm Up Your Sending Domain
If you are using a new domain or a domain that has not sent much email before, you need to warm it up. Email warmup is the process of gradually increasing email volume from a new domain to build a positive sending reputation with ISPs.
Sending large volumes from a cold domain triggers spam filters. A proper warmup takes 2-4 weeks and involves sending small, engaged volumes that gradually increase. Platforms like [Mystrika](https://mystrika.com/) include automated warmup as part of their cold email infrastructure.
Set Up Email Authentication
Before you send any cold email, make sure your domain has the proper authentication records configured. Email authentication tells receiving servers that your email is legitimate and not spoofed.
Three records are essential:
- SPF (Sender Policy Framework): Lists which servers are authorized to send email from your domain
- DKIM (DomainKeys Identified Mail): Adds a digital signature to your emails that verifies they have not been tampered with
- DMARC (Domain-based Message Authentication, Reporting, and Conformance): Tells receiving servers what to do if SPF or DKIM fails
Without proper authentication, your carefully crafted emails are more likely to land in spam folders, regardless of how well you found the recipient’s address. For a deeper look at this topic, read our guide on [email deliverability](https://blog.mystrika.com/email-deliverability/).
Craft Your First Outreach Message
The email address you worked so hard to find is only valuable if your message gets a response. Follow these principles for your first outreach:
- Personalize the first line: Reference something specific about the person or their work
- Keep it short: 50-125 words is the sweet spot for cold email
- State your value clearly: What is in it for them?
- One clear call to action: Ask for one specific next step
- Include an opt-out option: Make it easy for them to say no
Example cold email template:
Subject: Quick question about [Specific Topic]
Hi [First Name],
I came across your article on [Topic] and found your take on [Specific Point] particularly interesting. We have been working on [Relevant Problem] at [Your Company] and would love to get your perspective.
Would you be open to a 15-minute call next week? Happy to work around your schedule.
Best,
[Your Name]
Tracking and Measuring Your Outreach
Once you start sending emails to the addresses you have found, tracking your results helps you refine both your finding methods and your messaging. Key metrics to monitor include:
- Delivery rate: The percentage of emails that reach the inbox (should be 95%+ for verified lists)
- Open rate: The percentage of delivered emails that are opened (15-25% is typical for cold email)
- Reply rate: The percentage of opened emails that get a response (5-15% is good for cold outreach)
- Bounce rate: The percentage of emails that bounce (should be under 5%, ideally under 2%)
- Opt-out rate: The percentage of recipients who unsubscribe (under 1% is healthy)
If your bounce rate is higher than expected, your email finding or verification process needs improvement. If your open rate is low, your subject lines or sender reputation may need work. If your reply rate is low, your message content needs refinement.
Building a Repeatable Email Finding Workflow
For teams that need to find email addresses regularly, building a repeatable workflow saves time and ensures consistency. Here is a workflow that balances speed, accuracy, and cost:
1. Identify your target list — define the companies, roles, and locations you want to reach
2. Find the email format — use Hunter.io or a company website check to determine the email pattern for each target company
3. Generate email addresses — use a permutator or email finder tool to create candidate addresses
4. Verify every address — run all candidates through a verification tool like DoYouMail
5. Score and prioritize — focus on verified addresses with high confidence scores first
6. Import to your outreach platform — load verified addresses into your cold email platform
7. Send and monitor — track delivery, opens, replies, and bounces
8. Re-verify periodically — email addresses can become invalid over time; re-verify your list every 30-60 days
If you are sending cold email at scale, using a cold email platform like Mystrika helps you manage sequences, track opens and replies, and maintain deliverability across your campaigns.
Key Takeaways
- The best method to find someone’s email depends on your budget, volume needs, and accuracy requirements. Use the decision framework to choose the right approach.
- Free methods like Google search operators, social media checks, and company website searches work well for one-off lookups but do not scale.
- Paid email finder tools like Hunter.io, Snov.io, and Apollo.io are essential for bulk prospecting and provide built-in verification.
- Always verify email addresses before sending. A single campaign with high bounce rates can damage your sender reputation permanently.
- Email verification should check syntax, domain validity, MX records, role-based accounts, disposable addresses, catch-all servers, and spam traps.
- Legal compliance matters. Follow GDPR requirements for EU contacts and CAN-SPAM rules for US contacts.
- After finding an email, verify it, warm up your domain, set up email authentication, and craft a personalized outreach message.
- Understanding email format patterns by company size and industry helps you guess the correct format when you have partial information.
Frequently Asked Questions
What is the fastest way to find someone’s email address?
The fastest way is to use a dedicated email finder tool like Hunter.io or Snov.io. Enter the person’s name and company domain, and the tool returns a verified email address in seconds. For a single address, a LinkedIn email finder extension is equally fast and works without leaving the LinkedIn platform.
Can I find someone’s email address for free?
Yes. Google search operators, social media profile checks, company website searches, and newsletter subscriptions are all free methods. The trade-off is time — free methods require manual effort and do not scale well. For one or two addresses, free methods work fine. For regular prospecting, a paid tool saves hours.
Is using an email finder tool legal?
Yes, when used for legitimate business purposes and in compliance with applicable privacy laws. Email finder tools that source data from public sources and maintain GDPR-compliant databases are legal to use. The key is how you use the data — you must follow email marketing regulations like GDPR and CAN-SPAM, provide opt-out options, and respect data deletion requests.
How do I know if an email address is valid?
Use an email verification tool. These tools check multiple signals including syntax, domain validity, MX records, and whether the mailbox actually exists. Professional verification tools like DoYouMail provide a deliverability score and flag risky addresses before you send. Manual checks like sending a test email are not reliable and can increase your bounce rate.
What is the most common email format for businesses?
The most common format is [email protected], used by approximately 60% of mid-market and enterprise companies. Small businesses and startups more commonly use [email protected]. The format varies by company size, industry, and company culture. Tools like Hunter.io can show you the most common pattern for any specific domain.
How many emails bounce on average?
For well-maintained, verified lists, the average bounce rate is 2-5%. For unverified lists or purchased lists, bounce rates can exceed 20%. Industry best practice is to keep your bounce rate below 2% to maintain good sender reputation. Using a verification tool before every campaign helps you stay within this threshold.
Should I warm up a new email domain before sending?
Yes, absolutely. New domains have no sending history, so ISPs treat their email with suspicion. A proper warmup process gradually increases sending volume over 2-4 weeks, building a positive reputation. Sending cold email from an unwarmed domain results in most emails landing in spam. Platforms like Mystrika include automated warmup to handle this process.
What should I do if I cannot find someone’s email address?
If all methods fail, try these alternatives: reach out through LinkedIn InMail, use a contact form on their company website, ask for a warm introduction from a mutual connection, or engage with their content on social media before reaching out directly. Sometimes building a relationship first makes the email address easier to obtain later.