How I Find Anyone's Email Address Without Guessing (2026)

The fastest way to find an email address is to check the person's LinkedIn "Contact info" tab, then guess the company's email pattern from their name and domain. Most professional emails follow firstname.lastname@company.com. If that doesn't work, Google search operators or a B2B contact tool will usually finish the job.

Below are 11 methods, ranked by speed and effort. I use a different approach depending on the situation. One contact? Start with LinkedIn and the company website. A list of 50? Skip manual search and use a verified database.

Which Method Should You Use?

For one specific contact: the free methods below take 5 to 10 minutes.

For 10 to 20 emails this week: the email pattern method plus a free verification tool covers most cases.

For 50+ contacts per week: manual research at that volume burns too much time. Use a B2B contact database.

Start Here: 3 Fast, Free Methods

1. The Company Website

Go to the prospect's company website and check three pages: "Contact Us," "About Us" or "Team," and the Press or Media page.

Smaller companies often list individual emails directly. The Press page usually has a PR contact. (Any real email at the domain reveals the company's email format, which matters for the pattern method below.)

Also check job postings. Hiring managers sometimes include a direct email in the listing.

2. LinkedIn and Social Profiles

On LinkedIn, open the person's profile and click "Contact info" near their name. If they have made their email public, it appears there. Not everyone does this, but it is a 10-second check worth making every time.

On X (formerly Twitter), look at the bio. Journalists, founders, and people in technical roles often list their email there.

For a full walkthrough across both free and paid approaches, see how to get email addresses from LinkedIn.

3. Ask Them Directly

Most reps skip this. If you are connected with someone on LinkedIn, send a short direct message: "Hi [Name], I have a quick note to send. What's the best email to use?"

Most people respond to a direct, polite ask.

How to Find an Email Address by Name (The Pattern Method)

Most companies use one email format across all employees. Once you identify the format, you can construct any employee's email from just their name and the company domain. In my experience, this works more often than people expect.

Step 1: Find the Company Domain

This is the part after the "@" in any work email at that company. For most businesses, it matches their website.

• Sarah Lee at Salesforce: @salesforce.com
• James Park at Acme: @acme.io

Step 2: Try the Most Common Email Formats

Six patterns cover the vast majority of professional email addresses:

Build two or three guesses. firstname.lastname@domain.com is the most common starting point.

Step 3: Verify Your Guess for Free (The Gmail Method)

Open Gmail and start composing a new message. In the "To" field, type your guess. Do not press Enter. Hover your cursor over the address you typed.

If the address links to a Google account, a profile card with the person's name and photo appears. That confirms the address.

No card appearing does not mean it's wrong. Some work emails aren't linked to Google accounts. But a confirmed card is a strong signal.

Shortcut: if you find one confirmed email at the company (from a press release or team page), you know the format. Apply it to your target. One email unlocks the whole company.

How to Use Google to Find Email Addresses

Google surfaces emails from speaker bios, conference programs, PDFs, and forum threads. Most people do not use the operators that make this actually work.

Basic Searches

• "Jane Smith" "company.com" email
• "Jane Smith" "VP of Marketing" contact

These pull contributor bios, podcast episode pages, and speaker profiles where people list their contact details.

Advanced Search Operators

• site:company.com "Jane Smith" searches only that company's domain
• filetype:pdf "Jane Smith" contact finds conference programs, speaker decks, and white papers
• "Jane Smith" "at" company "dot" com catches emails written out to avoid bots
• site:linkedin.com "Jane Smith" "Director of Sales" sometimes surfaces LinkedIn profiles with emails in the snippet

Check results on page two and three. Older conference programs and forum threads often have emails that a first-page search misses.

How to Find Email Addresses at Scale

Manual methods work for a handful of contacts. At 50 or more per week, the time cost compounds fast.

When Manual Research Breaks Down

Contact data goes stale at roughly 20 to 30 percent per year. For senior roles where job changes happen more often, some sources put it closer to 40 percent. Actually, that lines up with what I see from outbound teams: a list built three months ago can already have real accuracy problems.

You spend 20 minutes finding the email. It bounces. You try another contact. Repeat. That is not prospecting.

How SMARTe Finds Verified Email Addresses

SMARTe is a B2B sales intelligence platform with 289M+ verified contacts. Coverage includes 75%+ of US contacts with verified direct dials, above the industry average.

When you pull a contact in SMARTe, the email goes through real-time verification at that moment, not a monthly batch refresh. What you get is current.

The Chrome Extension: On LinkedIn and Company Sites

The SMARTe email finder Chrome extension works directly on LinkedIn profiles and company websites. Visit a prospect's profile, open the extension, and it surfaces their verified email and direct dial in a sidebar. No separate tab. No export-and-cross-reference.

The Web Platform: Bulk Search and Filtering

The SMARTe web app has 55+ search filters: job title, industry, company size, seniority, location, and technology stack data. Firmographics (company attributes like size, industry, and revenue) and technographics (the software tools a company uses) let you build precise target lists fast.

If you need a C-level executive email list filtered by industry, tech stack, and company size, the platform handles that in one search.

SMARTe has a free plan with 10 credits and no credit card required.

Three More Methods Worth Knowing

Subscribe to Their Newsletter

If the person sends a newsletter, sign up. The "from" address on the welcome email is often a direct address like firstname@company.com. That gives you both the email and the company's format.

Check WHOIS Records

When someone registers a domain, they submit contact details to a public database. Most registrars now offer privacy protection that masks this. But older personal sites and smaller startup domains sometimes still have it exposed.

Check via the ICANN WHOIS lookup. It takes about one minute.

GitHub for Technical Contacts

If your contact works in engineering or a technical role, check GitHub. When developers push code to a public repository, the commit metadata captures their email address. That is public data.

Search for the person's name on GitHub, find a public repository they contributed to, and look at the commit history. Many developers still use their real work email for code commits.

How to Verify an Email Address Before Sending

Never send to an unverified email address. Every invalid address creates a hard bounce. Too many bounces and email providers flag your domain as low-quality. Future emails land in junk folders, not just for bad contacts but for everyone on your list.

Most email providers start penalizing sender reputation at a 2 percent bounce rate. I try to stay under 1 percent on any outbound campaign.

Verification tools ping the mail server and confirm whether a mailbox exists, without sending anything.

Email Verification Tools Compared

All three handle standard verification well. The main difference appears with catch-all domains, which accept all incoming email regardless of whether the specific mailbox exists. For most outbound teams, any of these three gets the job done.

For broader email deliverability needs, dedicated deliverability tools cover inbox placement testing and blacklist monitoring beyond basic verification.

Is It Legal to Find and Email Someone?

Yes, with compliance requirements. Finding a professional's business email from public sources is legal. Contacting them is legal. The requirements apply to opt-out handling and what your emails contain.

US: CAN-SPAM

The CAN-SPAM Act requires a physical mailing address in every email, a clear way to opt out, and opt-out requests honored within 10 business days. Subject lines cannot mislead.

Most cold email software handles these requirements automatically.

EU: GDPR

GDPR (the EU's General Data Protection Regulation) allows B2B outreach under "legitimate interest," meaning you have a genuine professional reason to contact someone. Recipients must be able to opt out easily, and you have to act on those requests quickly.

If you prospect into EU markets regularly, start with compliant B2B data to reduce compliance risk from the beginning.

The Bottom Line

Finding someone's email address is a solvable problem in almost every case. Start with the company website and LinkedIn. If those fail, the pattern method plus the Gmail hover trick gets you most of the way there. Only reach for a paid tool when volume makes manual research impractical.

The step most people skip is verification. A found email that bounces does more damage than no email at all. Keep your bounce rate under 2 percent and your sender reputation stays clean.

Once you have verified addresses, the job is writing something worth opening. Cold email personalization is what separates replies from ignored messages. And building a prospecting list from verified data is what keeps the whole process efficient over time.