Find Anyone’s Email Address: A Repeatable Process That Works

Finding someone’s email address by name is a straightforward process when you know where to look. Start with free tools like Hunter.io or RocketReach to search by name and company domain, then cross-reference against LinkedIn, company websites, and public professional profiles. In most cases, one of those three steps will get you there.

The harder question is not how to find the address. It is whether the approach you are using is worth the effort, and whether what you do next will actually get a response. That is where most people lose time.

Why Most People Waste Time Looking in the Wrong Places First

When I was building out new business pipelines at iProspect, we did not have a dedicated sales team for the first few years. Business development was a shared responsibility, which meant everyone had their own approach to finding contact information. Some people spent an hour on LinkedIn trying to find an email that was sitting in plain sight on the company’s contact page. Others went straight to tools and got burned by outdated data.

The most common mistake is starting with the person rather than the company. If you know where someone works, the company domain is your fastest route to their email format. Once you know the format, finding any email at that company takes seconds.

Here is the order that actually saves time:

1. Check the company website first. Press pages, team pages, and contact pages often contain direct emails or enough information to infer the format.
2. Use a domain search tool to identify the email pattern in use at that company.
3. Apply the pattern to the person’s name and verify the address before you send anything.

That sequence works for the vast majority of B2B outreach. The tools come in at step two, not step one.

The Four Email Formats That Cover Most B2B Companies

Most companies use one of four standard email formats. Knowing them means you can often construct the right address without any tool at all:

• firstname@company.com
• firstname.lastname@company.com
• f.lastname@company.com
• firstnamelastname@company.com

Larger enterprises sometimes use variations like lastname.firstname or include department codes, but those are edge cases. If you can find one verified email from that company, whether from a press release, a conference bio, or a public LinkedIn post, you can reverse-engineer the format and apply it to anyone else at the organisation.

This is the kind of thing that sounds obvious once you hear it, but it is genuinely underused. I have seen agencies pay for expensive data subscriptions when a five-minute pattern check would have done the same job for free.

If you want to go deeper on how email fits into a broader acquisition strategy, the Email and Lifecycle Marketing hub covers the full picture, from list building to deliverability to what actually drives response rates.

Which Tools Are Worth Using and Which Are Not

The market for email lookup tools is crowded, and the quality varies considerably. Here is an honest assessment of what is actually useful:

Hunter.io

Hunter is the most widely used tool for good reason. Enter a company domain and it returns all the email addresses it has indexed for that organisation, along with the format pattern it has identified. The free tier gives you 25 searches per month, which is enough for targeted outreach. The domain search function is more useful than the individual name search because it shows you the pattern, not just one result.

Hunter also has a built-in email verifier, which checks whether an address is likely to be deliverable before you send. That matters more than most people realise. Sending to unverified addresses damages your sender reputation over time, and once your domain is flagged, recovery is slow and painful.

RocketReach

RocketReach is stronger for individual lookups when you have a name and a company but no domain pattern to work from. It pulls from multiple data sources and tends to surface personal email addresses alongside professional ones. The data quality is generally good, though like all tools in this space it has gaps, particularly for smaller companies and non-English-speaking markets.

Snov.io

Snov.io combines email finding with a basic CRM and outreach sequencing tool. If you are doing volume outreach and want everything in one place, it is a reasonable option. The email verification is solid. The outreach automation is functional but not sophisticated. For anything beyond simple sequences, you will outgrow it quickly.

LinkedIn Sales Navigator

Sales Navigator does not give you email addresses directly, but it is one of the most reliable ways to confirm you have the right person before you look up their contact details elsewhere. The InMail function is also worth using for senior contacts where a cold email would feel intrusive. Response rates on InMail are lower than people expect, but for the right prospect at the right moment, it works.

Tools to Treat With Caution

There is a category of tools that promise bulk email extraction at scale, often by scraping websites or social profiles. Some of these are technically functional. Most of them produce data that is out of date, poorly verified, and legally questionable under GDPR if you are targeting contacts in the UK or EU. I have seen agencies use these tools and end up with bounce rates that damaged their sending domains for months. The short-term volume gain is not worth the deliverability cost.

How to Verify an Email Address Before You Send

Finding an address and knowing it works are two different things. Sending to an address that bounces is not just wasted effort. If your bounce rate climbs above a certain threshold, inbox providers start treating your domain as a source of spam. That affects all your email, not just the cold outreach.

The simplest verification approach is to use a dedicated tool. Hunter’s verifier, NeverBounce, and ZeroBounce all perform SMTP verification, which checks whether the mail server will accept messages for that address without actually sending one. It is not 100% reliable because some servers return a false positive, but it catches the majority of hard bounces before they happen.

If you are working with a small list of high-value contacts, you can also verify manually. Search the address format against known public sources. Check whether the person has used that email in a press release, a conference registration, or a public forum. It takes longer but gives you higher confidence for contacts where the relationship matters.

One thing worth understanding: even a verified address does not guarantee delivery. Deliverability depends on your sending domain reputation, your email content, your sending volume, and whether the recipient’s server has any specific filters in place. Verification removes the obvious hard bounces. It does not solve the broader deliverability question. Moz has a useful overview of email newsletter fundamentals that covers the deliverability side in more detail.

What the Compliance Picture Actually Looks Like

This is the part most articles on this topic either skip or bury. It deserves more direct treatment.

Under GDPR, sending unsolicited email to individuals in the UK or EU requires a lawful basis. The most commonly cited basis for B2B cold email is legitimate interest, which means you have a genuine business reason for contacting this person and they would reasonably expect to receive this kind of communication. That is a higher bar than most cold emailers apply in practice.

Legitimate interest is not a catch-all. It requires a three-part test: you have a legitimate purpose, the processing is necessary to achieve it, and the individual’s interests do not override yours. If you are contacting a procurement director at a company that buys what you sell, that is a defensible position. If you are mass-emailing a scraped list of names because they might one day need your product, it is not.

CAN-SPAM in the US is less restrictive for B2B, but it still requires a clear sender identity, a physical address, and a functioning opt-out mechanism. The practical standard for professional outreach is higher than the legal minimum in both markets.

I have judged the Effie Awards and reviewed a lot of marketing work across a lot of categories. The campaigns that hold up over time are built on genuine relevance, not volume. The same principle applies to outreach. Mailchimp’s guidance on email confidentiality and compliance is worth reading if you want a clear-headed summary of what responsible email practice looks like.

The Signal Problem: Why Having the Address Is Not the Hard Part

When I ran agencies, the constraint was never finding contact information. We could always find a way to reach someone. The constraint was sending something worth reading.

Most cold email fails not because the address was wrong but because the message was generic. It reads like it was written for a category of person, not for this person. The recipient can tell immediately, and they delete it. The research, the domain lookup, the verification, all of that effort produces a deliverable email that gets ignored because nobody thought carefully about what to actually say.

The outreach that works is specific. It references something real about the recipient’s business. It makes a connection between their situation and what you are offering that they could not have made themselves. It is short. It does not ask for much. And it arrives at a moment when it is relevant.

HubSpot’s new business email templates are a useful starting point for structure, but the templates themselves are not the point. The point is the thinking behind them: what does this person actually care about, and why should they spend 90 seconds reading my email today?

Personalisation at the surface level, using someone’s first name and company name, does almost nothing. Personalisation at the level of context and relevance is what changes response rates. Buffer’s breakdown of personalisation in email marketing makes this distinction clearly and is worth reading before you write your first sequence.

When to Use Email and When Something Else Works Better

Email is not always the right channel for first contact. For senior decision-makers at large organisations, a well-timed LinkedIn message or a warm introduction through a mutual connection will almost always outperform a cold email, regardless of how good the email is. The channel carries a signal about how much effort you have invested in the relationship before asking for something.

Email works best for mid-level contacts where there is a clear and specific reason to reach out. It works well for follow-up after a first touch through another channel. It works for nurturing contacts who have already expressed some interest. It is less effective as the very first point of contact with a C-suite executive who has no prior awareness of you or your organisation.

There is also a frequency question. One well-crafted email is an introduction. Three emails in a week with no response is a pattern that damages your reputation. I have seen sales teams burn entire market segments by over-emailing a list because someone set an aggressive sequence in the automation tool and nobody questioned whether it was appropriate.

The discipline is in knowing when to stop as much as knowing how to start. If someone has not responded after two or three thoughtful attempts over a reasonable period, the message is clear. Move on and revisit in a different context.

A Practical Workflow for Finding and Using Email Addresses

Pulling this together into a repeatable process:

1. Identify the company domain. This is your anchor. Everything else flows from it.
2. Run a domain search on Hunter.io. This tells you the email format in use and surfaces any publicly indexed addresses for that domain.
3. Construct the address based on the format and the person’s name.
4. Verify the address using Hunter’s verifier, NeverBounce, or ZeroBounce before adding it to any outreach sequence.
5. Research the person before writing anything. LinkedIn, their company bio, recent press coverage, any public content they have produced. You are looking for something specific and relevant, not just their job title.
6. Write one email that makes a specific, relevant point. Keep it under 150 words. One ask, clearly stated.
7. Follow up once if there is no response after five to seven working days. If there is still no response, pause and reassess before sending a third message.

That process is not complicated. It is just more deliberate than most people are. The deliberateness is what makes the difference.

If you are building a broader email programme rather than just doing targeted outreach, the Email and Lifecycle Marketing hub covers the full range of what that involves, from acquisition and list hygiene to campaign strategy and measurement.

A Note on Scale and When It Becomes Counterproductive

There is a version of this process that gets industrialised. Bulk domain searches, automated verification, sequences that go out to thousands of contacts with light personalisation tokens. It is possible to do this. Whether it is worth doing is a different question.

At scale, the signal-to-noise problem compounds. You are sending more email, but a smaller proportion of it is genuinely relevant to the person receiving it. Response rates drop. Spam complaints increase. Your domain reputation suffers. The volume that was supposed to compensate for low relevance ends up undermining the whole programme.

I have managed hundreds of millions in ad spend across thirty industries, and the pattern holds across channels: targeting precision matters more than volume. Sending fifty well-researched emails to the right people will almost always outperform sending five thousand generic ones. The maths on cost per response, not cost per send, almost always favours the targeted approach.

Copyblogger’s long-running argument for why email still works is worth reading in this context. The answer is not that email is dead or alive. It is that email done with care and relevance continues to work. Email done at volume with low relevance is increasingly filtered out, both by algorithms and by people.

The tools to find email addresses are better than they have ever been. The bar for what gets a response has also never been higher. Those two things are related. As finding addresses has become easier, the average quality of outreach has declined, which means the floor for what constitutes a good email has risen. That is actually an opportunity if you are willing to do the work.

For context on how email fits alongside other acquisition channels, Moz’s piece on email lists and SEO makes a useful point about the compounding value of a well-maintained email list relative to other traffic sources.

About the Author

Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.

Frequently Asked Questions