How to Find Someone’s Email Address in 2026 (10 Methods That Actually Work)

What You’ll Learn

By the end of this guide, you’ll be able to:

• ✅ Find professional email addresses for any prospect using free and paid methods
• ✅ Verify that the emails you find are valid before sending
• ✅ Understand which methods scale and which are one-off
• ✅ Stay GDPR-compliant when enriching European contacts
• ✅ Integrate email finding into a multichannel outreach workflow

Time required: 5–60 seconds per contact (depending on method) Level: Beginner to intermediate

Prerequisites

Before you start, you’ll need at minimum:

• [ ] The prospect’s full name
• [ ] Their company name or company domain (e.g., company.com)
• [ ] A free account on at least one email finder tool (links below)

The company domain is often the limiting factor. If you only have a company name, a quick Google search usually surfaces the domain.

Method 1 — Email Finder Tools (Fastest & Most Reliable)

This is where 80% of your email finding should happen. Email finder tools take a name + domain and return a verified email address. The best ones also validate deliverability before returning results.

How it works:

1. Enter the prospect’s first name, last name, and company domain
2. The tool searches its database and/or applies pattern-matching logic
3. It returns the most likely email with a confidence score and verification status

Top tools for 2026:

Step-by-step with Hunter.io (free tier):

1. Go to hunter.io → click Email Finder
2. Enter: First name, Last name, Company domain (e.g., acme.com)
3. Hunter returns the email with a confidence score (0–100%)
4. Score above 80% → safe to use. Score below 50% → verify before sending

Pro tip: If Hunter doesn’t have the specific contact, use the Domain Search feature. It shows all known email patterns for a company (e.g., {first}.{last}@company.com) — which tells you the format even if your specific prospect isn’t indexed.

LGM native: La Growth Machine has built-in enrichment that finds email addresses automatically during sequence enrollment — no separate tool needed. When you add a prospect from LinkedIn, LGM enriches email, phone, and professional data in one step.

Method 2 — LinkedIn + Chrome Extension

LinkedIn is the world’s largest directory of B2B professionals. Most prospects have an up-to-date profile. The gap: LinkedIn doesn’t show email addresses. Chrome extensions fill that gap.

How it works: Extensions run in the browser while you visit a LinkedIn profile. They cross-reference the profile against email databases and surface the associated email in a sidebar.

Top extensions:

• Hunter for Chrome — shows email directly on the LinkedIn profile page, free tier
• Apollo Chrome Extension — full contact card with email, phone, job title
• Kaspr — particularly strong for European contacts
• Lusha — good for US/UK contacts, free tier with 5 credits/month

Step-by-step:

1. Install the Chrome extension (we’ll use Hunter as example)
2. Log into LinkedIn and navigate to your prospect’s profile
3. The extension panel appears on the right side of the page
4. Click Find email — the tool searches in real time
5. If found: email appears with confidence score
6. If not found: fall back to Method 3 or 4

Limitation: LinkedIn has tightened restrictions on data scraping since 2024. Extensions work on individual profile visits but will hit rate limits if you try to visit 100+ profiles per day. For volume, use a dedicated enrichment tool or the LGM workflow described at the end of this guide.

Method 3 — Email Permutator + Verification

Even without a database match, you can find most professional emails by generating likely combinations and verifying which one exists.

The logic: Most companies use one of a handful of email formats:

• [email protected]
• [email protected]
• [email protected]
• [email protected]
• [email protected]

Step-by-step:

1. Visit mailmeteor.com/email-permutator (free tool)
2. Enter first name, last name, and domain
3. The tool generates all common variants (usually 10–15 combinations)
4. Copy the list into a free email verifier:

– NeverBounce (100 free verifications/month) – ZeroBounce (100 free/month) – Hunter Verifier (included in free tier)

1. The verifier pings each address to check if it exists on the mail server
2. One address will come back Valid — that’s your email

When to use this method: When your email finder tool doesn’t have a record for the specific contact but you know the company email format (from Domain Search or a colleague’s known email).

Accuracy: ~85–90% success rate when you have the right domain and the prospect hasn’t recently changed jobs.

Method 4 — Google Search Operators

Google can surface email addresses that are publicly visible but not indexed by email finder databases. This method is slower but effective for senior contacts, academics, and people who maintain personal websites.

Search patterns to try:

"firstname lastname" "@company.com"
site:company.com "firstname lastname"
"firstname lastname" "email" site:linkedin.com
"firstname lastname" contact filetype:pdf

Step-by-step:

1. Open Google and try the patterns above in order
2. First pattern often works for executives who publish their email in press releases, whitepapers, or event bios
3. The site:company.com pattern finds internal pages that list employee contacts (team pages, speaker bios)
4. The filetype:pdf pattern works well for conference speakers and academic contacts who list email in presentation PDFs
5. If any result shows the full email address, copy it; if it shows a partial (e.g., john@[...]), you have the format — combine with Method 3

Pro tip for senior contacts: CEOs and founders frequently publish their email in media interviews, investor updates, and LinkedIn articles. A targeted Google search often surfaces these faster than any tool.

Method 5 — Company Website & Team Pages

Simple but often overlooked: a significant percentage of companies publish contact emails directly on their website.

Where to look:

• /team or /about-us → individual employee profiles sometimes include emails
• /contact → generic contact form, but sometimes shows a direct email
• Press releases → journalists’ contact often includes a direct email, which reveals the format
• Blog posts → author bio sometimes includes email
• Investor Relations page → if the company is public, IR contacts are always listed

Step-by-step:

1. Visit the company website
2. Check the URL patterns above
3. If you find any employee’s email (even not your target), you now have the email format for the company
4. Apply that format to your target contact using Method 3’s verification step

Method 6 — WHOIS Domain Lookup

For small companies and consultants, the person who registered the company domain often used their personal or primary business email — which is publicly visible in the WHOIS registry.

Step-by-step:

1. Go to whois.domaintools.com or who.is
2. Enter the company domain (e.g., company.com)
3. Check the Registrant Email field
4. If not redacted: you have a direct email for whoever registered the domain (often the founder/CEO)

Limitation: Since GDPR implementation in 2018, many registrars automatically redact personal information in WHOIS for .com and EU domains. This method works best for:

• Recently registered domains (before the registrar set up privacy protection)
• Non-EU companies in registrars that don’t auto-redact
• B2B contacts at very small companies where the founder registered the domain themselves

Method 7 — Twitter / X Bio and Replies

Twitter/X remains a source of professional emails that most sales reps ignore. Many B2B professionals — especially in sales, marketing, and tech — list their email in their bio or have mentioned it in replies.

Step-by-step:

1. Search for the person on Twitter/X
2. Check their bio (many people put [email protected] or DM for email)
3. Search from:@username email to see if they’ve mentioned it in a tweet
4. Use Twitter/X advanced search: from:@username "@company.com" — this often surfaces if they’ve ever posted their email

When this works best: SaaS founders, sales leaders, and developer-facing roles are most likely to have their email publicly visible on Twitter. Enterprise procurement contacts: almost never.

Method 8 — LinkedIn “Contact Info” Section

This is obvious but genuinely missed by many teams. A subset of LinkedIn users voluntarily list their email address in the Contact Info section of their profile — visible to 1st-degree connections.

Step-by-step:

1. Visit the prospect’s LinkedIn profile
2. Click Contact info (below their profile photo and summary)
3. Check for Email — if listed, it’s there directly
4. If you’re not connected: send a connection request. Once accepted (typically 30–50% acceptance rate for personalized requests), the Contact Info becomes visible

Bonus method: Some people list their email in their profile’s About section or in their Featured posts. Run Ctrl+F for @ on their profile page — it catches emails scattered anywhere in the visible text.

Method 9 — Professional Enrichment APIs (For Teams at Scale)

If you’re finding emails for hundreds or thousands of contacts, manual methods don’t scale. Enrichment APIs let you submit a batch of names + domains and receive verified emails back.

Top enrichment APIs:

• Clearbit Enrichment — best-in-class data coverage for North America and Europe
• Dropcontact — best for GDPR-compliant EU enrichment, no manual review needed
• Hunter Bulk — upload a CSV of name + domain pairs, get emails back
• Apollo Bulk Export — pull enriched contact data for full lists

Typical workflow:

1. Export your prospect list as a CSV (name, company, domain)
2. Upload to the enrichment tool’s bulk feature
3. Download enriched CSV with email addresses and confidence scores
4. Filter for confidence ≥ 80%, validate the rest with a verification tool

Cost: Most bulk enrichment plans start at $49–99/month for 1,000–5,000 credits. At scale, the time savings easily justify the cost — enriching 500 contacts manually would take 4–8 hours; bulk enrichment takes 10 minutes.

Method 10 — La Growth Machine Native Enrichment

If you’re running multichannel outreach sequences (LinkedIn + email), there’s no reason to find emails as a separate step. La Growth Machine enriches contacts automatically as part of the sequence setup.

How it works:

1. Add a prospect from LinkedIn (via the LGM Chrome extension or CSV import)
2. LGM automatically triggers enrichment in the background — finding email, phone, and additional professional data
3. The sequence only moves to the email step once a valid email has been found and verified
4. If no email is found, the sequence runs LinkedIn-only — no failed sends, no bounces

Why this matters: Disconnecting the “find email” step from the “send email” step creates friction and data quality problems. Enriched emails that are 3 days old have higher deliverability than those found weeks in advance (job changes). LGM’s real-time enrichment solves this by enriching at the point of outreach.

Choosing the Right Method for Your Use Case

How to Verify Emails Before Sending

Finding an email address is only half the battle. Sending to an invalid address hurts your sender reputation and deliverability. Always verify before you send.

Verification methods:

1. Built-in tool verification — Hunter, Apollo, and Snov.io all verify emails as part of their finding process. Trust confidence scores above 75%.

2. Dedicated verifier — For emails found via Google or permutator:

• NeverBounce (100 free/month)
• ZeroBounce (100 free/month)
• Bouncer.io (paid, high accuracy)

3. Catch-all domains — Some company mail servers accept all email regardless of whether the specific address exists (this is called a “catch-all” configuration). Verifiers return “catch-all” or “risky” for these. If you see this status:

• Use the email cautiously — it may work or may not
• Check if multiple contacts at the same company also return “catch-all”
• Prioritize LinkedIn outreach for catch-all domains

Email validity benchmark: Good enrichment tools deliver 85–95% valid emails. If you’re consistently seeing 20%+ bounce rates, switch tools or add a verification layer.

GDPR and Email Finding: What You Need to Know

If you’re prospecting into European companies or targeting EU-based contacts, you need to understand the rules.

The short version:

• Finding a professional email address from public sources (LinkedIn, company website, directory) for legitimate business outreach is generally permissible under GDPR’s “legitimate interest” legal basis
• You need a plausible professional reason for outreach — cold outreach to random contacts without relevance is a grey area
• You must provide an opt-out mechanism in your first email
• You must delete data on request if the contact asks you to

What this means in practice:

• Outreach to a VP Sales at a company whose profile matches your ICP = generally fine
• Mass-purchased email lists without any targeting = high risk
• Using Dropcontact for EU contacts is the safest enrichment path — they guarantee GDPR compliance and don’t store personal data

Always include in first email to EU contacts:

You can opt out of future emails at any time by replying to this message.

Common Mistakes That Kill Deliverability

What to Do After Finding the Email

Finding the email is the research phase. The outreach phase is where pipeline actually gets generated.

The most effective approach is not to send a single cold email — it’s to build a coordinated multichannel sequence that references the same context across channels:

1. LinkedIn connection request with personalized note
2. Email #1 with signal-relevant subject line and value prop
3. LinkedIn follow-up (if connected) 3 days after email
4. Email #2 with a relevant case study or social proof
5. Final LinkedIn message with a soft close

This sequence structure — with the email you just found as the backbone — consistently delivers 3–5x more replies than a single cold email.

La Growth Machine orchestrates this entire workflow: enrichment, sequence building, multichannel delivery, and CRM sync. Start your free 14-day trial →

Tools Quick Reference

FAQ

Next Steps

1. Set up your email finder stack — Create a free account on Hunter.io and install the Chrome extension
2. Test on 10 prospects — Run your next 10 target contacts through the finder + verifier workflow
3. Build a multichannel sequence — Finding the email is step 1. Use La Growth Machine to turn that email into a structured LinkedIn + email sequence that actually books meetings

Related guides:

• Cold Email Deliverability: How to Land in the Inbox, Not Spam
• LinkedIn Automation in 2026: Scale Without Getting Banned
• Buying Signals: The Complete Guide to Signal-Based Outreach