How to Find Someone's Email Address (10 Ways)
From email finder tools to pattern-matching and verification, here's how to find almost anyone's work email address — and confirm it's real before you send.
On this page · 8 sections
Overview
Finding a work email address is usually fast once you know the methods: a dedicated email finder, a company's known address pattern, or the person's own public footprint. The part people skip — and the part that actually matters — is verification. Sending to guessed or stale addresses drives bounces, and a high bounce rate is one of the quickest ways to wreck your sender reputation.
10 ways to find an email address, fastest first
Work down this list until you have a candidate, then verify it. The first three get you there most of the time:
1. Email finder tool — Hunter, Apollo, or Snov.io take a name + company domain and return a likely address with a confidence score. Fastest at scale.
2. The company email pattern — find one known colleague's address (a team page, a press release, an email they sent) and copy the format. "jane.doe@acme.com" means everyone is first.last@, so you can build your target's address. See company email address format.
3. LinkedIn + a finder extension — pull the name and company straight from the profile; see how to find email addresses on LinkedIn.
4. Their personal site or about page. 5. GitHub profile (often a public commit email). 6. A conference talk, podcast, or speaker bio. 7. The reply-to on a newsletter they send. 8. The company contact / press / about page (or a press@ alias). 9. Twitter/X bio or a linked Linktree. 10. A mutual connection who can introduce you — the warmest option of all. Common patterns to test: first.last@, first@, flast@, firstl@, last@.
- Email finder tools (Hunter, Apollo, Snov.io) with confidence scores
- Company email pattern from one known colleague
- LinkedIn + a finder's Chrome extension
- Personal site, GitHub, conference/podcast bio
- Newsletter reply-to; company contact/press page
- A mutual connection (warmest of all)
Always verify before you send
A found address is a guess until it's verified. Run candidates through an email verification service to catch typos, dead mailboxes, disposable domains, and catch-all domains before they become bounces. Most finder tools include a confidence score; treat anything below ~90% as unverified and confirm it separately. Why it matters: mailbox providers read a high bounce rate as a spam signal, so sending to unverified guesses doesn't just waste effort — it lowers inbox placement for your good addresses too.
Respect the legal and ethical line. Finding a business email for relevant B2B outreach is normal and legal in many regions if you follow opt-out rules like CAN-SPAM and privacy laws like GDPR; scraping personal addresses, harvesting at scale, or ignoring unsubscribes is not. Stick to work addresses, keep a suppression list, and honor every opt-out — Mailbase enforces suppression at send time so a bounced or opted-out address never gets re-mailed.
- Verify every candidate before it touches a send
- Treat confidence scores below ~90% as unconfirmed
- Catch-all domains accept everything — they can't be confirmed by acceptance alone
- Business addresses only; keep a suppression list and honor opt-outs
Common mistakes
- Sending to found addresses without verifying them first.
- Treating a finder's confidence score as a guarantee.
- Guessing a pattern on a catch-all domain and assuming it lands.
- Harvesting personal addresses instead of business ones for B2B outreach.
Sources and further reading
Official docs for current setup details, pricing, and API behavior — verify specifics there, since they change.
Related guides
More on how to find someone's email address and the surrounding finding emails workflow: