.svg)
.svg)
.svg)
The Short Answer: How to Find an Email Address by Name
The fastest reliable way to find someone’s work email by name is to work out their company’s email format, usually first.last@company.com or first@company.com, build the likely address, and verify it before you send. If you do not know the company or the format, an email finder tool or a quick LinkedIn and Google search will surface it. One rule holds across every method: verify the address first, because a guessed email that bounces quietly damages your ability to reach every other inbox afterward.
Two honest expectations before you start. Finding a work email is very different from finding a personal one: business addresses follow domain patterns and are findable, while a personal Gmail follows no pattern and usually should not be the target of cold outreach at all. And anything you guess or pull from a tool is a candidate until it is verified, however confident the source looks.
| Method | How reliable | Best when |
|---|---|---|
| Work out the company format + verify | High (work emails) | You know the person’s full name and employer |
| Email finder tool | High | You want speed, or you are finding many at once |
| High for finding the employer, low as a direct email source | You need to establish where someone works | |
| Search the public web | Medium | The address or a clue is published somewhere |
| Just ask | High, slow | You can reach the person another way first |
The rest of this guide walks each method, then covers the two things nearly every other guide gets wrong: how to actually verify an address, including the trap that makes “verified” emails bounce, and whether cold emailing the address you found is legal.
How to Find an Email by Name, Step by Step
If you want the single fastest reliable path rather than a menu of options, this is it. It works for any work email and takes a couple of minutes per contact.
- Confirm the name and employer. Use LinkedIn to get the person’s exact full name and current company. Every step after this depends on getting these two right.
- Find the company’s email format. Get one known address at that company, from an email signature, the site’s contact or press page, or a finder, and read its pattern (for example first.last@ or first@).
- Build the likely address. Apply that pattern to your target’s name, so Jane Doe at a first.last company becomes jane.doe@company.com.
- Verify before you trust it. Run the address through a verifier. Send to a valid result. For catch-all or unknown, get a second signal before you send. Drop anything invalid.
- If that fails, or you need many, use a finder. Enter the name and domain into an email finder that verifies its results, and still treat catch-all verdicts as unverified.
The 5 Ways to Find an Email Address by Name
1. Work out the company email format, then verify
This is the workhorse for business email, and the first method to learn. Most companies use one format across every employee, so once you know one person’s address you know the pattern for the whole company. The common formats are:
- first.last@company.com (jane.doe@company.com)
- firstlast@company.com (janedoe@company.com)
- first@company.com (jane@company.com)
- flast@company.com (jdoe@company.com)
- first_last@company.com (jane_doe@company.com)
Find one known address at the company, from an email signature, a press release, or a tool, infer the pattern, and build the target person’s address from it. Two cautions keep this accurate. Patterns break for common-name collisions, for people who kept an address after a name change, and for companies running more than one domain across Google Workspace and Microsoft 365 tenants. And role addresses like info@ or sales@ reach a shared inbox rather than a person, so they are rarely the right target. Build the address, then verify it before you trust it.
2. Use an email finder tool
A dedicated email finder takes a name and a company or domain and returns the most likely address, usually with a confidence score and a verification check. This is the fastest route, and the only practical one when you need more than a handful at a time. Tools differ mainly in database coverage and in whether they verify before they hand you the result. The ones that verify first are worth paying for, because a finder that returns raw, unchecked guesses only moves the bounce problem downstream. Most offer a free tier with limited credits, which is enough to test accuracy on names you can already confirm before trusting the tool more widely.
These are the finders I have used, and what each is best at:
| Tool | What it is best for |
|---|---|
| Amplemarket | An all-in-one sales platform with its own contact data, finding, and outreach built in. |
| SignalHire | An email and phone finder with a browser extension that works across LinkedIn and the wider web. |
| Wiza | Finding and exporting verified emails and phone numbers from LinkedIn and Sales Navigator. |
| Lusha | A B2B contact database for business emails and phone numbers, with a browser extension. |
| Clearout | Finding emails with strong built-in verification, so the result comes pre-validated. |
| Oppora | An AI prospecting tool that finds leads and runs outreach in one flow. |
Across the six, I have found Amplemarket and SignalHire the most accurate, with the lowest bounce rates on the data they return. Accuracy varies by region and industry, though, so test any tool on names you can already confirm before you trust it at scale, and treat even a high confidence score as a hypothesis until a verification verdict backs it up.
3. Search LinkedIn
LinkedIn rarely exposes a work email directly any more, so set the expectation correctly: its real value is establishing a person’s full name and current employer, which is everything the format method above needs. If you are already connected, an address is sometimes listed under “Contact info.” A short, relevant connection request can get you there, and Sales Navigator helps you find the right person at scale. But treat LinkedIn as the way you confirm where someone works, then find the address another way.
4. Search the public web
If an address or a clue to it has been published anywhere, a precise search finds it. Put the name in quotes and pair it with the company domain or the word email, and narrow with operators:
- "Jane Doe" email
- "Jane Doe" @company.com
- site:company.com "Jane Doe"
People who publish online often publish a way to reach them, so also check their own footprint: a personal site or About page, an X (Twitter) bio, a GitHub profile, a Substack footer, a conference bio, or an authored paper. An address someone chose to publish is one they actually read. One niche extension: if the person runs their own domain, a WHOIS lookup occasionally lists a contact address, though registrant details are redacted by default on almost all common (gTLD) domains since 2018, so this works far less often than old guides suggest.
5. Just ask
The method everyone overlooks is often the most reliable: ask. A mutual connection can introduce you. A short message on LinkedIn or X can get you the address directly. A company contact form can route you to the right person. This is slow and it does not scale, but for a single high-value contact it beats any amount of guessing, and it starts the relationship on a far better footing.
How to Actually Verify an Email (and Why “Verified” Still Bounces)
Verification is the step that separates finding an address from reaching an inbox, and it is where most guides, and most tools, quietly overpromise. A check runs in three layers:
- Syntax: is the address validly formed? Catches typos.
- Domain and MX records: does the domain exist and accept mail at all?
- Mailbox check: does that specific mailbox exist, usually tested with an SMTP check that opens a connection without sending a message?
Here is the part the vendor guides leave out. That mailbox check is no longer reliable on its own, for two reasons. First, catch-all (accept-all) domains answer “yes” to every address, real or not, so a verifier returns a green result on an address that may still bounce. A large share of corporate domains are catch-all. Second, Microsoft 365, Google, and Yahoo increasingly hide, fake, or throttle the mailbox response to stop exactly this kind of probing, so the check comes back inconclusive. An honest verifier does not pretend otherwise: it returns valid, invalid, catch-all, or unknown, and the last two are warnings rather than green lights.
So the practical rule is to send to valid, hold or confirm catch-all and unknown through a second signal (a published address, a LinkedIn confirmation, a smaller test send), and drop invalid. This matters because the cost of a bounce is not the one message. A high bounce rate tells mailbox providers you do not know who you are emailing, and the reputation damage reaches every message you send. Google’s sender guidelines are explicit that senders must keep spam-complaint rates low and build clean lists of recipients who actually signed up, and a list full of bounced addresses works against both. If you are checking a list you already have, our guide to free email checker tools walks the standalone options.
Is It Legal to Find Someone’s Email Address?
Finding a business email and using it for relevant, honest outreach is legal in most places, and finding it is rarely the part that carries risk. What you send, and to whom, is. The rules differ by region, and this is the piece most guides skip entirely.
In the United States, cold email is governed by the CAN-SPAM Act. It does not ban unsolicited commercial email, but it requires honest headers and subject lines, identification of the message where relevant, a valid physical postal address, and a working opt-out that you honor within 10 business days.
In the UK, the send is governed by PECR as well as UK GDPR. Marketing email to corporate subscribers, meaning limited companies and LLPs, is allowed without prior consent as long as you identify yourself and offer an opt-out, which is why B2B cold email is viable there. Email to individuals, including sole traders and partnerships, generally needs consent. UK GDPR still applies to the personal data either way, and for B2B the usual lawful basis is legitimate interest, balanced against the person’s rights.
In the EU, the ePrivacy Directive is stricter: marketing email generally requires prior opt-in consent, with a narrow soft opt-in for existing customers, and member states vary in how far that extends to B2B. If you are emailing into the EU, assume consent is the default expectation.
The line that holds everywhere: contacting a named professional at their work address about something genuinely relevant to their job is legitimate outreach. Harvesting personal addresses in bulk, or hunting a private individual’s email for reasons unrelated to their work, is not, and no tool changes that. If you could not comfortably explain to the person how you found their address and why you are writing, treat that as the signal to stop.
What I Have Learned Finding Emails at Scale
Running B2B outbound, the thing I would most want someone to know is that catch-all domains will fool you. A catch-all accepts every address at the server, so a verifier’s green check proves nothing on those domains, and the addresses slip into a sequence and then bounce. I treat accept-all as unverified rather than valid: either there is a second signal that the mailbox is real, or the contact stays out of the send. A confidence score is a hypothesis, and the only test that settles it is whether the message lands.
A few other things hold up every time. The format-guess-and-verify method is the one I come back to, because for work emails it is fast and right far more often than it is wrong. Tools earn their cost the moment you are finding addresses across a list rather than one at a time. And I stopped chasing personal Gmail addresses for cold outreach entirely: they are hard to find, they are the wrong place to land a work pitch, and the reply rate never justified the effort. The aim was never the biggest list. It was the cleanest one, sent to people who would recognize why I was writing, because a small verified list beats a large scraped one on every number that matters.
Finding and verifying the list is step one. The step that actually earns replies is working it well: the right sequence, real personalization, follow-ups timed so they land, and reply tracking so you learn what works. That is the part Alore is built for, once your list is clean, so a verified list turns into booked conversations instead of a spreadsheet and a set of reminders. For finding prospect emails as part of a wider outbound motion, see our guide to finding your prospects’ email addresses.
Frequently Asked Questions
Can you find someone’s email address by name for free?
Yes, for work emails. Working out the company’s email format from one known address costs nothing, and most finder tools have a free tier with limited credits. The free route is reliable for business addresses. Personal addresses are much harder and often cannot be found for free or otherwise.
Why do found or even “verified” emails still bounce?
Usually because of catch-all domains. A catch-all accepts every address at the server, so a verifier confirms it exists when the specific mailbox may not. Format guesses also break for name changes and people who have left the company. This is why a good verifier reports catch-all and unknown as separate verdicts, and why those should be held or double-checked rather than sent to blind.
How accurate are email finder tools?
Good ones are accurate for business emails, especially those that verify before returning a result, which is the feature that matters most. Accuracy drops for small companies with no public email footprint, for catch-all domains, and for personal addresses. Test any tool on names you can already confirm before relying on it.
How do I find someone’s personal (Gmail) email address?
It is genuinely hard, because personal addresses follow no pattern and sit behind no public domain. Your realistic options are the person’s own published footprint, a mutual introduction, or simply asking. For business outreach, a personal address is usually the wrong target, so reconsider whether you need it.
Is it legal to find and email someone’s business address?
In the US, cold email is legal under CAN-SPAM with honest headers, identification, a physical address, and a working opt-out. In the UK, PECR allows B2B email to corporate subscribers with an opt-out, while individuals need consent. In the EU, the ePrivacy Directive generally expects opt-in consent. Finding a work address is rarely the issue; sending irrelevant or deceptive mail, or targeting personal addresses, is.
