How to Find Anyone's Business Email Address (7 Methods That Work)

The fastest way to find a business email address is to search a verified B2B contact database like Consulti—type in a name and company, and you get a verified email in seconds. But that's not always an option, and sometimes you need to get creative.

I've built prospect lists for hundreds of outreach campaigns. Here are the seven methods I actually use, in order of reliability.

---

Why Finding the Right Business Email Matters

Before the methods: a quick word on why this matters beyond just getting an email address.

Sending to unverified or guessed emails leads to bounces. Enough bounces and your domain gets flagged. Once your domain reputation tanks, even your valid emails start landing in spam—for everyone, including people who want to hear from you.

The goal isn't just to find an email. It's to find a verified email you can send to confidently.

---

Method 1: Search a B2B Contact Database (Fastest)

Best for: Quickly finding verified emails for multiple contacts at once

A dedicated B2B contact database is the fastest and most reliable way to find business email addresses. These tools index and verify contact data at scale, so instead of manually piecing together an address, you search and get a verified result in seconds.

How to use Consulti to find a business email:

1. Go to consulti.ai/signup and create a free account (no credit card needed)
2. Use the search filters to find your target: enter name, company, job title, industry, or location
3. The database returns matching contacts with verified email addresses
4. Export contacts directly to a CSV or copy emails into your sequencer

Consulti's database covers 10.4M+ verified B2B contacts. The free plan gives you 1,000 leads/month—enough to run meaningful campaigns while you evaluate the tool.

When this works: Anytime your target is at a company with 10+ employees. The database skews toward professional roles at established businesses.

When it doesn't work: For very small businesses, sole proprietors, or highly niche industries with limited online presence.

---

Method 2: LinkedIn + Email Finder Tool

Best for: Finding emails for specific individuals you've identified on LinkedIn

LinkedIn doesn't display email addresses publicly, but several tools can surface the email associated with a LinkedIn profile. Here's the workflow:

Step-by-step:

1. Find your target on LinkedIn and confirm they match who you're looking for
2. Install the Lusha Chrome Extension or Hunter.io's browser extension (both have free tiers)
3. While viewing the LinkedIn profile, click the extension icon
4. The tool will surface available email and phone contact information
5. Verify the email before outreach using Consulti's verification tool or Hunter.io's verifier

What to expect: Hit rates vary. For senior professionals at larger companies, you'll find an email 60-80% of the time. For junior roles or small companies, coverage drops significantly.

Limitations: Chrome extensions like these pull from their databases—they're not scraping LinkedIn in real time. If the contact isn't in their database, you'll get nothing. That's why having a primary database like Consulti matters: LinkedIn tools work best as a supplement.

---

Method 3: Company Website Research

Best for: Finding contact emails for a specific company when you don't know the individual yet

Many companies publish contact information on their website—sometimes even individual team member emails. Here's a systematic approach:

Step-by-step:

1. Check the Contact page: Start obvious. Go to the company's website and look for a "Contact," "About," or "Team" page.

2. Check press releases and blog author bios: Companies often publish email addresses in press releases, author bios, or "media contact" sections.

3. Look at the careers page: Job postings sometimes include a recruiting email. The domain pattern from recruiting emails often reveals the company's standard email format (e.g., firstname.lastname@company.com).

4. Use Hunter.io domain search: Enter the company's domain at hunter.io and it will surface any email addresses it has indexed for that domain, plus identify the email pattern the company uses.

5. Once you know the pattern, construct the address: If you know John Smith works at Acme Corp and you've confirmed the pattern is firstname.lastname@acme.com, you can construct john.smith@acme.com with reasonable confidence.

6. Verify before sending: Never send to a constructed email without verification. Use a tool to confirm the address exists.

---

Method 4: Google Search Operators

Best for: Finding emails that are publicly posted somewhere on the web

Google indexes vast amounts of public web content, including email addresses that companies have published. The trick is using search operators to surface them efficiently.

Key search operators for finding emails:

site:company.com email
"@company.com" "firstname"
"contact" "email" site:company.com filetype:pdf

Step-by-step example:

Say you're looking for the email of a marketing director at Acme Corp (acme.com):

1. Search: site:acme.com "marketing" "email"
2. Search: "@acme.com" "director of marketing"
3. Search: "contact@acme.com" OR "marketing@acme.com" — this may reveal the company's published generic email
4. Search: "John Smith" "acme.com" email — with the person's name

You won't always find a direct email, but you'll often find:

• The email format the company uses
• A team alias you can use (hello@, info@, marketing@)
• A PDF, document, or press release that includes the specific email

What this works best for: Finding emails for individuals who are active online—speakers, authors, executives who appear in press releases, academics with university profiles, and anyone who has published their email publicly.

---

Method 5: Email Pattern Guessing + Verification

Best for: When you know the company's email format and the person's name

This is a systematic method, not a guessing game. Here's how to do it properly:

Step 1: Determine the email pattern

Use Hunter.io's domain search to identify how the company formats emails. Common patterns:

• firstname@company.com
• firstname.lastname@company.com
• f.lastname@company.com
• flastname@company.com
• firstname_lastname@company.com

Step 2: Confirm the person's name

Double-check on LinkedIn, the company website, or through a database search that you have the correct spelling.

Step 3: Generate candidate addresses

If the pattern is firstname.lastname@company.com and you're looking for Sarah Chen at Acme Corp, your candidate is sarah.chen@acme.com.

Step 4: Verify the email before sending

This step is non-negotiable. Use Consulti's email verification tool or Hunter.io's verifier to run an SMTP check. This confirms the mailbox exists without actually sending an email.

Step 5: Check the verification result

• Valid: Safe to send
• Catch-all: The server accepts all emails regardless of whether the mailbox exists—proceed with caution
• Invalid: The address doesn't exist; try another pattern or method

---

Method 6: Social Media + WHOIS Research

Best for: Finding emails for founders, solopreneurs, and people with a strong social media presence

Social media approach:

Many entrepreneurs and small business owners publish their email publicly on Twitter/X, Instagram bio, YouTube channel, or their personal website. Check:

1. Twitter/X profile and pinned tweets: Many business accounts include "contact@" or "hello@" emails directly in their bio
2. YouTube channel "About" tab: Creators often list business inquiry emails
3. Instagram bio: Business accounts sometimes include email in the bio
4. Their personal/company website linked from social profiles

WHOIS approach:

When someone registers a domain, their contact information goes into the WHOIS database. For smaller websites and personal domains, this sometimes includes a real email address.

1. Go to whois.domaintools.com or lookup.icann.org
2. Enter the company's domain
3. Look for "Registrant Email" or "Admin Email" in the results

Note: Many registrations now use privacy services that mask the registrant's actual email. WHOIS works best for older domain registrations or companies that haven't enabled WHOIS privacy.

---

Method 7: Ask a Mutual Connection

Best for: High-value prospects where the relationship matters

This is the oldest method and still one of the most effective. If you have a mutual connection on LinkedIn with someone:

1. Search LinkedIn for the target person
2. Check if you have mutual connections
3. Reach out to your mutual connection with a brief, specific request: "Hey [Name], I'm trying to reach [Target] about [specific reason]. Would you be willing to make an introduction or share their contact info?"

The warm introduction approach has a dramatically higher response rate than cold outreach—often 5-10x higher. It's slower, but for high-value enterprise accounts or specific named prospects, the investment is worth it.

Alternative — LinkedIn InMail: If you don't have a mutual connection and the target has an active LinkedIn presence, LinkedIn InMail can bypass the email finding problem entirely. Response rates are lower than warm introductions but higher than cold email in many cases.

---

How to Verify a Business Email Before Sending

Finding an email is step one. Before you send anything, verify it.

Why verification matters:

• Bounce rate above 5% starts damaging your domain's sender reputation
• Bounce rate above 10% can trigger spam filters for all your outreach
• Bounce rate above 20% can get your sending domain blacklisted

How to verify:

1. Use Consulti's email verification tool — available on all plans, including free. It runs an SMTP check to confirm the mailbox exists without sending a test email.

2. Use Hunter.io's verifier — enter any email address and get a validity score.

3. Never use a real email to test: Sending "test" emails to verify addresses is unprofessional and can still count as bounces.

---

Which Method Should You Use?

Here's my recommended decision tree:

• You need 50+ contacts at scale: Use a B2B database (Consulti, start free)
• You found them on LinkedIn and need their email: Use a LinkedIn extension (Lusha, Hunter)
• You have a target company list but not names: Use Hunter.io domain search
• You know the name and company but not the email format: Email pattern guessing + verification
• They're a founder, solopreneur, or creator: Check social media bios
• They're a high-value named prospect: Ask a mutual connection first

Most real-world prospecting programs use 2-3 of these methods in combination: a primary database for bulk prospecting, LinkedIn tools for specific targets, and manual research for enterprise accounts.

---

Avoiding Spam and Staying Compliant

A brief note on compliance—because finding emails is only legal if you use them appropriately.

CAN-SPAM (US): Requires a physical address, a clear unsubscribe mechanism, and no deceptive subject lines. Applies to commercial email.

GDPR (EU): More restrictive. You need a legitimate interest or explicit consent for cold outreach to EU contacts. Many B2B emails qualify under legitimate interest, but document your reasoning.

CASL (Canada): The strictest of the three. Generally requires express or implied consent before sending commercial email to Canadian contacts.

If you're building a cold outreach program, use a reputable B2B database like Consulti that screens contacts for geographic compliance flags—it's much safer than manually piecing together lists.

---

Start Finding Verified Business Emails Now

The fastest, most reliable way to find business email addresses at scale is through a verified B2B database. Consulti gives you 1,000 free leads per month—no credit card, no time limit.

Search 10M+ verified business emails for free →

---

Frequently Asked Questions

Is it legal to find someone's business email and cold email them?

In the US, cold emailing to business email addresses is legal under CAN-SPAM as long as you follow the rules: include a physical address, provide an unsubscribe mechanism, and use honest subject lines. In the EU, GDPR applies—you need a legitimate interest. In Canada, CASL is stricter and typically requires consent. Always check the regulations for your target geography.

What is the best free tool to find business email addresses?

Consulti's free plan gives you 1,000 verified leads/month—the most generous free tier among B2B contact tools. Hunter.io's free plan includes 25 searches/month, and Lusha's free plan covers 5 contacts/month. For email verification specifically, Hunter.io's verifier handles 50 verifications/month free.

How accurate is email pattern guessing?

It depends on how confident you are in the email pattern. If you've confirmed the pattern from Hunter.io's domain search with 5+ confirmed examples, a pattern-guessed address has roughly 60-80% accuracy for common names. Always verify before sending—an SMTP check will confirm whether the mailbox exists.

What should I do when an email bounces back?

Immediately remove the address from your sending list. If you're using email sequencing software, most platforms will auto-suppress bounces. Investigate the cause: hard bounces (address doesn't exist) mean the email was wrong; soft bounces (mailbox full, temporary issue) may resolve themselves. Keep your bounce rate under 3% by verifying emails before campaigns.

How do I find the email format for a company?

The fastest way: use Hunter.io's domain search. Enter the company's domain and Hunter shows you the detected email pattern (e.g., "firstname.lastname is used by 87% of employees at this company") along with sample verified addresses. Alternatively, check press releases, LinkedIn posts, or email footers from anyone at the company who has emailed you.

---

Related reading: 12 Best B2B Lead Generation Tools Compared | Best Apollo.io Alternatives