I once tried to reach a candidate before an interview slot closed, but their company did not list a direct email anywhere.
I guessed every format I could think of: firstname.lastname@, firstname@, flastname@.
When I finally found the right one, someone else had already scheduled the call.
Below are the 10 methods that have worked best for me, starting with the fastest ones.
Check the company's website first; most list a contact or team page.
If that doesn't work, search LinkedIn for the person's current role and company, then try the standard email format for that company (usually firstname.lastname@ or firstinitiallastname@).
Verify any guess with a free email checker before you send anything.
Start here before anywhere else. Most companies list a general contact address, and many include a full staff directory or "About" page with individual emails, especially smaller businesses, law firms, and agencies.
Pro tip: If there's no direct listing, check the press or media page. Companies often publish a PR contact email there that can point you toward the right department, even if it's not the exact person.
A plain Google search often finds a published email fast, no tool or sign-up needed.
Put the person's name in quotes along with "email" or "contact," for example "Jane Doe" "email", to catch any page where their address already appears publicly.
To narrow the search to one company, add a site restriction: site:company.com "Jane Doe" searches only that domain for a match.
Pro tip: Try a few different phrasings such as "contact," "email," and "reach me at"; each turns up different pages, since not every site uses the same wording.
Most companies use one consistent email format across their whole team. Once you know it, you can apply it to anyone at that company.
Common formats include:
Pro tip: Find one confirmed email from the company (a press contact, a LinkedIn post, a public byline), and you'll usually be able to infer the format for everyone else there.
LinkedIn confirms the person's current employer and role, which narrows down which email format to try.
Some profiles list a contact email directly under "Contact info." A LinkedIn Sales Navigator subscription (or a free trial of one) can confirm the person’s current role and company fast, which tells you exactly which email format to try.

Pro tip: If you're connected to the person or share a mutual connection, sending a direct message asking for their email is faster and more reliable than guessing.
Tools like Hunter.io, Apollo, RocketReach, and Voila Norbert search a person's name against a company domain and return likely email matches, often with a confidence score. Most offer a limited number of free searches per month before requiring a paid plan.
Pro tip: Cross-check results from two different finder tools before you rely on one. They don't always agree, and a second source catches false positives.
Twitter/X, Instagram, and personal websites may list a contact email directly in the bio or in a pinned post, especially for people who use social channels for client work, partnerships, bookings, or media requests.
If the person has been quoted in an article, named in a company announcement, or listed on a press release, check the byline, quote attribution, and media contact section. Press releases often include a PR contact email near the bottom, while articles may link the person’s profile or company page.
Pro tip: Search the person’s name with terms like “press release,” “interview,” “media contact,” or “quoted” to find pages where their email may appear alongside their title.
If you share a colleague, client, or contact with the person, a direct ask, "Do you have Sarah's email? I wanted to reach out about X," is often faster than any tool and comes with an implicit introduction that improves your odds of a reply.
If you're trying to reach whoever owns a specific website or domain, a WHOIS lookup (available through sites like whois.net) can surface the registrant's contact email, though many domains now use privacy protection that masks this information.
Once you have an address, whether guessed, found, or inferred, run it through a free tool like NeverBounce or ZeroBounce. It checks whether the address is active and correctly formatted before you send anything.
{{templates}}
A wrong or unverified email costs more than the time it took to find it. Here's what trips people up most:
Most of these come down to one habit: verify before you send. Get that right, and the rest of the list mostly takes care of itself.
If none of the methods above turn anything up, a few fallback options are still worth trying before giving up. Here's what to try next:
The methods above mostly assume you're looking for someone at a company, where a domain and email format exist to guess against. Finding a personal email works differently:
{{cta}}
Finding the address is only the first step. Next comes the outreach itself, including the first draft, the follow-up, and a simple way to track who you have already contacted.
Lindy picks up right where the search leaves off. Text it the email you found and what you want said, and it can draft the message, help you manage the next step, and remind you to follow up if the thread goes quiet.
For recruiters, sales reps, or founders doing any real volume of outreach, that follow-up tracking is usually the first thing to slip.
Finding a publicly available business email address is generally legal. What matters is how you use it afterward.
In the US, CAN-SPAM applies to commercial email and requires accurate sender information, honest subject lines, a physical mailing address, and a clear opt-out method.
In the EU, GDPR requires a valid legal basis for using someone’s personal data, which can include a work email address.
Yes. Checking a company website, searching LinkedIn, and trying the standard email format pattern all cost nothing. Most email finder tools also offer a small number of free searches per month before requiring a paid plan.
Accuracy varies by tool and by company size; established tools tend to perform well on common business domains, but results get less reliable for smaller or newer companies.
Vendor-advertised accuracy claims are worth treating skeptically. Whatever the tool, verify any result before sending anything that matters.
Large companies almost always use one consistent email format across the whole organization. Once you've confirmed it from a single known employee, that same format typically works for anyone else at the company, from executives to new hires.
Sometimes, reverse-lookup tools exist for both, but success rates are lower than name-and-company searches, and personal privacy settings often block results entirely. A direct ask through a mutual connection is usually more reliable than either.

Lindy saves you two hours a day by proactively managing your inbox, meetings, and calendar, so you can focus on what actually matters.
