How to Find Someone's Email Address (11 Free Ways)

Finding a prospect's email address is the first step of any outreach, and you rarely need a paid database to do it. Below are 11 free, legitimate methods - from guessing the company pattern to WHOIS lookups - ordered roughly from fastest to most involved. Just remember: finding the address is step one. Whether your message actually lands in the inbox comes down to deliverability, which we cover at the end.

1. Work Out the Company Email Pattern

Most companies use one consistent format - first.last@company.com, first@company.com, or flast@company.com. Find one known address at the company (from a press release, an email signature, or a colleague), infer the pattern, and apply it to your target's name. This one trick solves the majority of B2B lookups.

2. Check Their LinkedIn Profile

Some people list a contact email in the "Contact info" section of their LinkedIn profile. Even when they do not, LinkedIn confirms the person's full name, current company, and role - the three ingredients you need to build the address from the company pattern.

3. Use a Free Email Finder Tool

Tools like Hunter, Snov.io, and Voila Norbert offer a limited number of free lookups each month. Enter a name and domain and they return the most likely address along with a confidence score based on their own verification. Great for a handful of high-value prospects on the free tier.

4. Search the Company Website

Team, About, and Contact pages often publish addresses directly - especially for founders, press contacts, and support. Even a generic info@ or press@address reveals the domain's format so you can reconstruct a personal one.

5. Run a Targeted Google Search

Advanced operators surface addresses hiding in public documents. Try "Firstname Lastname" email, or scope it to a domain with site:company.com "@company.com". PDFs, slide decks, and conference pages frequently leak contact details this way.

6. Look Through Their Content

Writers, founders, and creators often invite direct contact. Check the bottom of their blog posts, newsletter footers, podcast show notes, and personal websites - many publish a real address for readers who want to reach them.

7. Check Their Social Bios

X (Twitter), GitHub, and personal Instagram or Threads bios sometimes carry an email or a link tree that leads to one. Developers in particular list a contact address on their GitHub profile.

8. Use WHOIS for Domain Owners

If your target owns a website, a WHOIS lookup (via ICANN Lookup or whois.com) can list the registrant's contact email - useful for small businesses and independent site owners. Privacy protection hides this for many domains now, but it still works often enough to be worth a try.

9. Subscribe to Their Newsletter

Signing up for someone's newsletter frequently reveals the real reply-to address behind the campaign - and many solo creators reply personally, opening a genuine conversation before you ever send cold.

10. Ask for a Warm Introduction

The highest-converting method is not finding the address at all - it is asking a mutual connection to introduce you. Scan LinkedIn for shared contacts. A forwarded intro sidesteps the cold-email problem entirely and arrives already trusted.

11. Verify Before You Send

Once you have a candidate address, verify it with a free email verification tool before sending. Emailing invalid addresses drives up your bounce rate, and a high bounce rate signals to inbox providers that you are working from a bad list - which quietly damages deliverability for every message you send.

Finding the Address Is Only Step One

Here is the part most guides skip: a perfect, verified address is worthless if your email lands in spam. Reaching the inbox depends on deliverability - your authentication, your sender reputation, and whether your sending domain has been warmed. A cold, brand-new domain gets filtered no matter how good your list is.

That is what warmup fixes. MailPilot warms your mailbox across 8,400+ real inboxes and monitors inbox placement so your outreach actually gets seen once you have the address. See how automated warmup works - plans are flat: Free, $9, $25, or $59. Warm up your inbox free →