How to Find Someone's Business Email Address

Finding someone's business email is a solvable problem for most B2B contacts -- it just takes knowing which method to try first. The six methods below are ordered by speed. Start at the top, move down as needed. Most lookups resolve at method 1 or 2.

Method 1: Email Finder Tools

Email finder tools search their indexed databases of B2B contacts and return an email if they have one. They are the fastest starting point for any individual lookup or bulk list build.

• Hunter.io: Enter a name and company domain. Returns an email with a confidence score. Hunter's Domain Search also shows the email pattern used by the company, which helps when the specific person is not in their database. Best for individual lookups and pattern detection.
• Apollo.io: Database of 270M+ contacts. Search by name, title, company, or filter by industry and firmographics. Reveals emails on the contact profile. Apollo is better for bulk prospecting than individual lookups -- you get the search filter capability alongside the contact data.
• FindyMail: Specializes in verified B2B emails with a focus on accuracy over volume. Returns emails only when confident, which means lower find rate but very low bounce rate. Good for high-value lists where quality matters more than coverage.
• Prospeo: Chrome extension + API. Good coverage on LinkedIn profiles. Fast turnaround. Competitive pricing for volume users.

Method 2: LinkedIn Chrome Extensions

When you are on a LinkedIn profile, a Chrome extension can surface the person's email in one click. These tools work by querying their databases using the LinkedIn profile URL as a lookup key.

• Lusha: Widely used. Shows email and phone number directly on the LinkedIn profile page. Strong enterprise coverage. Credits-based pricing -- each reveal costs one credit.
• Kaspr: LinkedIn-native. Good European contact coverage. Free plan includes limited credits. Integrates with HubSpot and Salesforce for direct CRM push.
• ContactOut: Reveals email and phone on LinkedIn profiles. Claims strong accuracy rates. Includes a search dashboard for lookups outside LinkedIn.
• GetProspect: Shows emails on LinkedIn profiles and company pages. Chrome extension plus a standalone database search tool. Good bulk export features.

Important: Always verify emails from LinkedIn extensions before sending. These tools pull from cached databases and the data can be months or years old. Run any email through ZeroBounce or BounceBan before adding it to a campaign.

Method 3: Email Pattern Guessing + Verification

Most companies use one consistent email format for all employees. If you know the pattern, you can construct any employee's email address and verify it before sending. This method works well when a company is not in the major databases.

Common email patterns in order of frequency:

• firstname.lastname@company.com (most common for companies over 50 employees)
• first@company.com (common at smaller companies)
• firstlast@company.com (no separator, e.g., johnsmith@company.com)
• firstname_lastname@company.com (underscore separator)
• flastname@company.com (first initial + last name, common at large enterprises)
• firstname@company.com (first name only, most common at small startups)

Hunter's Domain Search is the fastest way to find a company's email pattern. Enter the company domain and Hunter shows you the pattern used by verified employees at that company, along with examples. Once you have the pattern, construct the email address for your target and verify it with ZeroBounce before sending.

Method 4: Company Website Scraping

Many companies list employee emails on their website -- on /about, /team, /contact, or /leadership pages. This is more common at professional services firms, law offices, medical practices, and companies that sell directly to consumers who need to reach specific people.

• Check /about, /team, /leadership, /staff, and /contact pages directly.
• Use Hunter's Domain Search tool -- it also indexes emails found on the company's website.
• Search Google for: site:company.com @company.com -- this surfaces pages on the company's domain that contain email addresses.
• Check the company's press releases and news coverage. PR contacts, quotes from executives, and investor relations pages often include direct email addresses.

Method 5: Waterfall Enrichment via Clay

At scale, the most efficient approach is waterfall enrichment: try multiple providers in sequence and take the first verified result. Clay is the standard tool for building enrichment waterfalls. A typical setup:

1. 1Try Provider A (e.g., Apollo) first -- returns an email or returns empty.
2. 2If empty, try Provider B (e.g., Hunter) -- returns an email or returns empty.
3. 3If empty, try Provider C (e.g., FindyMail or Prospeo) -- returns an email or returns empty.
4. 4If all providers return empty, fall back to pattern guessing using the company domain's known format.
5. 5For any email found, run BounceBan verification and only keep results with score >= 97 and result == deliverable.

Waterfall enrichment in Clay typically achieves 65-80% find rates on B2B contact lists, compared to 50-65% for any single provider alone. The improvement comes from providers having different coverage areas -- Apollo is strong for US tech companies, Hunter covers European companies well, FindyMail fills gaps in both.

Method 6: Manual Research

When all automated methods fail, manual research can still surface an email address. This is worth doing for high-value prospects where one contact matters more than efficiency.

• Twitter/X bio: Many executives include their email in their Twitter bio or have pinned a tweet with their contact info.
• Conference speaker pages: Speaking bios on conference websites frequently include contact emails for post-talk outreach.
• Published articles and bylines: Authors at industry publications often have author pages with contact information.
• GitHub profile: Technical founders and engineers sometimes include contact email in their GitHub README or profile.
• Podcast show notes: Guests on industry podcasts are often reachable via the email shown in show notes.

Method Comparison

When Nothing Works

Some people are simply hard to find via email. If all six methods fail, you have a few options:

• Send to the company's generic inbox (info@, hello@, contact@) with a specific subject line and ask to be connected to the right person. This works better than most people expect for small to mid-size companies.
• Send a LinkedIn connection request with a short personal note. Connecting on LinkedIn and following up once they accept is a legitimate two-touch sequence.
• Check if they are speaking at any upcoming conferences -- many conferences publish speaker contact info for attendee networking.
• Ask a mutual connection for an introduction. This is slower but produces a warmer conversation than any cold email.

The LinkedIn email trick: once someone accepts your LinkedIn connection request, their email may appear in their contact info (visible only to connections). Go to their profile, click 'Contact info'. Some people include their business email there. It is worth checking before giving up on email outreach entirely.