To find someone’s email address: (1) try a free email finder by name and company, (2) search Google with their name plus “email” or the site: operator, (3) check their LinkedIn, personal website, and social bios, (4) guess the likely pattern (first.last@company.com) and verify it, and (5) for work emails, use a finder tool like Hunter, CUFinder, or Apollo. Always verify the address before you send.
| Method | How it works | Free? | Best for |
|---|---|---|---|
| Email finder by name + company | Enter a name and company, the tool returns a verified work email | Free tiers exist | Work/professional emails |
| Google + search operators | Search “Name” + email, or site:company.com “name” | Free | Public/listed emails |
| Guess the pattern + verify | Build first.last@domain, then run a verifier | Free | When you know the company domain |
| LinkedIn / social profiles | Check bios, About sections, and contact info | Free | Personal + work clues |
| Reverse lookups / people search | Start from a clue (email, username) to confirm identity | Mixed | Verifying who owns an address |
I’ve spent seven years chasing down email addresses for outreach. So I’ll be blunt with you. Most “find anyone’s email” guides oversell how easy this is.
Some emails take ten seconds. Others take a stubborn afternoon of cross-referencing. This guide covers every method I actually use, free and paid, plus the verification step almost everyone skips.
Can you really find someone’s email with just their name?
Sometimes yes, often no. A name alone rarely finds a private inbox, but a name plus a company usually finds a work email fast.
Here’s the honest version. If you know where someone works, the odds shift hugely in your favor.
Work emails follow predictable patterns, and finder tools index millions of them. A bare name with no company, no domain, and no profile is much harder, because there’s nothing to anchor the search to.
So the real question isn’t “can I find an email from a name?” It’s “how much context do I have around that name?” More context means a faster, cleaner find. Less context means more manual digging.
š Example: A name like "Sarah Chen" returns thousands of people. Add "Sarah Chen, Notion, product" and you've narrowed it to one person a tool can actually match.
When I first learned this in Hamburg, my professor repeated one line until it stuck. Publicly available is not the same as free to use however you like.
That distinction matters, and we’ll get to the legal side later. First, the free methods.
Free ways to find someone’s email
You don’t need a paid tool to find many emails. You don’t need LinkedIn Premium either; there are proven ways to find someone’s email without LinkedIn Premium. When people ask how to find someone’s email address without spending money, these free methods cover a surprising amount of ground, especially for people who publish online.
Below are the four free approaches I reach for first. None of them costs a cent. Each works best in a different situation, so I’ll show you when to use which.
Use Google and advanced search operators
Start with Google before any tool. A plain search of someone’s name plus the word “email” often surfaces a contact page, a resume, or a bio.
Then sharpen it with operators. The site: operator restricts results to one domain.
Try site:company.com "Jane Doe" to find pages on the company site that mention her. You can also search "Jane Doe" email or "Jane Doe" "@company.com" to surface listed addresses directly.
Quotation marks force exact matches, which cuts noise. Combining operators works too. For instance, site:linkedin.com "Jane Doe" "Acme" narrows results to her LinkedIn presence at a specific company.
š” Pro Tip: Search the person's name with filetype:pdf. Resumes, speaker sheets, and conference programs are often PDFs, and they frequently list a direct email.
I found a hard-to-reach CTO this way in 2023. His company hid staff emails, but he’d spoken at a meetup, and the event PDF listed his address in plain text. Google’s operators did what an expensive database couldn’t.
Free search gets you listed emails. But many addresses aren’t listed anywhere, so let’s build one instead.
Guess the email pattern, then verify it (permutation)
This is the most reliable free method, full stop. You build the likely address from a known pattern, then verify it before trusting it.
Most companies use one format across all staff. Common patterns include first.last@domain, first@domain, flast@domain, and firstl@domain. An email permutation simply generates these variants from a name and a domain. The same logic powers finding business email addresses from a company name when the employer is all you have.
So if you know “John Smith” works at acme.com, you’d build john.smith@acme.com, john@acme.com, jsmith@acme.com, and a few more. Then you run them through a verifier and keep the one that passes. That last step is non-negotiable, and I’ll explain why in the verification section.
š Did You Know? You can often spot a company's pattern for free. Find one known employee email, like a press contact listed publicly, and you've cracked the format for everyone there.
Here’s why pattern-guessing works. Email syntax inside an organization is standardized by IT, not chosen per person.
So one confirmed format predicts the rest with high accuracy. A free permutation generator plus a free verifier covers most work emails without paying anyone.
Back in 2021, I skipped the verify step on a rush project. I blasted around 400 guessed addresses, my bounce rate hit roughly 22%, and I burned a fresh sending domain.
Never again. The pattern is the easy part. Verification is the part that protects you.
Check their website, author bio, and contact page
Many people simply publish their email. So before any clever tactic, check whether they’ve already handed it to you.
Look at personal websites first. Freelancers, consultants, writers, and founders often list a contact email on an “About” or “Contact” page. Author bios at the end of blog posts are another goldmine, especially on company blogs and guest posts.
Newsletter sign-off lines sometimes include a reply-to address. Podcast show notes, “work with me” pages, and portfolio sites frequently do too.
These aren’t guesses. They’re addresses the person chose to make reachable.
š Example: A guest post author bio on an industry blog once gave me a writer's direct email in one line. No tool, no verification needed, because she'd published it for exactly this reason.
For technical people, GitHub is underrated. Commit histories often expose the email tied to a developer’s account, and conference speaker lists do the same for engineering leads. When I rebuilt a developer-focused list in 2022, GitHub commits found three contacts that no commercial database had.
Look on LinkedIn, X/Twitter, GitHub, and Instagram
Social profiles rarely show the email outright, but they hand you the clues that make every other method work. Start here when you only have a name.
On LinkedIn, the “Contact info” panel sometimes lists an email directly. Even when it doesn’t, the profile confirms the person’s employer, which unlocks pattern-guessing. A free LinkedIn email finder can then turn that profile into a verified work email, which is exactly the bridge from “I found the profile” to “I have the address.” For the profile-by-profile version, the flow to find someone’s email on LinkedIn takes about a minute once you know the steps.
X (Twitter) bios sometimes include an email or a Linktree leading to one. GitHub profiles may show a public email.
Instagram business accounts often display a tappable email button. None of these is guaranteed, so treat them as leads to chase, not finished answers.
š” Pro Tip: Cross-reference profiles. The username someone uses on GitHub often matches their handle elsewhere, and that thread can lead you to a personal site that lists their email.
A lesson I learned the hard way: don’t trust one profile in isolation. People list old employers, stale handles, and abandoned accounts. I always confirm the current company from at least two places before I build an address.
Free methods get you far. Paid tools get you scale, so let’s talk about finding emails by name at volume.
How to find someone’s email by name (the name-only and name+company methods)
To find an email address by name, pair the name with a company, then run it through an email finder by name. The company is what makes a name searchable.
This is the heart of what most people mean when they search how to find someone’s email address by name, using a “personal email finder” or an “email finder by name.” You type in who you’re looking for, the tool checks its index and live signals, and it returns a likely address with a confidence score. The quality of the result depends almost entirely on the context you provide.
Name only is the weakest input. As I said earlier, a bare name matches too many people. Name plus company is the sweet spot, because it points the tool at one specific person at one specific domain.
Here’s the practical flow for an email search by name:
- First, get the exact full name and current employer.
- Next, enter both into a finder tool that supports name + company input.
- Then, take the returned address and verify it.
- Finally, keep the result only if verification passes.
š Did You Know? Name-only finders mostly return work emails, not personal ones. That's because professional addresses are indexable and patterned, while private Gmail accounts usually aren't.
When I tested a name-only finder against a name+company finder on the same 50 prospects, the name+company approach won decisively. It returned far more matches, and the matches verified cleaner. So if you can find the company first, always do that before running the finder. The same name-plus-company principle applies when you need to find someone’s phone number by name.
Email lookup by name is powerful, but it has a blind spot. It struggles with private inboxes, which deserves its own section.
How to find someone’s Gmail or personal email by name
Finding a private Gmail by name alone is genuinely hard, and most tools can’t do it reliably. Personal inboxes aren’t indexed the way work emails are.
Let’s be honest about why. A work email lives on a company domain with a public pattern.
A personal Gmail is just a string someone chose, tied to no organization and no predictable format. There’s nothing structural for a “gmail email finder by name” to latch onto, so claims of instant Gmail discovery from a name are usually overstated.
So what actually works? You need a clue beyond the name. Here’s where to look:
- A personal website or blog where they list a Gmail for contact.
- A social bio (Instagram, X, a Linktree) with a personal address.
- A public record like a domain WHOIS entry, if they own a domain.
- A newsletter or community signup where they used their personal email publicly.
š Example: I once needed a contractor's personal email, not his work one. His name found nothing. But his freelance portfolio listed a Gmail in the footer, and that single clue solved it in seconds.
A pattern I see across mid-market sales teams: they waste hours hunting a personal Gmail when a work email would have done the job. Ask yourself which one you actually need before you start. For outreach, the work email is almost always the right target anyway.
The takeaway on personal email by name is simple. Without a published clue, a private Gmail is often unreachable, and that’s by design. Now let’s compare the tools that handle the work-email side well.
The best email finder tools compared
No single tool wins everywhere, so match the tool to your input and budget. Below is an honest comparison of the email finder tools I’ve used or tested.
Each of these works differently. Some need a name and company, others start from a LinkedIn URL or a domain. Free tiers vary a lot, so check the current limits before you commit.
| Tool | Input it needs | Free tier | Best for |
|---|---|---|---|
| Hunter.io | Name + domain | Yes, limited monthly | Domain search and pattern detection |
| CUFinder | Name + company, or LinkedIn URL | Yes, free credits | Verified work emails and enrichment |
| Apollo.io | Name + company | Yes, generous | All-in-one prospecting and outreach |
| Snov.io | Name, domain, or LinkedIn | Yes, limited | Drip campaigns plus finding |
| RocketReach | Name + company | Limited trial | Large contact coverage |
| ContactOut | LinkedIn profile | Limited | LinkedIn-based work and personal emails |
| Voila Norbert | Name + domain | Small free trial | Simple name + domain lookups |
| Anymail Finder | Name + domain | Pay for verified only | Only charging for verified results |
Which email finder should you start with?
A quick honest read on these. Hunter is excellent at detecting a domain’s pattern.
Apollo bundles finding with a full outreach suite, which is great if you want one platform. Snov.io leans toward campaign sequences. RocketReach and ContactOut shine on coverage breadth. If Apollo is your other finalist, the full CUFinder and Apollo comparison is worth five minutes.
š” Pro Tip: Don't pick on brand name alone. Run the same 20 test contacts through two or three free tiers and compare match rate plus bounce rate. The winner is rarely the one with the loudest marketing.
For a deeper, side-by-side breakdown, this roundup of LinkedIn email finder tools goes wider than I can here. There’s also a useful guide on where to find professional emails if you mainly need work addresses.
I keep three tools on hand, not one. Why? Because every database is partly stale, and a contact missing in one shows up in another.
I’ll explain that “waterfall” logic in the verification section. First, here’s how one of these tools handles the name + company method in practice.
How to find an email with CUFinder (contact search filtered by name)
To find an email with CUFinder, enter a person’s name plus their company, and it returns a verified work email. You can also filter contact search by name to narrow a list.
Here’s the realistic flow. You type the full name and the company, the tool matches the person, and it returns a professional email with a confidence indicator. For a bigger job, you can upload a file of names and companies and find emails in bulk, rather than one at a time.
The same approach covers enrichment. If you already have a partial record, you can find a professional email by name and company and fill in the gaps. That’s useful when a CRM export has names but missing contact fields.
Now the honest limitation, because it matters. CUFinder is built for professional and work emails.
So it’s strong when you know where someone works, and weaker if you’re hunting a private personal Gmail from a name alone. For that personal-inbox case, the social-clue methods above will serve you better.
When I run real workflows for sales teams, I treat any single tool, including this one, as one input in a chain. It finds plenty, it misses some, and the miss rate is exactly why I verify and cross-check. No vendor should claim 100%, and the honest ones don’t.
That covers the “find” half. The “which email” half matters just as much, so let’s separate work from personal.
Find a work email vs a personal email (why the method differs)
Work and personal emails need different tactics, because they live in different places. A work email is patterned and indexable. Personal ones usually aren’t.
A work email sits on a company domain with a predictable format, which is why finder tools and pattern-guessing crush it. A personal address, like a Gmail or Yahoo account, is unstructured and tied to no organization, so the same tools mostly come up empty.
This changes your whole approach. For a work email, lead with a finder tool or a permutation plus verification. For a personal email, lead with social clues, personal sites, and public records, because there’s no pattern to exploit.
š Did You Know? Most B2B outreach should target work emails anyway. They're the compliant, professional channel, and they're far easier to find and verify than someone's private inbox.
Early in my career I conflated the two and wasted a week. A pattern worth internalizing: decide which email you need before you choose a method, not after. The friction usually comes from chasing a personal inbox when a work address was the right call.
You’ve found an address. But a found email isn’t a trustworthy email yet, so here’s the step that protects your sender reputation.
Verify the email before you send it
Always verify an email before sending, every single time. A found address is a guess until a verifier confirms it can receive mail.
This is the single most important step in this guide, and it’s the one people skip. Verification checks whether an address actually exists and accepts mail. Skip it, and you send to dead addresses, which spikes your bounce rate and damages your sender reputation with inbox providers.
Here’s how verification works under the hood. A verifier runs a syntax check, confirms the domain has mail servers, then performs an SMTP check that asks the receiving server whether the mailbox exists.
A clean pass means the address is real. Meanwhile, a hard fail means don’t send.
Watch out for catch-all domains
Now the trap nobody warns you about. Some domains are catch-all (also called accept-all), meaning the server says “valid” for any address you throw at it.
So a green checkmark on a catch-all domain is false confidence, not proof. Treat catch-all results as “risky,” not “verified,” and confirm another way before trusting them.
š” Pro Tip: Think of verification as a confidence score, not a yes/no. Real-time SMTP verification beats a stored list, because a list goes stale the moment a person changes jobs.
This is also where “waterfall” logic earns its keep. B2B contact data decays at roughly 2.1% per month, which works out to about 22.5% a year, according to MarketingSherpa research cited by HubSpot.
So any single database is partly outdated. Querying multiple sources in sequence, then verifying the result, beats trusting one stored record.
“Database decay is a fact of marketing life. Even if you improve your unsubscribe rates, you can’t stop people from changing their email addresses.” HubSpot, Database Decay guidance
After my 2021 bounce disaster, I made verification mandatory on every list. The result was steady. My bounce rates dropped under 3%, my domains stayed healthy, and my reply rates climbed because messages actually landed.
Finding and verifying covers the forward direction. But sometimes you already have an email and need the person, which flips the problem.
How to find out who owns an email address
To find who owns an email, run it through a reverse email lookup, which starts from the address and returns the person or company behind it. It’s the opposite of everything above.
This is the reverse direction. Instead of name to email, you go email to identity. It’s useful when an unknown address messages you, or when you want to confirm a contact’s name and role before replying.
A reverse search cross-references the address against social profiles, public records, and breach-free data sources to attach a name. Results vary, and personal addresses return less than work ones. For the full method, here’s a dedicated guide to reverse email lookup.
š Example: A vague "partnerships@" style inquiry once hid a real decision-maker. A reverse lookup on the reply-to address surfaced his name and title, so I knew exactly who I was talking to before responding.
One caution from experience. Reverse tools are for confirming identity in legitimate contexts, not for unmasking people who want privacy. Which brings us to the part of this topic nobody enjoys but everyone needs.
Is it legal to find someone’s email address?
Finding a publicly available email is generally legal, but how you use it is regulated. Publicly available is not blanket permission to do anything.
This is where my Hamburg training kicks in. In Europe, the GDPR treats an email tied to a person as personal data.
So processing it for outreach needs a lawful basis, most often legitimate interest, under GDPR Article 6. You also owe transparency and an easy opt-out.
In the US, two rules matter most. The California CCPA gives consumers rights over their personal information. And for the act of emailing, the FTC’s CAN-SPAM Act requires honest headers, no deceptive subject lines, a real physical address, and a working unsubscribe link.
So separate the two duties clearly. Finding an email and sending to that email carry different obligations. You can lawfully find an address and still break the rules with how you message it.
š Did You Know? Consent and legitimate interest are different legal bases under GDPR. You don't always need explicit consent for B2B outreach, but you do need a defensible reason and a clean opt-out.
Be explicit with yourself about intent. If LinkedIn is your main source, the rules on whether it’s legal to find and use emails from LinkedIn deserve a closer look. These methods are for legitimate outreach, reconnection, and verification, not stalking, harassment, or spam. I’ve turned down list-building work that crossed that line, and I’d tell you to as well.
Legality handled, let’s close the gaps where good intentions still go wrong.
Mistakes to avoid when finding emails
The biggest mistakes are skipping verification and trusting a single source. Both quietly wreck campaigns, and both are easy to fix.
Here are the errors I see most, drawn from years of cleaning up other people’s lists:
- Sending to unverified guesses. This is the cardinal sin. It spikes bounce rate and harms deliverability.
- Trusting one database. Data decays fast, so confirm with a second source before you rely on a record.
- Treating a catch-all “valid” as proof. It isn’t. Flag those addresses as risky instead.
- Chasing a personal Gmail when a work email would do. You’ll save hours by picking the right target first.
- Ignoring the legal side. A clean find means nothing if your send violates CAN-SPAM or GDPR.
š” Pro Tip: Build a tiny pre-send checklist: verified, recent source, not a risky catch-all, lawful basis, unsubscribe in place. Thirty seconds of checking saves a damaged domain.
The recurring theme across all of these is patience over speed. That fast path of guess-and-blast feels productive, but it costs you later. The slightly slower path of find, cross-check, and verify is what actually lands replies.
Now to the questions people ask most.
Frequently Asked Questions
Can I find someone’s email with just their name?
Sometimes, but a name alone is weak input. You can occasionally find an email from a name if the person publishes it online. For reliable results, though, pair the name with their company, then run a finder tool or guess the pattern and verify it.
A name with no company matches too many people for a tool to resolve. So add any context you have, like an employer or a domain. That single addition turns a near-impossible search into a quick, high-accuracy one for most work emails.
Is there a free way to look up an email address?
Yes, several free methods work well. Google search operators, the site: command, personal websites, author bios, and social profiles all surface emails at no cost. The most reliable free route is guessing the email pattern from a known company domain, then confirming it with a free verifier.
Free finder tools also offer monthly credits. So between free search and free tiers, you can find plenty without paying. Just remember that free or paid, the verification step still applies before you send anything.
How do I find someone’s personal (Gmail) email by name?
A private Gmail from a name alone is genuinely hard, because personal inboxes aren’t indexed or patterned. Your best bet is a published clue: a personal website, a social bio, a Linktree, a domain WHOIS record, or a community signup where they used that address.
Name-only finders mostly return work emails, not personal ones. So if you specifically need a personal Gmail, lead with social profiles and personal sites rather than a finder tool. Without a clue the person made public, that inbox often stays private by design.
Can I legally find someone’s email address?
Finding a publicly available email is generally legal, but usage is regulated. Under GDPR, an email tied to a person is personal data needing a lawful basis, like legitimate interest. CCPA grants US consumers rights, and CAN-SPAM governs how you actually send.
So separate finding from sending. You can lawfully find an address and still break rules with a deceptive or unsubscribe-free message. Keep your outreach honest, transparent, and easy to opt out of, and you stay on the right side of these laws.
How do I find someone’s email address from LinkedIn?
Check the profile’s “Contact info” panel first, since some people list an email there directly. When it’s hidden, the profile still confirms the person’s employer, which lets you guess the work-email pattern or run a LinkedIn-based finder tool.
LinkedIn won’t always hand you the address. But it reliably hands you the company, and the company is what makes every other method work. A finder that accepts a LinkedIn URL can turn the profile into a verified work email.
What’s the difference between finding an email and verifying it?
Finding gives you a candidate address; verifying confirms it can actually receive mail. A found email is a guess until a verifier runs a syntax, domain, and SMTP check on it. Sending to unverified addresses spikes bounce rate and damages sender reputation.
Treat the two as separate steps, always. The find is the easy part. The verify is the part that protects your deliverability, especially on catch-all domains that falsely report every address as valid.
How accurate are email finder tools?
Accuracy varies widely by tool, input quality, and how fresh the data is. Good tools and clean name + company inputs reach high match rates, but no tool is perfect, since B2B data decays roughly 22.5% per year. That’s why verification after finding is essential.
Don’t take a confidence score as a guarantee. A high score plus a real-time verification pass is trustworthy.
A high score alone, especially on a catch-all domain, is not. Cross-check important contacts against a second source.
How do I find email addresses in bulk for a list of names?
Upload a file of names and companies to a finder tool that supports bulk lookup, then let it return verified emails for the whole list at once. Most finders accept a CSV with name and company columns and process them together.
Bulk finding saves enormous time versus one-by-one searches. Teams that live in spreadsheets can even connect an email finder to Google Sheets and enrich rows in place. Still, run the whole output through verification before any campaign. Cleaning a bulk list first is what keeps your bounce rate low and your domain reputation intact.
Bottom Line
So, how to find someone’s email address? Start free, then escalate.
Search Google with operators, check their website and social bios, and guess the work-email pattern from the company domain. When you need scale or a tricky work email, reach for a finder by name and company, like Hunter, Apollo, Snov.io, or CUFinder, and pick the one that wins your own test.
But the find is only half the job. Verify every address before you send, treat catch-all results as risky, and stay honest about how you reach out.
Do that, and you’ll find the emails you need without torching your sender reputation, my friend. The patient method wins.
Bad
Okay
Good
Amazing
