How to Find Someone’s Email Address: Best 2026 Guide

You have a name and a company. You need the email address. This is one of the most common problems in sales, recruiting, partnerships, and outreach, and the good news is that it is almost always solvable in under a minute. Business email addresses are not random: companies follow patterns, and once you understand the patterns, finding almost anyone becomes a repeatable process rather than a lucky guess.

This is the complete 2026 guide to finding someone's email address: the seven methods ranked from fastest to most thorough, the real data on how companies format addresses (verified across 336,782 business emails), the free tricks that actually work, the tools that automate the whole thing, and the one non-negotiable step that protects your sender reputation. No fluff, no shady tactics, just what works.

Why This Works: Business Emails Follow Patterns

The core insight: companies almost never assign random email addresses. IT teams need a consistent rule to provision mailboxes, so they pick one format and apply it to everyone. That single fact is what turns email finding from guesswork into a system. Find one person's address at a company, and you have effectively found the pattern for the entire organization.

Your situation decides where to start:

Here is why the pattern approach is so powerful. Suppose you are prospecting into a 400-person company and you already have one verified contact: mike.jones@acme.com. That single data point tells you the pattern is first.last.

Now every other name on your list, Jane Smith, Raj Patel, Chen Wei, converts to a high-confidence address in seconds: jane.smith@acme.com, raj.patel@acme.com, chen.wei@acme.com. One known address unlocks the entire company.

7 Ways to Find Someone's Email Address

Ranked from fastest to most thorough. Most of the time, method one solves it. The rest are your escalation path when the easy route comes up empty.

1

Use an email finder tool (fastest)

Enter the person's name and their company's domain, and an email finder returns the address, often already verified, in seconds. It collapses pattern detection, guessing, and verification into a single step. For one address or ten thousand, it is almost always the right first move. It is exactly why we built an email finder into MailTester.Ninja: name in, verified address out. Our step-by-step finder tutorial shows a real lookup end to end.

2

Derive the pattern from one known address

If you already have any address at the company, you have the pattern. Match the part before the @ against that person's name: joan.smith@ is first.last, jsmith@ is flast, joan@ is first. Apply the same rule to your target. This costs nothing and works because companies standardize: among the largest enterprises (10,000-plus employees), over 74 percent share the exact same first.last format.

3

Check the company website and email signatures

Contact pages, team pages, press releases, and PDF documents often expose real addresses. A published email like press@ or a named person's address reveals the pattern instantly. Search the domain plus "email" or look for staff addresses in the footer of company reports. One found address solves the whole directory.

4

Search Google with targeted queries

People and companies leak addresses across the web. Try searching the person's name with the company domain, or the domain with an @ symbol, to surface addresses indexed in documents, directories, and forum posts. Advanced operators like site: narrowed to the company domain, combined with a name, can pull up an exact address that already lives publicly online.

5

Look on LinkedIn and professional profiles

Many professionals list a contact email in their profile's contact section, or link to a personal site that does. Even when the address is hidden, the profile confirms the person's exact name spelling, current employer, and role, the three inputs every other method depends on. A surprising number of profiles link out to a personal domain whose contact page carries a direct address.

6

Apply the format cheat sheet, then verify

When you cannot find a known address, fall back to probability. Generate the candidates from the person's name using the most common formats (the cheat sheet below ranks them by real-world frequency), then verify each until one confirms. Because first.last and flast cover roughly three quarters of all business addresses, this converges fast: usually two or three checks.

7

Just ask (the underrated method)

For high-value targets, a short message on any channel where they are reachable, LinkedIn, X, a mutual contact, often gets you the address directly, and warms the relationship at the same time. "What's the best email to reach you?" is disarmingly effective. It does not scale to hundreds, but for the handful of contacts who truly matter, it is often the fastest path of all.

The Email Format Cheat Sheet (2026 Data)

The direct answer to "which format should I guess": start with first.last, then flast. Together they cover about 75 percent of all business email addresses. This is not a rule of thumb; it comes from Sendburg's analysis of 336,782 verified B2B email addresses, and the distribution is remarkably consistent across the industry.

Two nuances sharpen your guessing. Company size shifts the odds: at large enterprises, first.last dominates even harder, with over 74 percent of 10,000-plus-employee companies using it, while small startups lean informal, where the bare first@ format is far more common.

Region matters too: when a first.last guess bounces at a European or Asian domain, your next candidate is often first_last or last.first rather than another North-American variant. Guess with the size and geography in mind, and your hit rate climbs.

Free Methods That Actually Work

You do not need a paid tool for occasional lookups. Here is the free workflow that finds most addresses, in order:

1

Find one known address to reveal the pattern

Search the company domain on Google with an @ symbol, check the contact and team pages, and scan any press releases or PDFs. You need just one real address, anyone's, to expose the company's format. This is the single highest-leverage free move: one address solves everyone.

2

Apply the pattern to your target's name

Once you know the format, plug in your target's name. If the pattern is first.last and you want Raj Patel, the address is raj.patel@company.com. If you cannot find any known address, generate the top two or three candidates from the cheat sheet: first.last and flast will cover most cases.

3

Verify your candidate for free before sending

This is where a free verification tool is essential. Run each candidate through a checker to confirm the mailbox actually exists before you ever send. Our free email checker confirms whether an address is real in seconds, with no signup and nothing stored, so you send only to addresses that will land.

A quick honesty note on free browser-based tricks: the classic Gmail SMTP trick and various browser extensions that once confirmed addresses have grown unreliable as providers tightened their systems.

The pattern-plus-verification workflow above is more dependable and entirely free. If you are checking more than a handful of addresses, though, a bulk email finder and bulk verifier will save hours, which is the point at which most people graduate from free tricks to a dedicated tool.

The Step Everyone Skips: Verification

Finding an address and confirming it is real are two different jobs, and skipping the second is the most expensive mistake in outreach. A guess is just a hypothesis. Sending to an unverified guess means betting your sender reputation on being right, and when you are wrong, the address hard-bounces.

Here is why that matters more than beginners expect. Mailbox providers hold senders under a strict bounce threshold, and Google's own guidelines direct bulk senders to keep bounce rates well under 2 percent, ideally far lower, per Google's sender guidelines.

Guessed addresses bounce at high rates, and a batch of unverified guesses can blow past that ceiling in a single send, landing your future mail in spam. The whole point of finding the address is to reach the person; an unverified send often achieves the opposite.

Verification closes the gap. A real-time check confirms the mailbox exists before you send, turning a probabilistic guess into a confirmed address. Addresses age too: people change roles constantly and lists decay at 2 to 3 percent monthly, so a found address is freshest the day you verify it.

This is why the two steps are inseparable: find, then verify. The finding gives you a candidate; the verification makes it safe to use. For the mechanics of how this works, our guide on how to verify an email address walks through the full process, and because guessed lists skew toward risky addresses, screening for disposable addresses and catch-all domains matters here too.

Is This Legal? The Honest Answer

Finding a professional's business email address for relevant B2B outreach is legal in most of the world, including under GDPR, provided you follow a few rules. The fear around this topic is mostly outdated; the reality is well-defined.

Under GDPR, B2B prospecting does not require prior opt-in consent. It rests on the legal basis of legitimate interest, Article 6(1)(f), and the regulation's own Recital 47 explicitly recognizes direct marketing as a potential legitimate interest.

In practice, three conditions keep you compliant: your message must be relevant to the recipient's professional role, you must be transparent about how you sourced their data if asked, and you must offer an easy way to opt out. A business address like j.smith@company.com is still personal data, so it deserves that respect, but finding and using it for relevant outreach is entirely lawful.

Two country-level nuances matter for 2026. Germany is the strictest EU jurisdiction: its unfair-competition law effectively pushes toward prior consent for commercial email, so cold outreach to German contacts warrants extra care.

France updated its rules effective August 2026, requiring explicit consent for business-to-consumer prospecting, while B2B outreach to professional addresses remains permissible under legitimate interest. In the US, CAN-SPAM never required consent to begin with: accurate headers, a truthful subject, a working opt-out, and a physical address keep you compliant. The through-line everywhere: target professionals with relevant messages, be honest about sourcing, and always honor opt-outs.

Glossary

Frequently Asked Questions

About the author

Danila Kozlov

COO at MailTester.Ninja

Danila has spent the last few years deep in email deliverability, helping SaaS companies and growth teams fix the infrastructure problems that silently kill their outbound results. As COO of MailTester.Ninja, he oversees product and operations with a single obsession: making email verification fast, accurate, and genuinely useful for the people who need it most.