Email Format Finder: How to Find Any Company's Email Pattern by Domain

Before you can reach someone at a company by email, you need to know how that company structures its addresses. Most domains follow one of eight predictable patterns, from firstname.lastname@ to firstinitial.lastname@. Knowing the pattern lets you construct a likely address for any contact on a domain, then verify it before you send. Our free email finder and validator automates both steps: it detects the pattern, constructs the address, and verifies deliverability in one pass.

StartupHub.ai data shows Hunter.io scores 62 and Apollo.io scores 53 in our B2B prospecting index, the two highest-rated tools in the category. Both gate their format-detection and bulk discovery features behind paid plans starting at $34 and $49 per month respectively. This guide shows how to do the same thing free, using public signals and a verification API with a free tier that requires no credit card.

The 8 Most Common Company Email Formats

The vast majority of professional email addresses follow one of these patterns. If you can identify which pattern a domain uses, you can construct the address for any person whose name you know.

• [email protected] (most common, about 55% of B2B domains)
• [email protected] (no separator, common at larger companies)
• [email protected] (first initial plus last name)
• [email protected] (first initial concatenated with last name)
• [email protected] (first name only, common at small companies)
• [email protected] (underscore separator)
• [email protected] (reversed order, less common)
• [email protected] (last name only, rare but used at some European companies)

The actual distribution varies by company size and region. Larger companies with many employees tend to use patterns that avoid collisions between people who share a first name, which pushes them toward formats that include both full first and last names. Smaller companies with a few dozen employees often use first names only, since collisions are rare at that scale.

Three Ways to Find a Company's Email Format

Method 1: Check published addresses on the domain

Search for the company's domain in a web search combined with terms like "email" or "@". Press releases, blog author bios, academic papers, and company contact pages often include one or more addresses. A single confirmed address reveals the pattern for the entire domain. LinkedIn posts, GitHub commit histories, and developer documentation are also reliable sources.

Limitation: if no address is published anywhere, this method returns nothing. It also does not tell you whether the pattern is consistent across the whole company or used only by certain departments.

Method 2: Use our email finder tool

Enter a name and company domain into our free email finder, and the tool detects the domain's known format patterns, constructs the most likely address, and returns it with a live deliverability status. No sign-up required. The free browser tool handles one address at a time. For bulk discovery across a contact list, the API is the right path (see below).

This approach works even when no published address exists for that specific person, because the detection step looks at the domain's overall pattern rather than requiring a known example from that individual.

Method 3: Check email headers you have already received

If you have received any email from someone at the target company, open the original message headers. The From: field shows the sender's full address and reveals the format used on that domain. In Gmail, click the three-dot menu and select "Show original". In Outlook, go to File, Properties. This is the most reliable signal because it is a confirmed, live address from the actual mail system.

How to Verify a Guessed Email Address

Once you have constructed a candidate address using the detected pattern, verify it before you send. Sending to an unverified address risks a hard bounce, which signals to email providers that you are not maintaining list hygiene. A single hard bounce at low volume is manageable; a batch of them flags your sending account.

Paste the address into our free email validator. The tool runs three checks in sequence: format validation, MX record lookup, and an SMTP handshake against the recipient server. It returns a status of valid, invalid, catch-all, or risky, plus a 0-100 deliverability score. Results appear in under 2 seconds.

Code Example: Discover and Verify with the API

For developers integrating email discovery into a product, CRM, or outreach workflow, the email API handles the discovery and verification in one call. A free API key includes 5 discoveries and 50 validations per day, no credit card required.

Python

import requests

API_KEY = 'YOUR_API_KEY'
BASE = 'https://www.startuphub.ai/api/v1'

# Step 1: Discover the most likely email address
discovery = requests.get(
    f'{BASE}/email/discover',
    params={'first_name': 'Jane', 'last_name': 'Smith', 'domain': 'acmecorp.com'},
    headers={'Authorization': f'Bearer {API_KEY}'}
).json()

email = discovery.get('email')
print(f'Discovered: {email}')  # e.g., [email protected]

# Step 2: Validate before sending
if email:
    validation = requests.get(
        f'{BASE}/email/validate',
        params={'email': email},
        headers={'Authorization': f'Bearer {API_KEY}'}
    ).json()
    print(f'Status: {validation["status"]}, Score: {validation["score"]}')

JavaScript

const API_KEY = 'YOUR_API_KEY';
const BASE = 'https://www.startuphub.ai/api/v1';
const HEADERS = { Authorization: `Bearer ${API_KEY}` };

async function discoverAndValidate(firstName, lastName, domain) {
  const discovery = await fetch(
    `${BASE}/email/discover?first_name=${firstName}&last_name=${lastName}&domain=${domain}`,
    { headers: HEADERS }
  ).then(r => r.json());

  const { email } = discovery;
  if (!email) return null;

  const validation = await fetch(
    `${BASE}/email/validate?email=${encodeURIComponent(email)}`,
    { headers: HEADERS }
  ).then(r => r.json());

  return { email, status: validation.status, score: validation.score };
}

discoverAndValidate('Jane', 'Smith', 'acmecorp.com')
  .then(result => console.log(result));
  // { email: '[email protected]', status: 'valid', score: 94 }

When Format Detection Cannot Confirm a Specific Address

Some mail servers are configured to accept every email sent to any address on the domain, even addresses that correspond to no real inbox. These are called catch-all domains. When a verifier connects to a catch-all server and checks whether a specific mailbox exists, the server returns "yes" for everything, including addresses that were made up.

In this case, the API returns status: "catch-all". You know the domain accepts mail, but you cannot confirm whether the specific person's address is real. Options: send to the most likely pattern and monitor bounce reports carefully, or treat the contact as unverifable and lower the sending priority. Do not send a large batch to a catch-all domain without warming up slowly and watching bounce signals after the first send.

The catch-all email detection guide covers handling strategies in more detail.

Frequently Asked Questions

What is an email format finder?

An email format finder is a tool that detects the email address pattern a company uses for its employees, based on the company's domain. Most companies follow a consistent structure, such as [email protected], across all employee addresses. A format finder identifies that structure so you can construct a likely address for any person at the company before attempting to verify or send.

How accurate is email format detection?

Accuracy depends on how many confirmed addresses exist for a domain and whether the company uses a consistent format. Companies with a single, consistent pattern return high-confidence results. Companies that use multiple formats across departments, or have no public addresses available for analysis, return lower-confidence results. The deliverability score on any discovered address reflects this uncertainty: a score below 70 suggests treating the address as unconfirmed until you see a reply or receive no bounce after a first send.

Can I find the email format for any company domain?

For most professional domains, yes. Publicly traded companies, tech startups, and companies with a web presence tend to have at least some published addresses that reveal their format. Very small companies, stealth-mode startups, and domains with aggressive privacy settings are harder to detect without sending a probe. For those, the API's discovery endpoint uses pattern inference and returns a confidence score to signal the certainty of the result.

What is the difference between an email finder and an email validator?

An email finder discovers a likely address from a name and domain by detecting the format pattern and constructing the most probable address. An email validator confirms that a specific address is real and deliverable by checking DNS records and running an SMTP handshake. The two steps are typically run in sequence: find the address first, then verify it. Our free tool handles both in a single workflow at startuphub.ai/email-validator.

What are the most common email format patterns?

The most common formats are firstname.lastname@, firstnamelastname@, and f.lastname@ (first initial plus last name). Together these three patterns cover roughly 80 percent of professional email addresses. The remaining 20 percent use underscore separators, first-name-only formats, or reversed name orders. Our email finder checks all known patterns for a domain and returns the most likely match with a confidence score.

Is there a free email format finder with no sign-up?

Yes. StartupHub's free email finder and validator detects the format, constructs the likely address, and verifies deliverability without any account or sign-up. Single lookups are free in the browser with no monthly cap. Bulk discovery and automated use are available through the developer API at startuphub.ai/api-docs, which includes a free tier for low-volume usage.