How to Find Anyone's Work Email Address by Name (5 Free Methods)

Finding someone's professional email address when you only have their name takes under a minute with the right method. Whether you are building an outbound sales list, doing recruitment research, or reaching a media contact, the five approaches below work for most business addresses at any company size. The fastest and most reliable is a name-plus-domain lookup: enter the person's first name, last name, and company domain into our free email finder and validator, and get back a verified address in under two seconds, no account required.

StartupHub.ai data shows the B2B email finder and sales intelligence market is active but top-heavy: Lusha (score 70), Cognism (65), Hunter.io (62), Apollo.io (61), and Seamless AI (55) all score above 50 on our platform, yet every one of these tools caps its free tier between 5 and 50 lookups per month. The methods below include free alternatives with no monthly cap.

Method 1: Use a Name-and-Domain Email Finder

The direct approach is to use an email finder designed for name-plus-domain lookups. You supply the person's first name, last name, and company domain (for example, jane, smith, acmecorp.com). The tool checks the domain's known email format patterns, constructs the most likely addresses, and runs an SMTP check to confirm which one is deliverable.

This method works well when you already know where the person works. If you are not sure of their current employer, confirm it on LinkedIn first (see Method 3), then come back here with the company domain.

Our finder is free, runs in the browser, and does not require a sign-up. It also handles the verification step automatically, so you get a confirmed deliverable address rather than just a guess. Try it at StartupHub's free email finder.

Method 2: Deduce the Email Pattern and Verify

Most companies use one of eight standard email formats: first.last@, first@, flast@, firstl@, last.first@, f.last@, firstname@, or lastname@. If you know which pattern a company uses, you can construct the address and verify it.

To find the pattern, look up any publicly listed email at the company (on their contact page, in a press release, or in a LinkedIn post) and infer the format from it. Or use our company email format finder, which detects the format for any domain automatically.

Once you have the constructed address, paste it into StartupHub's email validator to confirm the mailbox exists before using it. This step matters: constructing the address correctly does not guarantee it is active, and an unverified bounce hurts your sender reputation.

Method 3: Start with LinkedIn, Then Look Up the Email

LinkedIn tells you where a person currently works and spells their name exactly as it appears on company records. Once you have confirmed the name and employer, you have everything Method 1 needs: first name, last name, and the company domain from their employer's website.

LinkedIn itself does not show most members' email addresses unless you are connected. Some profiles include a contact info section with an email visible to first-degree connections. If you are connected, check there first. If you are not, take the confirmed name and domain to the email finder rather than spending time trying to connect first.

Method 4: Search Google for the Address Directly

Company emails sometimes appear in publicly indexed documents: press releases, conference attendee lists, PDF pitch decks, speaker bios, and podcast guest pages. A targeted Google search can surface these.

Try the following queries, substituting the person's name and their company's domain:

• "jane smith" "@acmecorp.com" - finds pages that mention both the name and any @acmecorp.com address near each other
• site:acmecorp.com "jane smith" - searches the company website directly for the name
• "jane smith" "acmecorp.com" email - broader search associating the name with the domain

This method is slower and less reliable than Method 1, but it sometimes surfaces addresses that finder databases miss if the person's email has never been indexed in a contact system. Verify any address you find before sending to it.

Method 5: Check the Company Website and Public Records

Some contact details are on the company's own website: the About page, Team page, blog author bios, press contact section, or footer. Founder and executive emails appear in press releases, patent applications, and academic paper author sections. For smaller companies, the WHOIS record for the domain sometimes includes a contact email, though privacy protection has made this less common.

This method works best for founders, executives, and media contacts at small to mid-size companies who are reachable by design. For mid-level roles at larger organizations, Method 1 is consistently faster.

Which Method Should You Use?

For most name-to-email lookups, start with Method 1: use the email finder with the person's name and company domain. It is the fastest path and handles verification in the same step. Fall back to Method 2 if the finder does not return a confident result for that domain, and use Method 3 to confirm employer details before any lookup. Methods 4 and 5 work best as a last resort or when the target is a public-facing contact such as a founder, executive, or journalist who is deliberately easy to reach.

Frequently Asked Questions

Is it legal to find someone's work email by name?

In most jurisdictions, finding and using a publicly derivable business email for legitimate professional outreach is legal. Work email addresses used in a business context are generally not considered private contact details. Usage rules still apply: anti-spam laws including CAN-SPAM (US), CASL (Canada), and GDPR (EU) govern what you can send once you have an address. Always include a clear opt-out and honor unsubscribes immediately.

What if I only know the person's name and not their company?

You need the company domain to look up a work email. If you have the name but not the employer, check LinkedIn, the person's social profile, or any recent press mentions. Conference attendee lists and podcast guest pages also list affiliations. Once you have confirmed the employer, take the name and domain to the email finder.

How accurate are email finders for name-to-email lookups?

Accuracy depends on how consistent the company is with its email format. Companies with a single domain-wide pattern return highly accurate results because the SMTP check confirms the specific mailbox. Catch-all domains, where the mail server accepts any address at the domain, return an inconclusive result: the address may exist, but the server cannot confirm it. Our finder flags catch-all results explicitly so you know the confidence level before using the address.

What does "catch-all" mean when finding emails?

A catch-all domain accepts delivery for any address at that domain, even addresses that do not correspond to real inboxes. When a finder returns a catch-all result, it means the server could not confirm or deny the specific mailbox. Sending to catch-all addresses carries more risk: some will bounce, some will deliver, and there is no way to know in advance. Treat catch-all results as lower confidence and prioritize them for manual review before adding to a sequence.

How many free email lookups can I do per day?

StartupHub's free email finder and validator provides 50 validations and 5 email discovery lookups per day with no account and no credit card. For higher volumes, the developer API at the API docs page supports bulk use on paid plans with no daily cap.

Can I find emails for multiple people at once?

Yes. For bulk name-to-email discovery, the email finder API accepts programmatic requests and can process a list of names and domains in a loop or concurrently. The free tier covers 5 discoveries per day; paid tiers remove the daily limit. For one-off lookups, the browser tool at the email finder handles each address individually.

What is the difference between finding an email and verifying one?

Finding means constructing or discovering the most likely email address for a person given their name and employer. Verifying means checking that the address is active and deliverable by querying the recipient mail server directly. The two steps are distinct: you can verify an address you already have without finding it first, and a found address is not guaranteed to be valid until it has been verified. Our finder runs both steps together, returning a verified result rather than just a guess.