9 Actionable Ways To Find Anyone’s Email Address [Updated for 2018]

9 Actionable Ways To Find Anyone’s Email Address [Updated for 2018]

Article stats

  • Referring domains 40

  • Organic traffic 416

Data from Content Explorer tool.

Quick links

It’s not always easy to find someone’s email address, as they’re not always willing to reveal their email address on the web. They don’t want to get another spammy email!

But here’s the good news: with a little digging, it is possible to find most people’s email address.

How do I know?

Finding email addresses is a BIG part of my job. I’ve sent more than 2K emails to bloggers, SEO experts, and inbound marketers over the past 18 months. And I had to search for nearly every email address for my outreach.

I’ve tried loads of tips & tricks and dozens of email discovery services, both free and premium.

Most of them did not work for me at all. Some were not particularly efficient and took too much of my time. So I kept trying to optimize the process.

Today I’m going to share my most effective, personally tested email discovery methods with you.

I won’t talk about the most obvious methods here. After all, searching on Google, checking contact pages, and looking at contact sections on social networks is probably the first thing you’d do, right?

Let’s get started!

1. Use Email Lookup Services (I gave them a HUGE test)

I’ll start with the simplest method of finding an email address:

Using email discovery tools.

If you’ve been following Ahrefs’ blog for some time, you’re probably aware that we like to back up our statements and recommendations with solid numbers.

So I took eight email lookup services, which got quite a few recommendations from digital marketing professionals and ran a test.

Meet the contestants:

  • Clearbit Connect: 100 searches per month. Free access.
  • Hunter: 100 free searches per month. Paid accounts starts at: $49/month for 1,000 searches.
  • toofr: 30 free searches as a trial. Paid accounts starts at: $19/month for 2,500 searches.
  • Findanyemail 2.0: 100 free searches per month. Paid accounts starts at: $49/month for 5,000 searches.
  • Voila Norbert: 50 free searches as a trial. Paid accounts starts at: $49/month for 1,000 searches.
  • Emailmatcher: Unlimited free searches (protected by reCaptcha).
  • Anymail finder: 20 free searches as a trial. Paid accounts starts at: $18/month for 200 searches.
  • Find That Email: 15 free searches per month. Paid accounts starts at: $29/month for 500 searches.

I took a list of precisely 100 people from my contact list in SEO niche and searched for their email addresses in each of the 8 tools. For every contact on my list, I already had a corporate email, so I would know if the tools found the right address or not.

The input data included First Name, Last Name, and Domain.

It’s true that one person can have several email addresses on the same domain. So for every tool, I had to verify the result when it was different from the email addresses I had.

I can’t wait to share the results with you!

email finding tools results

Viola Norbert is the winner with 87% success rate.


I ran a similar test over a year ago, but it only covered three tools and used 25 contacts; this time I’ve tested eight tools with 100 contacts. Last year, FindThatEmail was the winner. But because the sample size is now considerably larger, this year’s results are more reliable and accurate.

A close runner-up is Clearbit Connect. It showed outstanding results as well but, unlike Norbert, it allows up to 100 searches per month for free. That’s more than enough for those who do quality, personalized email outreach.

want to be included in this study?

If you own or manage a similar tool and would like to see it included in this test, just find my email address, drop me a line, and I will gladly add it. 🙂

I always wondered how these tools worked, so, naturally, I asked Google.

The most clear-cut answer was given by François Grante, the founder of Hunter service, on Quora:

  1. We search the website of the company the person is currently working for.
  2. We search all the email addresses we have in our base using the same domain name (i.e., all email addresses with @company.com).
  3. Depending on what we get, Email Hunter automatically finds the most likely email pattern used in the company. If we don’t have enough data, we just return the few email addresses we found for the investigated company and let the user judge what can be used.

To give more accurate results, we also use SMTP checks to test the deliverability and score the quality of sources (pages where email addresses are displayed on the web).

François Grante

That’s actually how most email discovery services work. Some of them also search through their huge databases with tons of email addresses in them.


 SMTP check, by the way, is not a very reliable way to verify an email address. I’ll show you why a bit farther in this post.

I went to Google again to find the most recommended email discovery services. The odd thing was that I had not seen any tests or comparisons of these tools. People just listed them in their articles about outreach and email hunting.

Using an email discovery service is a good solution for your email search. But it’s not a perfect one.

Here’s why:

  • Sometimes these tools are not able to find an email address;
  • They only allow a limited number of free searches and their subscription plans can be quite expensive.

If you want to learn some free ways to find an email address when email discovery tools fail, keep reading.

2. Make Your Best Guess (And Test It)

This method of email discovery is not new; it has existed for years.

Besides, as you already know, it’s the cornerstone of many email lookup services.

Most email addresses follow one of several formulas. If you know First Name, Last Name, and Domain of your target, you can easily guess someone’s email address.

In fact, more than 70% of the email addresses from the list I used in my test above used the simple name@domain.com formula.

Here are some other common formulas you can use to guess an email address:

pasted image 0 2


The table above is taken from this Hubspot post. I think they covered all most popular email address structures. But I will add one more—firstname.lastname@company.com which I come across quite often.

However, picking out all the options manually can be time-consuming, so here’s a shortcut for you:

Email Permutator+ from Metric Sparrow. It can automatically create a list of possible email addresses. Just fill in the fields and let it do the job.

pasted image 0 6

Email Permutator spreadsheet built by Rob Ousbey from Distilled is an impressive alternative.

These tools will get you a list of possible email addresses in seconds. Now you need one more tool which will check these suggestions: LinkedIn Sales Navigator Lite for Chrome (ex. Rapportive). Install it now if you have not yet.

Now click “Compose” button in your Gmail and paste all the email permutations into the “To” field. Then move the cursor over the email address one by one and observe.

gmail permutations sales navigator email check

Gmail will show you if the email address is associated with a Google+ account, while the LinkedIn Sales Navigator extension will reveal if this email address belongs to a LinkedIn profile (you must have a Linkedin account).


If both Sales Navigator and Gmail remain silent, you can run another check by searching for the exact match of your best guess on Google to see if it was mentioned anywhere on the Web.

I don’t recommend relying on email verification services because they are often wrong.

pasted image 0 5

Result from https://www.verifyemailaddress.org

In reality, this email address does not exist. Unfortunately.

3. Search “@domainname.com” in Bing

Now you might already be thinking that there’s a problem with this tip.

And if so, you are (kind of) right!

Google uses the “@” symbol for social tags. And if you put “@ahrefs.com” (exact match search) in Google, you won’t find any email addresses.

But don’t forget that Google is not the only search engine!

I discovered this hack not so long ago: you can use Bing search instead.

Use exact match search for “@domainname.com,” and Bing will reveal email addresses related to this domain if they are publicly available.

pasted image 0 10

As you can see, this little-known trick does work.


 Surprisingly, this trick appeared to be a hit and miss. Bings search results seem to fluctuate a lot, and honestly, only some members of our team were able to replicate this. Let us know if it works for you in the comments section.

4. Check Your LinkedIn Connections

Did you know that a user’s email address is always visible on LinkedIn for your direct connections?

Check one of your connection’s profiles, and their email address will be there for you to grab in the ‘Contact Info’ section.


Just in case you don’t know, you can see differences between connections and those you are following on LinkedIn here.

You can also export all your LinkedIn connections to a single file on your computer.

Here’s the official manual from LinkedIn:

  1. Click the My Network icon at the top of your LinkedIn homepage.
  2. Click Your connections on the left rail.
  3. Click Manage synced and imported contacts near the top right of the page.
  4. Under Advanced actions on the right rail, click Export contacts.
  5. Click Request Archive.
  6. You will receive an email to your Primary Email address which will include a link where you can download your list of connections.

pasted image 0 8

You will then get a CSV file. And your connections’ email addresses will all be there.

That’s handy if you have a VA collecting email addresses for you. Just send the exported file over to your VA.

And here goes a warning message for everyone—don’t blindly connect with everyone on LinkedIn. You risk leaking your personal email address into improper hands!!!

5. Reach Out For An Email Address On Twitter

I’ve seen plenty of contact pages where people say that the best way to reach them is to drop them a message on Twitter.

But generally the message you want to send is more than 280 characters long, so you’d prefer an email address.

If that’s the case, don’t hesitate to find that person on Twitter and ask for their email address.

Our head of marketing, Tim Soulo, does that quite often.

pasted image 0 13

Trust me; most people will eagerly answer such a message, providing that you have a real Twitter profile that clearly states who you are.

6. Use Twitter Advanced Search

The method above is not the only way to get someone’s email address using Twitter. I’d like to share another neat Twitter trick with you.

Quite often people share their email addresses in their tweets. But to hide them from bots, they replace “.” and “@” symbols with “dot” and “at” words.

Have you already guessed your next step?

Go to Twitter Advanced Search and look for “at” and “dot” words in tweets from your target person. You can also include words like email, contact or reach in your search to narrow down the results.

Let’s see if this works for Joshua Hardwick, our Head of Content here at Ahrefs.

I had a dog, and his name was… BINGO!

Some people don’t even bother ciphering their email addresses when they tweet.

Let’s see if our CMO, Tim Soulo, ever shared his email address on Twitter.

Snap Bird service is a convenient way to search any Twitter users history.

pasted image 0 12

As you can see, he does that quite often.

7. Subscribe To Your Target’s Email List

If a person you’re targeting has a personal blog, you can subscribe to his or her email list via an opt-in form on the blog. Most newsletter emails will come from their personal email address.

Besides, it is an outstanding opportunity to start a conversation with a comment on one of the newsletter emails you will get. You can write a smart question that requires a quick answer or ask for an opinion.

Here is one of the very first email outreach messages I ever sent:

pasted image 0 9

I signed up for Brian Dean’s newsletter and replied to the first email I got.


Sometimes special email addresses like newsletter@domainname.com, news@domainname.com or similar are used in newsletters.

But if you reply to these, an answer might come to you from the personal email address.

8. Ask for a personal connection via a generic email address or website contact form

Most big companies have either a contact form on their website for any inquiry, or a general email address in their contact information (e.g. info@domainname.com). Those addresses are mostly handled by support teams or by VAs.

Just shoot a simple message and ask them to connect you with the person you want to reach.

pasted image 0 3


This mostly works if your email signature clearly explains who you are.

And if you’re using a VA to collect email addresses for you, make sure that his or her signature mentions you as their boss. 🙂

9. Check WHOIS Data to See the Owner of a Domain

This is my last resort in finding an email address.

These days many domains have private registration details, which means you won’t be able to find contact details for the domain owner easily.

Here’s an example.

If you try to find the owner’s contacts for searchenginejournal.com at who.is, this is what you get:

pasted image 0 1

But sometimes you can still find the domain owner’s contact email address in WHOIS data.

It works best for one-owner websites, who have little to no reason to hide contact information. But this information is available for some larger sites as well.

Here’s the example for this very domain ahrefs.com

pasted image 0 11

Editor’s note

A lot of people will use their personal email addresses here (e.g., Gmail).

While this may seem desirable, keep in mind that many people don’t publicly post this email address anywhere else. So, if you send a cold email to this address, they’ll know where you got it from, and it may even annoy them.

I, therefore, recommend that you use this tactic wisely and sparingly.

Joshua Hardwick

Did I miss anything?

And that’s it! Plenty of actionable methods you can use to find any email address.

Of course, looking for an email address on Google or in social profiles is a more obvious tactic, but it doesn’t always work. The tactics I shared above work perfectly for those that are proving difficult to find with “traditional” methods.

But, before I wrap this up, I have a serious request…

Please use these tactics responsibly—I’m begging you! Don’t make people you want to reach hate me for writing this article. 🙂

And if you know any other good ways to find someone’s email address, I’d love to learn them. Just share them in the comments!

Article stats

  • Referring domains 40

  • Organic traffic 416

Data from Content Explorer tool.



Alex95 says:

Here is a very interesting article, I recommend you to try if you want, ZeroBounce( https://www.zerobounce.net), they have 98%+ accuracy and very advantageous prices. Also, they are #1 ranked by Accu Web. I tested over 15 email validation tools like Zerobounce and I am so satisfied with their services!
Thank you for your article!
Hope it helped!

simona go says:

Thank you for your article, it’s very good and it’s well written.

I also use an email validator and it’s great.

This email validator is https://www.zerobounce.net/

It is very easy to use and offers you a trial version of 100 emails. They have a very good system that can detect spam traps, invalid e-mails, and catch-all.
In addition, its API is great.

Write a comment