To find a business email address by name, you need two inputs — the person's full name and their company's email domain — then three moves: work out the company's email format, build the most likely address for your target, and verify it before you send. That last step is the one people skip and the one that matters most: it confirms the mailbox actually exists, so you never bounce a message off a guess.
Below is the full manual method, plus the faster automated path when you need to do this at scale. Either way the rule is the same — find, then verify.
How Do You Find an Email Address by Name?
You find an email address by name by reverse-engineering the company's email pattern. Almost every organization applies one consistent format to every employee — so once you know the pattern and the domain, a name is enough to build the address. The catch is that the pattern varies from company to company, which is why guessing a single format blind is unreliable.
The two things every email address is made of
- Name part — some arrangement of first name, last name, and initials (e.g.
john.doe,jdoe,john). - Domain — the company's email domain after the
@, usually the same as its website (e.g.company.com).
Nail the domain and the name part, and you've reconstructed the address. The whole method that follows is just a disciplined way to get both right — and to prove the result exists before you rely on it.
The most common corporate formats are [email protected] and [email protected], with [email protected] common at smaller firms. Because you can't assume one and be right, the reliable approach is to generate every plausible format with an email permutator and let verification pick the winner.
How to Find Someone's Email Address, Step by Step
To find someone's email address, get their name and company domain, generate the likely formats, then verify to find the one that exists. Here's the full workflow:
Get the full name
You need first and last name at minimum. A middle name or a known nickname helps — more inputs mean more accurate candidate formats. LinkedIn, the company team page, and conference speaker lists are reliable sources.
Find the company's email domain
Grab the domain from any existing staff email, the site's contact or press page, or an email signature. It's usually — but not always — the same as the website domain (some companies send from a dedicated mail domain).
Establish the company's format
A single public address reveals the pattern. If [email protected] appears in a press release, Acme almost certainly uses first.last for everyone. No public address? Permutate one known employee and verify to learn the pattern.
Generate the candidate addresses
Feed the name and domain into the free email permutator. It instantly returns 40+ likely formats. If you already know the company pattern, you only need the one address that matches it.
Verify before you use it
Run the candidate(s) through email verification. Exactly one (occasionally two) comes back valid — that's the real address. Never send to the whole guessed list.
Skip the guesswork
An email finder runs steps 3–5 for you: it works out the format, matches the person to their current role, and returns only the address it has confirmed deliverable — so you skip straight to a usable email.
Try the Email FinderHow to Find Someone's Work Email
To find someone's work email specifically, tie the person to the right employer first — then apply that company's format to their name. The trap with work emails is people who hold more than one role: a board seat, an advisory gig, a former company still on their profile. Build the address at the wrong domain and it will never land, no matter how good your format guess is.
Confirm the current employer
Check the person's current title and company, not just the top line of their profile. The domain you build against has to belong to the role you actually want to reach them about.
Reuse a proven pattern
Once you've confirmed one colleague's address at that company, every other employee almost certainly follows the same format. Apply it to your target with much higher confidence — but still verify.
Watch for catch-all domains
If verification says every guess is valid, you've probably hit a catch-all domain — one that accepts mail for any address — not a real match. 40-60% of B2B domains are catch-all, so this comes up constantly. Use a verifier that resolves individual mailboxes on catch-all domains.
This role-matching problem is exactly what a people search plus email finder solves automatically — the finder uses the role you searched to pick the right current company, so a domain only attaches when the role actually belongs to it.
How Do You Verify the Email You Found?
You verify a found email by checking it at the mail-server level — without ever sending a message. An email verification service runs three checks on each candidate:
Syntax & domain
Confirms the address is well-formed and the domain has valid MX (mail exchange) records that can receive email at all.
Mailbox existence (SMTP)
Connects to the mail server and asks whether the specific mailbox exists — via an SMTP handshake that stops short of delivering anything. This is what separates a real address from a dead guess.
Catch-all resolution
On catch-all domains that accept every address, standard checks report all your guesses as valid. Enrichley resolves individual mailboxes on catch-all domains so you still find the one address that's real.
Why you can't skip verification
Email a batch of unverified guesses and most will hard-bounce. Bounce rates above 2% flag you as a spammer to Gmail and Outlook, and a single spam-trap hit can blacklist your domain. Verifying first turns a reckless blast into one clean send.
Verify Your Found Addresses with Enrichley
- Confirms which candidate address actually exists
- 98% accuracy, including on catch-all domains
- Bulk CSV upload or real-time API — 1 credit per check
- Plans from $59/mo for 5,000 credits
Finding Email by Name at Scale
The manual method is fine for one or two contacts. For a whole prospect list, doing it by hand is slow and error-prone — this is where a finder earns its keep by collapsing "find the domain, guess the format, verify the result" into a single pass.
Start from a name
People Search covers 500M+ professionals and filters in real time by title, seniority, department, and company — so you can narrow to the exact people you need, each returned with a verified work email.
Pay only for valid emails
The Email Finder charges 3 credits per valid email — not-found, skipped, and errored lookups cost nothing. Every result is verified before it reaches you, catch-all included.
Weighing the manual route against dedicated software? Our roundup of the best email finder tools compares the options on price, credits, and — the part that actually decides deliverability — whether they return verified rather than guessed emails.
Frequently Asked Questions
How do you find a business email address by name?
Can you find someone's email address for free?
How do you find someone's work email?
Is it legal to find someone's business email?
How accurate is guessing an email from a name?
What's the difference between an email finder and an email permutator?
Find the Name, Get the Verified Email
Skip the manual guessing. Search 500M+ professionals with People Search, then let the Email Finder return only addresses it has verified deliverable — you pay solely for the emails that check out.