Get your first customers

How do I find someone's email address when it isn't public?

The short answer

Start with the obvious: their site, LinkedIn contact info, or a plain guess at the company's email pattern (first@, first.last@), then verify before sending so you don't burn deliverability on bounces. Email-finder tools help, but treat their output as a guess, not a fact, and always run it through a verifier. As a starting point, if you can only find a generic info@ address, a warm reply on LinkedIn or a real intro usually beats guessing an inbox that may not exist.

Go deeper, your way

19 hand-picked resources, 18 link-checked. Pick how you want to dig in.

▶️ Video
✓ Link checked Free Beginner

Why we picked it Michael Seibel runs YC and has read thousands of these, so this is the receiving end talking back: what actually makes an investor open, read, and reply. It is a short, direct talk that pairs well with the written pieces if you would rather hear the reasoning than read it. Useful precisely because it comes from the person you are trying not to annoy.

How To Cold Email Investors

On Y Combinator (YouTube) by Michael Seibel 6 min watch

  • Investors decide in seconds, so the first line has to earn the next one; front-load what is interesting about you.
  • A cold email that respects the reader's time reads as competent, and competence is what removes the desperate tone.
  • You are opening a relationship, not closing a round, so ask for a short conversation rather than a check.
Watch on YouTube youtube.com
▶️ Video
✓ Link checked Free Intermediate

Why we picked it Addresses a practical downstream risk in our answer: guessing wrong or being too aggressive with unverified addresses tanks your reply rate and your deliverability together. Steli walks through a specific template that still gets replies from cold, imperfectly sourced contacts.

No Replies? Increase response rates using THIS cold email template

On Close by Steli Efti about 10 minutes

  • A high send volume with a low reply rate signals your addresses, your messaging, or both are off.
  • One well targeted follow up beats three generic ones.
  • Reply rate, not open rate, is the metric that tells you whether outreach is actually working.
Watch on YouTube youtube.com
🎧 Podcast
✓ Link checked India Free Intermediate

Why we picked it An Indian founder story where the early demand test was manual, cold emails and direct outreach to find the first customers before the product had proven itself. It is a grounded counterpoint to the landing page: sometimes the fastest way to measure intent in a B2B market is to ask people to commit directly. Useful if your buyers are enterprises who will never fill in a consumer style waitlist form.

How Khadim Batti Built Whatfix Into a Global SaaS Leader

On Prime Venture Partners Podcast by Prime Venture Partners ~50 min

  • In B2B, direct outreach can measure intent faster than a public page
  • A first paying customer is the strongest demand signal there is
  • Early traction in India often comes from manual hustle, not viral pages
Open primevp.in
🎧 Podcast
✓ Link checked Free Intermediate

Why we picked it A grounded conversation about when cold email is even worth the effort of finding an address for. Steli's rule of thumb is deal size, not whim, which is a useful gut check before you spend twenty minutes hunting down one person's inbox.

Episode 202: Outbound Sales for Startups with Guest Steli Efti

On Startups For the Rest of Us by Steli Efti about 35 minutes

  • Cold email is most worth the effort for higher value deals, not every small ask.
  • Track your rejection rate, not just your close rate, to know if your process is working.
  • Build a short list of common objections and answers before you start reaching out at volume.
Open startupsfortherestofus.com
📄 Article
✓ Link checked Free Beginner

Why we picked it Written by the team behind one of the most used email finder tools, so it walks through the same order of operations our answer recommends: check the site and LinkedIn first, guess the company's pattern, then verify before you send. It states plainly that a large share of guessed addresses turn out wrong, which is exactly why the verification step matters.

10 Ways to Find Anyone's Email Address

From Hunter.io Blog by Ziemek Bućko 10 minute read

  • Check the company website, LinkedIn, and social bios before you start guessing.
  • Most companies use one of a handful of predictable patterns like first@ or first.last@, so guessing is a reasonable first move once you know the domain.
  • Never send to a guessed or found address without running it through a verifier first.
Open hunter.io
📄 Article
✓ Link checked Free Beginner

Why we picked it A clear rundown from a company that does outreach at scale for its own work, covering lookup tools, pattern guessing, and newsletter sign ups as a backdoor route to a personal address. It also shows a free way to sanity check a guess yourself before you touch a paid tool.

6 Proven Ways To Find Anyone's Email Address

From Ahrefs Blog by Nick Churick 8 minute read

  • Subscribing to someone's newsletter often reveals the personal address it's sent from.
  • A simple Google search for "@domain.com" surfaces publicly listed addresses tied to a company.
  • Treat any guessed or scraped address as unconfirmed until you've checked it.
Open ahrefs.com
✍️ Essay
✓ Link checked Free Intermediate

Why we picked it Written from the recipient's side of the inbox by someone who gets hundreds of cold emails a week. It makes the case that finding the right address is only half the job: a generic, templated pitch sent to a correct email still gets deleted, so what you say once you've reached someone matters as much as how you found them.

I Just Deleted Your Outreach Email Without Reading. And NO, I Don't Feel Sorry

From Ahrefs Blog by Tim Soulo 12 minute read

  • A correct email address doesn't save a generic, templated pitch.
  • Show you've actually looked at the person's work before asking them for anything.
  • The goal of outreach is a real reply, not just a successful delivery.
Open ahrefs.com
📄 Article
✓ Link checked Free Intermediate

Why we picked it Once you've found or guessed someone's email, this is what to actually put in it, with word for word scripts from a founder who has built and sold sales tools for a living. It's the step right after this question is answered: a good email to a hard won contact is wasted if it reads like spam.

Here are the Scripts for Sales Success: Emails, Calls and Demos That Close Deals

From First Round Review by Peter Kazanjy 15 minute read

  • Keep the first email short enough to read in under 20 seconds.
  • Lead with a specific reason you're writing to this person, not a generic pitch.
  • A weak email undoes the work you put into finding the right inbox.
Open review.firstround.com
📖 Book
✓ Link checked Freemium Intermediate

Why we picked it The authoritative handbook on founder-led sales, written for technical/first-time sellers building B2B SaaS. Readable free online via membership, and covers the whole motion end to end.

Founding Sales: The Early Stage Go-to-Market Handbook

From foundingsales.com by Peter Kazanjy book (~400 pages)

  • Do ~50 demos and hit a ~20%+ win rate before hiring your first sales rep.
  • Discovery before demo, understand the problem before you pitch.
  • Dedicated chapters on prospect outreach and demo appointment setting.
  • Turn founder selling into a documented, repeatable, transferable process.
Open foundingsales.com
📄 Article
✓ Link checked Free Intermediate

Why we picked it When your first ten will come from cold outreach, this guide gives you the full mechanics: building a target list, qualifying, writing the email, and running follow-ups without being annoying. It is the operational counterpart to the Lenny and YC pieces, showing the actual day-to-day of prospecting. Work through it as a checklist for your outbound.

The Ultimate Startup Guide to Outbound Sales

From Close by Steli Efti Multi-chapter guide

  • Build a tight, specific list of the right people before you write anything.
  • Qualify hard so you spend time on prospects who can actually buy.
  • Structured follow-up, not a single email, is where most deals are won.
Open close.com
📖 Book
✓ Link checked Paid Beginner

Why we picked it Ferrazzi's core argument is that the people worth reaching are found through relationships, not databases, so a connector who already has the email beats any lookup tool. It's the book length version of the last line in our answer: a real intro or a generous reply outperforms a guessed inbox, and this is the classic text on building the network that gets you the intro in the first place.

Never Eat Alone

From Keith Ferrazzi by Keith Ferrazzi about 370 pages

  • Building a wide, generous network before you need it means someone already has the email you're chasing.
  • A warm introduction converts far better than a cold, guessed address ever will.
  • Treat every contact as a relationship to maintain, not a lead to extract one email from.
Open keithferrazzi.com
🧵 Thread
✓ Link checked Free Intermediate

Why we picked it A blunt, contrarian counterpoint from working founders and investors: several commenters argue you shouldn't be hunting down a cold email at all, since a warm introduction or visible traction beats a guessed inbox every time. Worth reading precisely because it argues against the premise, which is the same trade off our answer makes explicitly.

How to write cold emails to investors

From Hacker News

  • Several experienced commenters argue a warm introduction beats a cold email sent to a guess.
  • Building visible traction can make investors reach out to you instead of the other way around.
  • Programs like Y Combinator are one way to sidestep cold outreach for fundraising specifically.
Open news.ycombinator.com
🛠️ Tool
✓ Link checked Freemium Beginner

Why we picked it When you have a name and a company but no address, Hunter is the default first stop: type the person and the domain, and it returns the verified email or its best guess with a confidence score. The free tier gives you 50 searches a month with no card, which is plenty when you are reaching out one founder at a time rather than blasting a list. It works off publicly available data and shows its sources, so you are not scraping anyone manually.

Hunter Email Finder

From hunter.io by Hunter

  • Search by first name, last name, and company domain to get a verified professional email or a confidence-scored guess.
  • Free plan covers 50 searches a month with no credit card, enough for targeted one-to-one outreach.
  • Results carry a verification status, so you know whether an address is deliverable before you send.
Open hunter.io
🛠️ Tool
✓ Link checked Freemium Beginner

Why we picked it A straightforward alternative to Hunter that independent tests rate as more accurate on harder to find addresses. Useful as a second opinion when your first tool comes up empty or you want to cross check a guess before sending.

VoilaNorbert

From VoilaNorbert

  • Enter a first name, last name, and company domain to get a best guess address.
  • It runs its own verification pass before returning a result.
  • The first 50 searches are free, enough to test it against a tool you already use.
Open voilanorbert.com
🛠️ Tool
✓ Link checked Free Beginner

Why we picked it This is the plain guess at the company's email pattern from our answer, made mechanical. Feed it a name and domain and it generates every plausible combination instead of you typing them out by hand. Pair its output with a verifier rather than mass sending to every guess it gives you.

Email Permutator

From Mailmeteor

  • Generates every common first and last name email permutation for a given domain in one pass.
  • It's a guessing tool, not a database, so nothing it returns is confirmed to exist.
  • Always run its output through a verifier before you send anything.
Open mailmeteor.com
🛠️ Tool
✓ Link checked Freemium Intermediate

Why we picked it A large contact database that's worth trying when Hunter or VoilaNorbert come back empty, since it draws on a different index of public profiles and records. A good fallback for the person whose company site and LinkedIn contact info genuinely have nothing.

RocketReach

From RocketReach

  • Search by name and company to pull up a profile with an associated email, if one's indexed.
  • Its database is a different source than Hunter's, so it's a useful second lookup when the first tool misses.
  • Treat any result as a guess to verify, not a confirmed address.
Open rocketreach.co
🛠️ Tool
✓ Link checked Freemium Intermediate

Why we picked it When you need to reach the active or influential people in your niche cold, this helps you build a targeted list and find their contact details. The free tier is enough to assemble your first outreach list without spraying. Use it to reach outward once your warm network is tapped.

Apollo.io

From Apollo.io

  • Build a precise list of people to reach cold
  • Find contact details instead of guessing
  • The free tier covers early, low-volume outreach
Open apollo.io
📋 Template
✓ Link checked Free Beginner

Why we picked it Once you have a verified address, these are ready to adapt templates from a CRM built specifically for small sales teams, including an asking for an introduction format built for the exact case where you're not fully sure the address is even the right person. Good for the moment right after this question is answered.

15 Best Cold Email Templates That Actually Get Replies

From Close by Steli Efti 10 minute read

  • Short, plain text emails consistently outperform designed, image heavy ones.
  • The asking for an introduction template is built for cases where you're unsure who the right contact is.
  • Every template ends with a single, specific ask, not a vague let me know.
Open close.com
🛠️ Tool
Freemium Beginner

Why we picked it This is the verification step our answer insists on. Paste in a guessed or found address and it tells you whether the inbox is real before you burn a send on it. Skipping this is exactly how founders quietly damage their domain's deliverability with a stack of bounces.

Email Verifier

From NeverBounce

  • Checks whether an address is deliverable before you send to it, not after.
  • Catches catch all domains that accept any address without confirming a real inbox exists.
  • A run of bad sends can hurt your domain's reputation with every mail provider, so verify first.
Open neverbounce.com

People also ask

Also in D2C

The same ground, over in Launch & get your first customers, our D2C track.

Also in How Founders Use AI

How founders actually use AI for this, over in Sales Prospecting.

Also in GTM

The same ground, over in Build pipeline, our GTM track.

eChai Partner Brands