New Playbook: Cold Email Infrastructure Setup Guide

Read Now arrow_forward
Mailsfinder Mailsfinder
Mailsfinder Mailsfinder
Pricing
Compare
Contact
Log In Start Free Trial
Executive Outreach Guide

How to find a CEO email address in 2026 (5 methods that work)

5 founder-tested methods to find any CEO's verified email, plus the playbook for getting them to actually reply.

By Harsh Shah Published June 21, 2026 14 Min Read

What you will learn

01

Why finding a CEO email is harder than finding any other contact

02

Method 1: Email finder tools (the 5-second path)

03

Method 2: Company website and press release scraping

04

Method 3: LinkedIn Sales Navigator and InMail tactics

05

Method 4: SEC filings (the legitimate path for public CEOs)

06

Method 5: Warm intros through mutual connections

07

How to actually get a CEO to reply (subject line, length, timing)

08

Side-by-side: speed, accuracy, and cost per method

Table of Contents expand_more
lightbulb

Key takeaways

  • Most CEO emails follow the company pattern (first@, first.last@). An email finder tool returns the verified address in under 5 seconds.
  • For public-company CEOs, SEC filings, proxy statements, and investor relations pages are legitimate, free, high-accuracy sources.
  • Finding the address is 10% of the job. Writing an email worth a CEO's 8 seconds of attention is the other 90%.
  • Warm intros from mutual 1st-degree LinkedIn connections still convert 8 to 12 times higher than cold email to the same CEO.
  • Executive assistants triage roughly 60 to 80% of inbound to public-company CEOs. CC the EA when you know their address. It signals respect.
  • Mailsfinder gives 100 free verified lookups daily. For occasional CEO outreach, you never need a paid plan.

Why finding a CEO email is harder than finding any other contact

A VP of Sales has a public profile, a quota, and a job that rewards inbound calls from vendors. A CEO has none of that. Three things make CEO email different from any other B2B contact.

1. Gated communication by design

CEOs do not list contact info publicly because their inbox is a scarce resource. The bigger the company, the more layers of filtering. For Fortune 1000 CEOs, expect an executive assistant, a chief of staff, and a generic press address as the published front door. The real address exists. It is just not on the website.

2. Executive assistant filtering

In one survey of Fortune 500 EAs, roughly 70% reported triaging the CEO inbox daily, deleting or archiving anything that looks templated, automated, or low-context. The EA sees more bad cold emails than anyone in your industry. They flag the patterns in seconds.

3. Spam folder defaults

Even when your email reaches the CEO's mailbox, executive accounts run aggressive spam filtering and link-scanning. A cold email with two tracking pixels, three external links, and a generic intro lands in the promotions tab on a good day and the spam folder on a normal one. Deliverability is a separate problem from finding the address.

The honest framing

Finding a CEO email is a 5-second task. Writing an email worth a CEO's reply is a 30-minute task. Most outreach fails because people invert the ratio.

01

Use an email finder tool

Speed: 5 seconds. Accuracy: 95 to 99% for public-company CEOs, 85 to 90% for private startups. Cost: Free for low volume, then $0.005 to $0.05 per lookup.

This is the default path for a reason. Email finder tools maintain databases of company email patterns (first.last@, first@, flast@) and verify the specific address you ask for against the company's mail server in real time. Two tools cover 90% of cases.

Mailsfinder workflow

  1. Open app.mailsfinder.com and sign in. The free plan gives 100 verified lookups daily, no credit card.
  2. Enter the CEO's full name and the company domain (example: "Jensen Huang" + "nvidia.com").
  3. Mailsfinder returns the verified address with a confidence score. A green score means it passed SMTP verification against the live mail server.
  4. Copy the address. Cross-check it on LinkedIn if the confidence score is below 90.

Hunter workflow (alternative)

  1. Visit hunter.io and use the Email Finder.
  2. Enter first name, last name, and domain.
  3. Hunter returns the address with a confidence percentage. Below 80 means treat as a guess.

Cost reality check

Hunter: $0.025 per lookup on the Starter plan. Mailsfinder: $0.0049 per lookup at scale, and 100 free daily forever. For occasional CEO outreach (say, 10 to 20 emails a week), Mailsfinder's free tier covers you indefinitely.

When email finders fail

Email finders struggle with three CEO profiles: very early-stage founders using personal Gmail addresses, CEOs at companies that use catch-all domains (every address resolves, but only some forward), and CEOs at private companies with under 10 employees whose addresses lack reference signals in the database. For those cases, jump to Method 2 or Method 5.

If you only need pattern detection (not a specific person), try the Mailsfinder email pattern detector. It returns the company's dominant email format in 3 seconds.

02

Company website and press releases

Speed: 10 to 20 minutes per CEO. Accuracy: Variable, often 60 to 75%. Cost: Free.

The CEO email is almost never on the public site. The pattern, however, often is. Three pages worth scanning on every target company.

The press release page

Scroll to the most recent funding announcement, product launch, or earnings press release. The bottom of every press release lists a media contact email. That address (press@, media@, ir@) follows the company's standard pattern. Apply the same pattern to the CEO's name.

Example: if press@stripe.com routes through firstname.lastname@stripe.com (visible in a press kit PDF), the CEO follows the same format.

The investor relations page

For public companies, the IR page is gold. It lists the IR director, often the CFO, sometimes the CEO directly. The contact email pattern is consistent across the executive team. Cross-reference with SEC filings (Method 4) to confirm.

The About / Team page

Startups under Series B often link directly to founder emails or LinkedIn profiles from the team page. Look for the founder's name as a clickable mailto: link in the source code. It is there about 30% of the time on early-stage sites and almost never on companies past 100 employees.

Pro tip

Use Google site search to surface hidden mailto: links across an entire domain. Search: site:companydomain.com "@companydomain.com". Often returns 5 to 15 employee addresses you can pattern-match against the CEO's name.

03

LinkedIn Sales Navigator and InMail

Speed: 5 minutes per CEO. Accuracy: N/A (channel, not address). Cost: $99/month for Sales Navigator.

LinkedIn is sometimes a better channel than email. Most CEOs check LinkedIn between meetings, often more frequently than their personal inbox. Two paths worth running in parallel.

Path A: Send InMail directly

  1. Open Sales Navigator (or LinkedIn Premium). Search the CEO's name and company.
  2. Send an InMail of 50 to 80 words. Lead with the result, then the question.
  3. Sales Navigator InMail has a roughly 18 to 25% reply rate on well-targeted CEO outreach, compared to 1 to 3% for cold email at the same companies.

Path B: Reverse-engineer the email through LinkedIn signals

Many CEOs link a personal website from their LinkedIn bio. Personal sites often have direct email contact. Sales Navigator also surfaces "Posts mentioning you" and recent activity, useful for finding a real, current reference point for your email.

Path C: Multi-channel sequence

The highest-converting CEO outreach in 2026 is multi-channel: a LinkedIn connection request on day 1, a thoughtful comment on their post on day 3, an email (found via Method 1) on day 5. The email lands in an inbox where the CEO already recognizes your name.

For the full multi-channel playbook, see our guide on best email finders for startup founders.

04

SEC filings and proxy statements

Speed: 15 minutes per CEO. Accuracy: 90% for public companies. Cost: Free.

For US-listed companies, the SEC is a legitimate, free, surprisingly underused source. Three filings worth pulling on every public-company CEO target.

10-K annual report

Search EDGAR at sec.gov/edgar/searchedgar/companysearch for the target. The latest 10-K lists executive officers, board members, and (in the back) a legal counsel contact whose address follows the same company pattern. Cross-reference with Method 1 to verify the CEO address.

DEF 14A proxy statement

The annual proxy lists CEO compensation, board governance, and a "Stockholder Communications" section that explains exactly how to contact the CEO or board chair. For most S&P 500 companies, this section lists either a direct executive address or the corporate secretary's email, which forwards to the CEO.

8-K event filings

8-Ks announce material events (acquisitions, exec changes, restatements). They typically include a press contact at the bottom whose address follows the company pattern. Useful when you need fresh context for your email ("I saw your 8-K on the X acquisition").

Why this works

SEC filings are public, legally required, and updated quarterly. The information is more current than any third-party database. For public-company CEO outreach, treat EDGAR as a primary source, not a fallback.

05

Warm intro through mutual connections

Speed: 1 to 5 days. Accuracy: 100% (your contact knows the right address). Cost: Free, but spends social capital.

A warm intro converts 8 to 12 times higher than the best cold email. If you have a 1st-degree LinkedIn connection to the CEO, this is always the play. Three steps.

Step 1: Find the mutual

On the CEO's LinkedIn profile, scroll to "Mutual connections". Identify someone you know well enough to text, not just a stale connection. Quality over quantity: one strong mutual outperforms five weak ones.

Step 2: Make the ask easy

Send the mutual a forwardable email. Two paragraphs: one explaining who you are and what you do, one explaining specifically why you want to meet the CEO and what value you bring. The mutual should be able to forward it verbatim with a one-line endorsement.

Step 3: Make it worth their social capital

An intro request is a withdrawal from your relationship with the mutual. Be specific: "I want to talk to Jane about X because we have Y", not "I would love to connect with Jane". Vague intros get declined.

When you have no mutual

Find someone on the CEO's team you do have a mutual to (VP of Sales, Head of Product). Build a relationship there first. Six months later, that VP becomes your intro path to the CEO. The long game beats the cold spray.

Bonus playbook

How to actually get a CEO to reply

You found the address. Now the harder problem: getting opened, read, and answered. Five rules from 200+ shipped CEO emails.

1. Subject line: 3 to 5 words, lowercase, specific

Good: "question on your Q3 hire". Bad: "Partnership Opportunity with [Company]". CEOs scan inbox in 8 seconds. Lowercase looks personal, not blasted.

2. Open with the result, not the introduction

First sentence is the outcome you bring, not "Hi, I'm Harsh, founder of X". The CEO knows their problem. Lead with the answer.

3. Under 90 words

One phone screen. Anything longer gets archived. If you cannot say it in 90 words, you have not figured out what you want yet.

4. Ask one question. Make it answerable in 10 seconds

Bad: "Can we hop on a call?". Good: "Worth a 15-min intro next Thursday at 2pm PT?". Specific time, specific length, yes-or-no answer.

5. Send Tuesday or Wednesday, 6:45am or 7:15pm local time

CEO inboxes are emptiest before the first meeting and after the last one. Avoid Mondays (triage day) and Fridays (cleanup day). 90% of replies come within 36 hours or never.

Method comparison: speed, accuracy, cost

No single method covers every case. Run the right one based on what you know about the CEO and what budget you have.

Method Speed Accuracy Cost Best for
Email finder (Mailsfinder) 5 sec 95 to 99% Free (100/day) or $0.005 Default starting point
Company site and press 10 to 20 min 60 to 75% Free Pattern detection
LinkedIn (InMail or signal) 5 min N/A (channel) $99/mo Sales Nav High-value targets
SEC filings (EDGAR) 15 min 90% Free Public-company CEOs
Warm intro 1 to 5 days 100% Social capital Highest-value asks

The right stack for most founders: run Method 1 first (free Mailsfinder lookup), Method 3 in parallel (LinkedIn touchpoint), and Method 5 if the CEO is a strategic target (warm intro). Methods 2 and 4 are fallbacks when the finder returns low confidence.

Frequently asked questions

What is the fastest way to find a CEO's email address? expand_more

The fastest way is an email finder tool like Mailsfinder. Enter the CEO's name and company domain, and you get a verified email in under 5 seconds. For private-company CEOs whose details are scarce, combine the finder result with a LinkedIn check and a manual SMTP verification before sending.

Are CEO email addresses public? expand_more

Most CEO business emails are not publicly listed, but they follow the same company-wide pattern as other employees (first@, first.last@, etc.). Email finder tools detect that pattern and verify the specific CEO address against the company mail server.

Can I find the email of a Fortune 500 CEO? expand_more

Yes, but expect heavy gatekeeping. Fortune 500 CEOs have executive assistants who triage all inbound mail. The address itself is findable through Mailsfinder, SEC filings, or proxy statements. Getting a reply is the hard part, not finding the address.

Is it legal to email a CEO without permission? expand_more

Yes, B2B cold email to a CEO is legal in the US under CAN-SPAM and in most jurisdictions provided you (1) identify yourself, (2) offer a clear unsubscribe option, (3) use a real business reason, and (4) email their business address, not a personal one. GDPR allows legitimate-interest B2B outreach in the EU.

How accurate are CEO emails from finder tools? expand_more

Top tools like Mailsfinder claim around 99% accuracy with built-in SMTP verification. For private-company CEOs, accuracy drops to roughly 85% because the database has fewer reference signals. Always verify before sending at scale.

What is the best subject line to email a CEO? expand_more

Short, specific, and curiosity-led works best. 3 to 5 words, lowercase, referencing something only the CEO would care about (a board metric, a competitor move, a hiring decision). Avoid generic openers like "quick question" or "partnership opportunity", they trigger executive assistant filtering.

Should I email the CEO directly or the assistant? expand_more

Email the CEO directly with a copy to the assistant if you know that address. The CEO checks email between meetings and decides in seconds. The assistant filters. Going through the assistant alone often dies in the queue, while CC'ing the assistant signals respect and reduces the chance of being flagged as spam.

How do I find a startup CEO's email? expand_more

Startup CEOs are usually the easiest to find. They use first@domain or first.last@domain, are active on LinkedIn and X, and often list contact info on their personal website. Mailsfinder verifies the address in seconds, and a polite, specific note usually gets a same-day reply.

How long should an email to a CEO be? expand_more

Under 90 words. CEOs read on mobile, between meetings. Anything longer than one phone screen gets archived. Lead with the result, name your context in one line, ask one question, and stop.

Find your next CEO email in 5 seconds

100 free verified lookups daily. No credit card. No paywall on the address you actually need.

Keep reading

More on finding people on LinkedIn