Key takeaways
- →A first name plus a last name is not enough on its own. Add the company domain and the lookup goes from guessing to verified in five seconds.
- →About 84% of B2B companies use one of three email formats: first.last@, first@, or flast@. A pattern detector tells you which one to apply.
- →The fastest workflow is Mailsfinder findEmail with name plus domain. The free tier covers 100 verified lookups a day with no credit card.
- →When the finder returns low confidence, combine a permutator (generate every format) with a verifier (test each one) to catch the live address.
- →Names with accents, non-English scripts, or hyphens need transliteration before lookup. Most servers normalize Müller to mueller and Renée to renee.
- →A browser extension on LinkedIn removes the manual copy-paste step and surfaces a verified address in a single click on the profile page.
Why a first and last name alone almost never works
Type "John Smith email" into Google and you get a wall of LinkedIn profiles and zero verified addresses. The reason is simple: a name is not unique enough to resolve. There are about 47,000 John Smiths on LinkedIn alone. Without a second variable, no database can return the right person.
The second variable that actually works is the company domain. The combination of full name plus domain narrows the universe from millions of possible humans to one person and one inbox. Every method below starts from that pair.
The three things you actually need
To find a verified business email from a name, you need three inputs: the person's first name as it appears on their work account, the person's last name (handling accents and hyphens, covered later), and the company's primary email domain. The domain is not always the same as the website. A company at acme.io might send mail from acme.com or even from a parent brand. Always confirm.
Why the company email pattern is the unlock
Most companies pick one email format on day one and apply it to every hire. Once you know the company uses first.last@, you can construct any employee address with high confidence. A pattern detector reads several verified employee addresses at the same domain and infers the dominant format. From that point, finding any specific person on the team is mechanical.
The honest framing
If you have a name and you have a company, you can find a verified business email in under five seconds with a free tool. The harder problem is making sure the email lands in the inbox and earns a reply, not finding the address itself.
Get the company domain
Speed: 30 seconds. Accuracy: 99% when verified against two sources. Cost: Free.
This is the single most important step and the one most people skip. Every method that follows depends on you having the correct email-sending domain for the target company. Three ways to confirm it in under a minute.
Check their LinkedIn experience section
Open the person's LinkedIn profile and click into the company name under "Experience". On the company's LinkedIn page, the website URL is listed in the About section. That URL is the right starting point, though it is not always the email domain.
Confirm with a website footer or contact page
Visit the company website. Scroll to the footer or open the Contact page. Look for any listed email address (info@, hello@, sales@, support@). The portion after the @ is the email domain. If the website is acme.io but the footer shows hello@acme.com, the email domain is acme.com.
Cross-check with an MX lookup
For full certainty, run an MX record lookup on the domain. A free tool like mxtoolbox.com confirms which mail servers handle the domain (Google Workspace, Microsoft 365, or a custom server). If MX records resolve, the domain accepts email and you have the right target. If they do not resolve, the domain is for hosting only and email lives somewhere else.
Worked example
You want to email "Priya Shah" who works at "Brightline Tech". LinkedIn lists their website as brightlinetech.io. The footer shows hello@brightline.com. MX lookup confirms brightline.com runs on Google Workspace. Your finder query is now: first name "Priya", last name "Shah", domain "brightline.com".
Use Mailsfinder findEmail with name plus domain
Speed: 5 seconds. Accuracy: 95 to 99% on verified targets. Cost: Free for 100 lookups daily.
With a clean first name, last name, and domain, the fastest path is a dedicated email finder. Mailsfinder runs the name against its database, picks the format the company uses, and verifies the resulting address against the live mail server via SMTP. The whole round trip takes under five seconds.
The exact Mailsfinder workflow
- Open app.mailsfinder.com and sign in. The free tier gives 100 verified lookups every day, no credit card required.
- Click "Find Email". Enter the first name, last name, and company domain you confirmed in Step 1.
- Mailsfinder returns the verified address with a confidence score. A green score above 90 means the address passed SMTP verification against the live mail server.
- If the score is between 70 and 90, the address is likely correct but the server is catch-all or partially blocked. Move to Step 3 (permutator plus verifier) to confirm.
- If the score is below 70, the finder is guessing. Move to Step 4 (pattern detection) to ground the next attempt.
Why this works for 99% of cases
Mailsfinder cross-references multiple data sources for each company (LinkedIn, web crawls, public registries, partner exchanges) and only returns an address when SMTP verification confirms the inbox accepts mail. For a name plus a real B2B domain, that is enough to land at the right inbox almost every time.
When the finder is the wrong tool
Three cases where the finder will struggle: very early-stage founders using personal Gmail addresses, freelancers who use a generic catch-all address (hello@theirdomain.com), and small private companies with under five employees. For those edge cases, the next two steps cover the gap.
For a deeper finder-by-finder breakdown, see our guide on how to find someone's email address.
Permutator and verifier combo
Speed: 2 to 3 minutes. Accuracy: 90 to 95% when paired with SMTP verification. Cost: Free.
When the finder returns a soft answer, the permutator-plus-verifier combo grinds through every possible format and confirms which one is real. This is the brute-force backup, and it works in cases where databases are thin.
Generate every possible format
Open the Mailsfinder email permutator. Enter "Priya", "Shah", and "brightline.com". The permutator generates the full list of plausible addresses in one click. Typical output looks like this:
- priya.shah@brightline.com
- priya@brightline.com
- pshah@brightline.com
- shahp@brightline.com
- priya_shah@brightline.com
- p.shah@brightline.com
- priyas@brightline.com
- priya-shah@brightline.com
Verify each candidate in bulk
Paste the candidate list into Mailsfinder's bulk email verifier. The verifier runs SMTP checks against the live mail server for each address and tags the result as valid, invalid, catch-all, or unknown. Usually one address comes back valid and the others come back invalid. That valid one is your answer.
If two or more addresses come back valid, the domain runs a catch-all configuration (every mailbox accepts mail regardless of whether it exists). In that case, drop to Step 4 and let the pattern detector decide.
Why this method survived the AI era
Pattern-matching databases lose ground every year on small companies and new domains. SMTP verification does not. The mail server itself is the source of truth. If it accepts mail at an address, the address exists. The combo of generate-then-verify works as well in 2026 as it did in 2014.
Detect the company email pattern
Speed: 10 seconds. Accuracy: 84% (matches the dominant company format). Cost: Free.
A pattern detector answers a different question. Instead of "what is this person's email?", it asks "what is this company's email format?". Once you know the format, you can build the target address by hand.
How the detector works
The Mailsfinder email pattern detector takes a single input (the company domain) and returns the dominant format in about three seconds. Under the hood it reads several known employee addresses at the domain, infers the format, and reports its confidence. A typical output:
Domain: brightline.com
Dominant pattern: {first}.{last}@brightline.com
Confidence: 94% (based on 18 verified addresses)
Predicted for Priya Shah: priya.shah@brightline.com
The most common B2B formats
Across about 200,000 verified company domains in 2026, the distribution of email formats sits roughly at:
- first.last@ (priya.shah@): about 41% of B2B companies
- first@ (priya@): about 28%, common at startups under 100 employees
- flast@ (pshah@): about 15%, common at enterprise and finance
- firstl@ (priyas@): about 7%
- first_last@ (priya_shah@): about 5%
- Other custom patterns: about 4%
When pattern detection is the only path that works
For small private companies, the finder may not have the specific person in its database, but the pattern detector almost always has the company. Once you know the format, applying it to the target name is mechanical. This is the workhorse method for emailing into very small teams.
Browser extension shortcut on LinkedIn
Speed: 1 click. Accuracy: Same as the finder it connects to. Cost: Free with the Mailsfinder account.
If you do most of your prospecting on LinkedIn, the fastest workflow eliminates the manual copy-paste step. A browser extension reads the name and company directly from the LinkedIn profile and runs the finder in the background. The verified email appears as a small badge on the profile page.
How it works in practice
- Install the Mailsfinder Chrome extension from the Chrome Web Store.
- Sign in with your Mailsfinder account (free tier works).
- Open any LinkedIn profile. The extension reads the name and current company.
- Click the Mailsfinder badge that appears on the profile header. The extension returns the verified address in under three seconds.
- Copy the address directly, or save the lead to a Mailsfinder list for later export.
When to use the extension over the web app
The extension wins when your workflow already lives on LinkedIn. If you build target lists from Sales Navigator searches, the extension shaves 80% of the time per lead. If you work from a spreadsheet of names you already have, the bulk web app or the Mailsfinder API is faster.
Sales Navigator integration
The extension also reads Sales Navigator search results, not just profile pages. You can run a 50-result search, click "find all" once, and walk away with verified addresses for every lead on the page in about 90 seconds.
When the name has special characters or non-English letters
Accents, hyphens, apostrophes, and non-Latin scripts trip up most finders by default. Five rules that handle 95% of edge cases.
1. Strip accents before lookup
Most corporate mail servers normalize accented characters. Müller becomes mueller (German convention) or muller (English convention). Renée becomes renee. Always try both transliterations and verify each. About 80% of European names use the stripped form for the email account.
2. For hyphenated last names, try both
For "Mary-Anne Smith-Jones", verify both mary-anne.smith-jones@ and maryanne.smithjones@. Older mail servers strip hyphens. Newer ones keep them. The pattern detector usually reveals which one the company uses.
3. Chinese, Japanese, Korean names
Check LinkedIn for the romanized form the person uses professionally. Most CJK names appear in pinyin (Chinese), romaji (Japanese), or revised romanization (Korean) on work email. A name shown as 李小明 on LinkedIn is usually xiaoming.li@ or li.xiaoming@ on email.
4. Arabic, Hebrew, and right-to-left scripts
Companies in MENA regions universally use Latin transliteration for email. The transliteration the person uses for their LinkedIn URL or English name field is the form you want. Run that through the finder.
5. Apostrophes and short particles
Names with apostrophes (O'Brien, D'Souza) get the apostrophe stripped on the email side about 95% of the time. Try obrien@ and dsouza@. For Dutch and Belgian particles (van, de, der), most servers drop them entirely (van der Berg becomes berg or vanderberg).
Tool comparison: which method to use when
No single tool handles every case. The right call depends on how much you already know and what budget you have.
| Method | Input needed | Speed | Accuracy | Cost | Best for |
|---|---|---|---|---|---|
| Mailsfinder findEmail | Name plus domain | 5 sec | 95 to 99% | Free (100/day) | Default starting point |
| Permutator plus verifier | Name plus domain | 2 to 3 min | 90 to 95% | Free | Low-confidence cases |
| Pattern detector | Domain only | 10 sec | 84% (format match) | Free | Small private companies |
| Chrome extension on LinkedIn | LinkedIn profile URL | 1 click | Same as finder | Free | LinkedIn-native workflow |
| Hunter.io | Name plus domain | 5 sec | 90 to 95% | $0.025 per lookup | Existing Hunter users |
| Apollo.io | Name plus company | 5 sec | 88 to 93% | $49+ per month | Bundled CRM workflow |
The default stack for most teams: run Mailsfinder findEmail first, fall back to permutator plus verifier when confidence is below 70, and use the pattern detector when the company is so small the finder has no record. The Chrome extension layer is a productivity upgrade once your workflow stabilizes.
Frequently asked questions
Can I find an email with only a first and last name? expand_more
Not reliably without a company. Names alone return too many false positives across millions of profiles. With a name plus a company domain, an email finder like Mailsfinder returns a verified address in under five seconds with about 99% accuracy on most B2B targets.
What is the best free way to find someone's email by name? expand_more
Mailsfinder gives 100 verified lookups daily on the free plan with no credit card. Combine that with the free email pattern detector and email permutator and you cover almost every B2B target without paying. For most founders and solo prospectors, the free tier never runs out.
How do I find an email if the person uses a personal address? expand_more
Personal Gmail and Yahoo addresses are rarely returned by B2B finders, since they sit outside business databases. Try a permutator on common personal patterns (firstname.lastname@gmail.com, firstinitial.lastname@gmail.com) and verify each one. For personal addresses, LinkedIn DMs or X DMs are often a faster path than email.
What if the name has special characters or non-English letters? expand_more
Most corporate mail servers normalize accented characters and non-Latin scripts before generating addresses. Strip the accents (Müller becomes mueller or muller), try both transliteration variants, and verify each result. For Chinese, Japanese, or Korean names, check LinkedIn for the romanized form the person uses professionally and run that through the finder.
Is it legal to find someone's email and send outreach? expand_more
B2B cold email to a business address is legal in the US under CAN-SPAM, in the UK under PECR business exemption, and in the EU under GDPR legitimate interest. You must identify yourself, offer a clear unsubscribe option, and use a real business reason. Avoid sending unsolicited mail to personal addresses, which carries stricter rules under GDPR and most jurisdictions.
How accurate are name-based email finders? expand_more
Top tools like Mailsfinder, Hunter, and Apollo claim 90 to 99% accuracy with built-in SMTP verification. Accuracy is highest on companies with 50 or more employees, where multiple verified addresses ground the pattern. For very small private companies with under ten employees, accuracy drops to about 85%. Always verify before sending at scale.
What is the difference between a finder, a permutator, and a pattern detector? expand_more
An email finder takes a name and a domain and returns one verified address with a confidence score. A permutator generates every possible format from a given name. A pattern detector returns the dominant company-wide email format. Use the finder first, fall back to the pattern detector when the company is small, and use the permutator-plus-verifier combo when no other tool gives a clean answer.
Can I find a CEO or executive email this way? expand_more
Yes. Executives use the same company-wide email pattern as everyone else, so a finder returns the address. Getting a reply is the harder problem. For Fortune 500 executives, expect heavy executive-assistant filtering even after you have the right address. For a deeper executive-outreach playbook, see our guide on how to find a CEO email address.
Do I need a paid plan to find emails by name? expand_more
Not for occasional outreach. Mailsfinder's free tier gives 100 verified lookups daily, which covers most founders and solo prospectors indefinitely. Paid plans only matter when you scale past about 3,000 lookups per month or need API access for automated workflows.
What if the company uses a catch-all email server? expand_more
Catch-all servers accept every address regardless of whether it exists, so SMTP verification cannot confirm the real inbox. In that case, the pattern detector is your best signal. Apply the dominant format to the target name and send. Expect a slightly higher bounce rate, but the right person almost always receives the mail.
Find any business email in 5 seconds
100 free verified lookups daily. No credit card. Built for the workflow you already run.