Finding someone's work email is easy. The hard part is finding one you can trust. A guessed address that looks right but bounces does more damage than no address at all, because every bounce tells mailbox providers your list is careless. This guide covers the ways people actually find work emails, how to tell a real one from a plausible one, and how to keep your bounce rate low enough that your emails keep reaching inboxes.
Why a wrong address costs more than a missing one
Gmail, Outlook and Yahoo judge senders on how recipients and their servers react. A hard bounce ("this mailbox does not exist") is one of the clearest signals that a sender is emailing people who never gave them an address. A few bounces won't hurt you. A pattern of them will. Your domain's reputation drops, and then even your good emails start landing in spam.
Since 2024 Google and Yahoo have held bulk senders to published rules: authenticate your domain (SPF, DKIM and DMARC), make unsubscribing easy, and keep spam complaints under 0.3%. Bounces are not on that list, but most sending tools and deliverability teams work to a rule of thumb of keeping hard bounces under about 2% per campaign. Above that, many sending platforms will pause your account.
So the goal is not "find an email for everyone". It is "only send to addresses you have good reason to believe exist".
1. Look where the person has already published it
The most reliable address is one the person put in public themselves. Places worth checking:
- The company's team, contact or press page, and bylines on its blog.
- Press releases, which often name a media contact with a direct address.
- Conference speaker pages, podcast show notes and webinar listings.
- Public code: open-source maintainers often commit with their work address.
- The person's own site, newsletter or social profiles.
This works well for a handful of important contacts. It doesn't scale to a list of 500, and most people in sales, finance or operations never publish an address at all.
2. Work out the company's email pattern
Most companies use one format for everyone. If you know one real address at a company, you can usually predict the rest. The common formats:
first.last@company.com(jane.doe@)first@company.com(jane@), common at smaller companiesflast@company.com(jdoe@)firstl@company.com(janed@)first_last@company.comorlast.first@company.com, less common
A pattern gives you a guess, not an answer. Guesses go wrong in predictable ways:
- Two people with the same name. The second Jane Doe becomes jane.doe2@ or janed@, and your guess reaches the wrong person or nobody.
- Exceptions. Founders and early employees often keep a short address (jane@) after the company moves to first.last@.
- Several domains. Regional offices, acquired companies and rebrands often run on a different domain from the website.
- People who have left. A correct pattern for someone who changed jobs last quarter is still a bounce.
3. Verify before you send
Email verification checks whether a mailbox exists without sending anything. A verifier looks up the domain's mail servers, starts an SMTP conversation and asks whether the server would accept mail for that address, then hangs up before a message is delivered. It's the step that turns a guess into something you can send to.
Know its limits:
- Catch-all domains accept mail for any address, real or not, so a verifier can't tell a real mailbox from a typo. Results come back as "accept-all" or "unknown". Treat those as unverified.
- Verification ages. A mailbox that was valid six months ago may have been closed since. A verification with a date on it is worth more than a bare "valid".
- Never verify by sending a real email and waiting to see whether it bounces. That is exactly the behaviour that damages your reputation.
4. Use an email finder, and check how it charges
Email finders do steps 2 and 3 for you, across a large database, for many people at once. They differ a lot in how honest their results are. Before you pay for one, ask:
- Do I pay for guesses? Some tools charge a credit for every address they return, verified or not. You should pay only for addresses that came back verified.
- Is there a verification date? "Verified" with no date could mean last week or two years ago.
- What happens when a verified address bounces? A good provider gives the credit back and stops returning that address.
- Can I see coverage before I pay? Free searching lets you judge whether the data covers your market.
- Can people opt out? A provider that honours removal requests is one you can defend using under privacy law.
How to find a work email with Leadscart
Leadscart is built around those answers. Searching is free, a verified work email costs 1 credit, and you're charged only when the address comes back with a verification date from our data provider. No address, or an address with no verification date, costs nothing.
- Search for free. Filter people by job title, company, industry, headcount, country and technology. Results show names, titles, companies and LinkedIn profiles, but no addresses.
- Reveal the people worth it. Each reveal that returns a verified email costs 1 credit. Misses are free.
- Or enrich a list you already have. Upload a CSV with a LinkedIn URL column. You see the most it can cost before it runs and pay only for rows that return a verified email.
- Report bounces. If a verified email hard-bounces within 14 days of the reveal, report it and the credit comes back.
You can do all of this in the app, over the REST API, or from an AI assistant over MCP (see how to find leads in Claude). Every new account gets 25 free credits, enough to test coverage for your market. See pricing.
Stay on the right side of the rules
Finding a work address is the start. How you use it is regulated. This isn't legal advice, but the basics apply almost everywhere:
- Email people about something relevant to their job, not a mass blast.
- Say who you are and include a working physical address where the law requires one (CAN-SPAM in the US).
- Include a clear way to stop hearing from you, and honour it quickly.
- In the UK and EU, have a legitimate-interest reason for contacting the person and be ready to say where you got their data.
Checklist
- Prefer addresses the person published themselves.
- Treat a pattern as a guess until it's verified.
- Count catch-all and "unknown" results as unverified.
- Prefer verifications with a recent date.
- Pay only for verified addresses, and get credits back for bounces.
- Keep hard bounces under about 2% per campaign, and stop sending to anything that bounces.