How to Find Anyone's Email Address for Cold Outreach (Free Methods)

# How to Find Anyone's Email Address for Cold Outreach (Free Methods)

The #1 excuse for not doing cold outreach: "I can't find their email address."

Here's the thing — finding a B2B email address is easier than you think. You don't need a $99/month database. With these free methods, you can find most decision-makers' emails in under two minutes.

Method 1: Email Pattern Guessing + Verification

Most companies use a predictable email format. The three most common:

• first@company.com
• first.last@company.com
• firstl@company.com

Find one email from the company (their press page, a blog author, or a job posting), then test the pattern. Verify with a free email checker like Hunter's free tier or MailTester. If the bounce rate says "risky," try the next pattern.

Method 2: The Site Search Trick

Google this:

• site:company.com "@company.com"
• site:company.com "email" "CEO"
• site:company.com mailto:

This surfaces publicly listed emails — press contacts, support addresses, founder emails in blog posts. A support@ or hello@ address is a fine starting point: reply to it and ask for the right person.

Method 3: Company Contact Pages & Job Posts

Go to company.com/contact or /about. Founders of early-stage startups almost always list a personal email or a direct contact form.

Job descriptions are gold: "Email your resume to jane@company.com" reveals the format instantly.

Method 4: LinkedIn (Without Premium)

• LinkedIn → find the person → check their "Contact info" section (sometimes public)
• Look at their recent posts — many founders put their email in the comments or profile
• Their company's LinkedIn "Employees" page often shows emails in bios

Method 5: The Twitter/X Bio

Go to x.com/company, click their profile, check the bio. A surprising number of founders and sales leaders put their direct email right there.

Method 6: GitHub & ProductHunt

• GitHub: go to company's repo, click any contributor, check their profile email
• ProductHunt: check the maker's profile — many list a direct email

Method 7: The Support Email Move

When all else fails, email support@ or hello@ with a specific, low-friction question. Companies route these to the right person fast. It's not a "cold email" in the classic sense — but it starts the conversation.

What to Do Once You Have the Email

Now you have the email. The hard part is the message. This is exactly what ColdCrow is for: describe the prospect in one line, get a personalized cold email with a deliverability score in seconds. No signup required — try it free.