Google Search Operators to Find Business Emails: 8 Operators and 6 Footprints

This post is the written companion to our video on the same topic. Every footprint from the video is below so you can copy it.

What a search footprint is

A footprint is a pattern that appears on the pages you want and on few pages you don't. Team pages say "our team" or "leadership". Conference sites say "speakers" and "agenda". Association sites say "member directory". Press releases say "media contact". When you search for the footprint instead of the topic, the search engine does the filtering for you.

Compare two searches with the same goal:

marketing director email
intitle:"team" "marketing director" "@*.com"

The first returns articles about marketing directors. The second returns pages whose title says "team" and that name a marketing director.

The operators

Operator	Example	What it does
"..."	"media contact"	Exact phrase
site:	site:example.com	Only this domain (or a kind of domain, like site:.org)
-	-site:example.com	Exclude a word or a site
OR	inurl:team OR inurl:about	Either term (must be capitals)
( )	(inurl:team OR inurl:about)	Group terms
intitle:	intitle:"speakers"	Word in the page title
inurl:	inurl:contact	Word in the page address
filetype:	filetype:pdf	Only that file type (pdf, xlsx, pptx, docx)
*	"head of * at"	Any word, inside a quoted phrase

Two honest caveats.

Not every operator is documented. Google's Refine Google searches help page, read 8 November 2026, documents quotes, site:, minus, filetype:, before: and after:. intitle:, inurl:, OR and * are long-standing and still worked when we wrote this, but Google doesn't promise them, and it has retired operators before. Test a footprint on a domain you know before building a list on it. Bing and DuckDuckGo support most of the same syntax, with differences.

Punctuation is loose. Google ignores most symbols, so @ usually adds nothing, and * is a placeholder for a word, not a true wildcard. They nudge results in the right direction. You still read the pages.

A useful extra: after:2025 keeps results to pages updated recently, which matters for speaker pages and directories that go stale.

The six footprints

Replace example.com, [industry], [city] and [niche] with your own.

1. Every address published on one domain

site:example.com "@example.com"

The workhorse. Pages on the company's own site that mention an address at its own domain: contact pages, careers pages, PDFs. You are not always looking for your person here. You're looking for anyone, because one real address tells you the company's format. The email format finder and our guide to company email patterns take it from there.

2. The domain's addresses on other sites

"@example.com" -site:example.com
"@example.com" "press release" OR "media contact"

This flips footprint 1: the company's addresses on other people's websites. Press coverage, partner pages, event listings, association directories, published papers. Companies often keep staff addresses off their own site while other sites print them. Adding "press release" or "media contact" surfaces named press contacts, who are nearly always in the house format.

3. The people pages

site:example.com (inurl:team OR inurl:about OR inurl:leadership OR intitle:"our team")

Footprint 3 finds who works there, even when no addresses are published. Team, about and leadership pages give you names and titles. Pair a name from here with the format from footprint 1 and you have a candidate address to verify, not a confirmed one.

4. A job title across companies

intitle:"team" "marketing director" "@*.com"
intitle:"our team" "head of sales" "[industry]" "[city]"

Drop the domain and search by role. The first finds team pages that mention a marketing director, with "@*.com" as a nudge towards pages that print an address. The second swaps in your niche and a city, which builds a list of companies, not just people.

5. Documents

site:example.com filetype:pdf "@example.com"
filetype:pdf "[industry] conference" "agenda" "speaker"

PDFs on a company's own site (brochures, reports, price lists), or conference agendas in your niche, which list speakers with titles and companies and sometimes contact details. If a PDF lists addresses, drop it into the free extract emails from PDF tool. It reads the file in your browser, so nothing is uploaded, and shows the page each address appears on, which you'll want for your source column. Spreadsheets and Word files have their own extractors: Excel and Word.

6. Niche lists: directories, speakers, podcasts

"[industry] association" "member directory"
intitle:"speakers" "[industry] summit" 2026
intitle:"episode" "[niche]" podcast "founder of"

This is where lists come from. Trade association member directories, speaker pages for this year's events, podcast episode pages where the guest is a founder. Each gives you companies and named people who are active now. The pattern is the same every time: a footprint phrase, your niche, and a date or place to keep it current.

Read a directory's terms before you use it. Some say the listings are not for marketing. If it says that, respect it and move on; in the US that notice is also what turns automated collection into "harvesting" under CAN-SPAM (see below).

From results to a clean list

1. Pull the addresses out. Paste a page of text into the email extractor. It finds every address once, lowercases it and runs in your browser. For a company's own site, the website email extractor reads the page and up to four linked contact, about or team pages, only where the site's robots.txt allows, and lists the page each address came from.
2. Add a source column. Next to every address, the URL you found it on and the date. That is your record for GDPR notices and complaints, and your reason for writing.
3. Check the list. Hand-found addresses carry typos, old domains and a lot of info@. The list health check reads up to 5,000 rows in your browser and sends only the domain names to our server, never the addresses. It flags duplicates, bad syntax, misspelled and dead domains, disposable and role addresses, and scores the list. It does not check mailboxes.
4. Verify the mailboxes. Check single addresses with the email checker, five a minute with no account, or upload the list on the verify page: the first 100 email checks are free with a Google sign-in, no card. Valid, risky and invalid come back as separate files. Catch-all domains come back risky with a grade, never valid (catch-all scoring).

Role addresses like info@ are real but shared; our guide to role-based email addresses covers when to send to them. For addresses you collected from websites in bulk, read verify scraped emails.

What not to do

1. Don't automate the searches or scrape the results. Google's Terms of Service (effective 30 July 2026) list, under "Don't abuse our services", "using automated means to access content from any of our services in violation of the machine-readable instructions on our web pages (for example, robots.txt files that disallow crawling, training, or other activities)". Typing searches by hand and reading pages like any visitor is what this guide covers.
2. Don't scrape LinkedIn or anything behind a login. LinkedIn's User Agreement prohibits scraping and bots. The legitimate routes are in find an email from a LinkedIn profile.
3. Don't ignore a site's terms or robots rules. That's why our website extractor follows robots.txt.
4. Don't send to everything you found. Relevance and the rules below decide who gets an email.

The rules, briefly

This is not legal advice; if you're unsure, ask a lawyer. The detail, with the regulators' own text, is in is it legal to collect business emails?

• US (CAN-SPAM). There is no exception for business-to-business email. Every message needs honest headers and subject lines, your physical postal address and a working opt-out honoured within 10 business days. Under 15 U.S.C. 7704(b), sending an otherwise unlawful message to addresses harvested by automated means from a site that says it won't share them, or generated by combining names and letters into permutations, is an aggravated violation. See CAN-SPAM for cold email.
• UK. A named work address is personal data under UK GDPR, so you need a lawful basis (often legitimate interests) and must tell people where you got their details. PECR lets you email limited companies without consent, but sole traders and ordinary partnerships need consent or the soft opt-in. See PECR and UK cold email.
• EU. GDPR's collection rules are the same; whether you may email a business unasked depends on the country (France allows it when relevant to the person's job, Germany generally requires consent). See GDPR for B2B cold email.

The footprint library

site:example.com "@example.com"
"@example.com" -site:example.com
"@example.com" "press release" OR "media contact"
site:example.com (inurl:team OR inurl:about OR inurl:leadership OR intitle:"our team")
intitle:"team" "marketing director" "@*.com"
intitle:"our team" "head of sales" "[industry]" "[city]"
site:example.com filetype:pdf "@example.com"
filetype:pdf "[industry] conference" "agenda" "speaker"
"[industry] association" "member directory"
intitle:"speakers" "[industry] summit" 2026
intitle:"episode" "[niche]" podcast "founder of"

What checking costs

All the tools above are free. To verify whole lists every month:

• Starter, $9 a month: 2,500 checks.
• Pro, $39 a month: Unlimited email verification.*
• Business, $99 a month: the first 300,000 checks a month at full speed, 5 seats.
• Agency, $249 a month: the first 750,000 checks a month at full speed, 15 seats, client workspaces.

*Pro fair use: the first 100,000 checks a month at full speed, then slower, never cut off. See pricing.

More reading: how to find someone's business email, how to find a CEO's email, find emails for local businesses, check if an email is valid without sending.