Email finder

How it works

1. 1. Work out the company’s pattern

   Every company has a house format — first.last@, first@, flast@ — and candidates are generated from the name against all of them.

2. 2. Ask the mail server, one candidate at a time

   Each candidate gets a real SMTP mailbox check against the domain’s own mail server. Nothing is delivered — the connection names the address, reads the response and closes.

3. 3. Return what was confirmed, and nothing else

   If the server confirms a mailbox, that is your answer. If the domain is catch-all and accepts everything, you are told that rather than handed the most likely pattern dressed up as a result. No confirmation, no answer.

Why it is unlimited here and metered everywhere else

The finder is the same machinery as the verifier: generate candidates, run the SMTP probe that already exists, keep what the server confirms. It uses no paid data provider and no per-lookup API, so a search costs us nothing.

Tools that sell the finder as a separate metered product are pricing a database they licensed, or a margin they chose. Hunter charges $49 a month for roughly 2,000 searches a month drawn from an annual allowance. Here it is included, with no counter, alongside unlimited verification for $29.99.

The honest caveat: results are rate-limited to 45 probes a minute per account, shared with verification, because port 25 connections are the one genuinely scarce resource in this product. A long finder run queues rather than failing.

When a finder cannot help

Worth saying plainly, because most pages like this do not. A finder cannot confirm an address at a catch-all domain, because the server accepts every candidate and there is nothing to distinguish. It cannot find someone whose company uses an unguessable format, or who has no mailbox at that domain at all. And it cannot find personal addresses — this is a tool for business contacts, at company domains.

In those cases you get told so. An unconfirmed guess is worse than nothing, because it goes into a campaign and bounces.

Common questions

How do I find someone's email address?

Take their name and their company's domain, generate the address patterns that company actually uses — first.last@, first@, f.last@ and so on — then test each one with a real SMTP mailbox check and return the one the mail server confirms. That is what an email finder does, and it is why a finder without verification is just guessing.

How accurate are email finders?

Accuracy depends entirely on whether the tool verifies its guesses. A finder that returns the most statistically likely pattern without testing it is right maybe half the time. One that confirms the mailbox with the recipient's own mail server is right whenever it returns an answer at all — and honestly returns nothing when it cannot confirm one.

Is there a free email finder?

Most finders offer a small number of free searches, then meter them as credits — Hunter's entry plan is $49 a month for roughly 2,000 searches. SimpleVerifier includes unlimited finder searches in the $29.99 plan, because the finder is pattern generation plus the same SMTP probe the verifier already runs, so it costs nothing per search.

What is the most common work email format?

first.last@company.com is the most common at larger organisations, followed by first@company.com at smaller ones and flast@company.com in North America. The pattern is set per company though, not per region, which is why testing candidates against the mail server beats assuming a format.

Is using an email finder legal?

Finding a business contact address is generally lawful — the mechanics are a DNS lookup and an SMTP conversation with the company's own mail server, and no message is sent. What you do afterwards is where the rules live: GDPR, CAN-SPAM and PECR govern the outreach, not the lookup. Have a lawful basis for contacting someone and honour opt-outs.