How-to Guide
Find Someone by Email — Free Methods That Actually Work in 2026
You have an email address but no name, role, company, or context. You want to know who you're about to email, or who emailed you, or who left this address on a contact form three months ago. Here are eight methods — from free hacks to professional databases — that work today.
Use them in order. Most addresses surrender to the first three.
1. Decode the email pattern
jane.doe@acme.com obviously means Jane Doe at Acme. Patterns like jdoe@, j.doe@, and jane@ are almost as easy. Combine the decoded username with a LinkedIn search on the company name. Eight times out of ten you'll have the right person inside thirty seconds.
2. Google with operators
Search the full email in quotes: "jane.doe@acme.com". Add site:linkedin.com, site:github.com, site:twitter.com, or site:medium.com to narrow. Many people publish their address on personal sites, conference bios, GitHub READMEs, and CVs.
Power operator combos that work well: "jane.doe@" "Acme", "jane.doe@*.com" intitle:resume, and inurl:contact "jane.doe@".
3. Social search by email
LinkedIn, Facebook, and X all let you import contacts by email. Tools like HuntMeLeads' reverse-email lookup do this for you across networks in seconds, returning a unified profile rather than five separate tabs to reconcile.
4. Breach-check sites (HaveIBeenPwned)
HaveIBeenPwned tells you which services the email is registered with. That confirms identity (a SaaS founder email registered on Stripe, AWS, and GitHub is almost certainly the real founder) and rules out fakes (an email with zero breaches and zero registered services is often a recently-created throwaway).
5. A purpose-built B2B contact database
For business addresses, HuntMeLeads matches the email to a full profile in milliseconds: name, role, company, LinkedIn URL, phone, tenure, and recent activity. Free to try, instant results, no card required. This is the fastest path when you're doing more than one or two lookups.
6. WHOIS lookup for custom-domain emails
If the email is on a custom domain (@acme.com rather than @gmail.com), WHOIS records often list the registrant's name, organization, country, and sometimes phone. Many small businesses haven't enabled WHOIS privacy. Use whois.com or icann.org/lookup.
7. Gravatar and avatar reverse-image
Many email addresses have a public Gravatar profile (commonly used by WordPress and GitHub). Visit en.gravatar.com/[md5-hash-of-email]. Or take the avatar from any of the above sources and reverse-image-search it on Google Lens to find every other public profile the same photo appears on.
8. Public mailing lists and forum archives
Open-source mailing lists, Stack Overflow profiles, Hacker News submissions, and Reddit comments often expose the email-to-person mapping for technical contacts. Search "[email]" site:groups.google.com or "[email]" site:lists.freebsd.org.
Combine signals before you act
No single method is right 100% of the time. The discipline that separates good researchers from sloppy ones is requiring at least two independent signals before treating a match as confirmed. Email pattern + LinkedIn match = confirmed. Reverse-lookup hit + Gravatar photo match = confirmed. One signal alone = a hypothesis to verify.
When you should give up
If you've tried the first five methods and have nothing, the address is probably (a) a personal Gmail belonging to a private individual, (b) a role address like info@ or hello@ that maps to many people, or (c) a defunct mailbox. Move on — there's no upside in spending an hour on a low-confidence guess.
Frequently asked questions
Can I find someone's full name from just an email?
Often yes. Patterns like first.last@company.com reveal the name directly. For others, reverse-lookup tools, Google operators, and social search will surface it for most business addresses.
What's the most accurate free method?
A combined approach: paste the email into Google in quotes, then search LinkedIn for the same string, then run it through a reverse-lookup tool. Three signals beat one.
Are reverse-email tools accurate?
For business emails on registered domains, accuracy is high (often 80%+). For personal emails (Gmail, Outlook, Yahoo) accuracy drops sharply because there's no public business directory tying them to a person.
Why can't I find someone with a Gmail address?
Gmail addresses aren't tied to a domain that anyone owns publicly. Unless the person voluntarily linked their Gmail to a profile (Twitter bio, personal site), there's no public mapping to follow.
How long does reverse-email lookup take?
Milliseconds for a database lookup. Several minutes if you're doing it manually with Google + LinkedIn + HaveIBeenPwned. Bulk lookups of 1,000+ addresses run in under a minute on HuntMeLeads.