How to Find Someone by Email Address — 9 Methods That Work in 2026

Most business emails follow a predictable pattern: first.last@company.com, flast@company.com, first@company.com. Decode the username, then search LinkedIn for that name at that company. Eight out of ten business addresses identify themselves in thirty seconds with no tools at all.

Search "jane.doe@acme.com" in quotes. Add site:linkedin.com, site:github.com, or site:twitter.com to narrow. Many people publish their address on personal sites, conference bios, GitHub READMEs, public CVs, and Stack Overflow profiles. Free, instant, often complete.

The LinkedIn mobile app lets you import contacts by email through the "People you may know" flow. If the target registered with the email AND didn't disable email discovery, LinkedIn returns a direct profile match. Hit rate: ~70% on business addresses, ~25% on personal Gmail.

Search "jane@acme.com" in:email on github.com/search. Engineers, devtool founders, AI researchers, and most technical contacts have public commits indexed by email. The profile that comes back gives you real name, location, pinned repos, and often a personal site.

Gravatar maps email addresses to avatars and public profiles. Visit en.gravatar.com/[md5-of-email-lowercased]. Most WordPress commenters, GitHub users, and Stack Overflow accounts have a public Gravatar with name, bio, and outbound social links.

Not for the breach data itself — for the list of services the email is registered with. An address showing up on Stripe, AWS, and GitHub is almost certainly the real person at the real role. An address with zero registrations is often a recently-created throwaway.

If the email is on a custom domain (@acme.com rather than @gmail.com), WHOIS often lists the registrant's name, organization, and country. Many small businesses haven't enabled WHOIS privacy. Use whois.com or icann.org/lookup.

HuntMeLeads matches the address to a full profile in milliseconds: name, role, company, LinkedIn URL, phone, recent job changes, photo. Free to try on a handful of addresses; paid plans for bulk uploads of 1,000+. Best option once you're doing more than a handful of lookups a week.

Open-source mailing lists, Stack Overflow, Hacker News, and Reddit often expose the email-to-person mapping for technical contacts. Search "[email]" site:groups.google.com or "[email]" site:news.ycombinator.com as a last free pass before giving up.

One signal is a hypothesis. Two independent signals — LinkedIn match plus matching Gravatar photo, or pattern decode plus breach-registry hit — is a confirmation. Never act on a single low-confidence guess; the cost of being wrong (sending to the wrong person) exceeds the value of being right.

If the first five methods return nothing, the address is most likely (a) a personal Gmail belonging to someone with strict privacy everywhere, (b) a role alias like info@ mapping to many people, or (c) a defunct mailbox. Move on. There's no upside in spending an hour on an address that will never connect.