You can find business contact information through a combination of free public records, company websites, LinkedIn profiles, domain registration lookups, and paid prospecting tools. The right approach depends on whether you need a general company phone number or a specific person’s direct email address. Here’s how to use each method effectively.
Start With the Company’s Own Website
The simplest place to begin is the business’s website. Most companies list at least a general phone number, email address, or contact form. Look for a “Contact Us” or “About Us” page, which often includes department-specific emails (sales@, support@, press@) and sometimes direct lines for key staff. Company leadership pages frequently list names and titles of executives, which you can then use for more targeted searches.
If the business has a blog or press section, bylined articles often include author bios with email addresses or social links. Press releases typically include a media contact with a direct phone number and email, and these contacts are usually responsive even if you’re not a journalist.
Use LinkedIn for Direct Contacts
LinkedIn is one of the most reliable ways to identify specific people at a company and reach out directly. Search for the company name, then filter employees by job title or department to find the right person. Free LinkedIn accounts let you view most profiles and send connection requests with a short note. If you have a Premium or Sales Navigator subscription, you can send InMail messages directly without connecting first.
Even without a paid account, viewing someone’s profile gives you their full name, title, and employer, which is often enough to find their email through other methods.
Search State Business Filings
Every state maintains a searchable database of registered business entities through its Secretary of State office. These filings cover corporations, LLCs, limited partnerships, and nonprofit corporations. You can search by business name or entity number and pull up public records that typically include the registered agent’s name and address, officer and director names, and the business’s principal address.
This is especially useful when you need contact information for a small business that doesn’t have much of a web presence. The registered agent listed in the filing is legally required to accept official correspondence on the company’s behalf, so sending mail to that address is a reliable way to reach the business. Most state databases are free to search online, though ordering copies of certain filings may carry a small fee.
Look Up Domain Registration Records
If you know a company’s website, you can look up who registered the domain through ICANN’s registration data lookup tool at lookup.icann.org. Enter the domain name, and the tool pulls real-time data from registry operators and registrars. Historically, these records (called WHOIS data) included the registrant’s name, organization, email, phone number, and mailing address.
In practice, many domain owners now use privacy services that mask their personal details. If the registration data you need isn’t publicly visible, ICANN offers a Registration Data Request Service for people with a legitimate interest in accessing nonpublic records, though this is primarily intended for law enforcement, intellectual property professionals, and cybersecurity researchers. For general business outreach, this method works best with smaller companies that registered their domains without privacy protection.
Email Finder and Prospecting Tools
When you need professional email addresses at scale, or you want verified direct contact details, dedicated lookup tools can save significant time. These platforms maintain large databases of business contacts and use algorithms to predict and verify email formats.
- Hunter lets you enter a company’s domain name and see the email format used at that organization, along with specific addresses it has found. It includes confidence scores so you know how reliable each result is. Hunter offers a free tier with limited searches and paid plans for higher volume.
- Voila Norbert finds professional emails using just a person’s name and company domain. New accounts get 50 free email finder credits, with paid plans available beyond that.
- RocketReach provides both email addresses and phone numbers, with lookups by name, company, or job title. It also offers a browser extension that surfaces contact details while you browse LinkedIn or company websites.
- Lusha specializes in verified emails and direct-dial phone numbers. Its browser extension pulls contact information directly from LinkedIn profiles and supports one-click exports to CRM systems like Salesforce and HubSpot.
- Snov.io combines email finding with outreach automation, including a seven-tier email verification system to reduce bounce rates. It integrates with LinkedIn through a Chrome extension for real-time discovery.
- ZoomInfo offers the largest database, with over 400 million contacts, and includes job titles, phone numbers, reporting lines, and company data. It’s geared toward sales teams and tends to be the most expensive option, but it provides the deepest data.
Most of these tools offer browser extensions that work alongside LinkedIn, letting you pull up someone’s email or phone number without leaving the page. If you’re only looking for a handful of contacts, the free tiers on Hunter or Voila Norbert are usually sufficient.
Try Google Search Operators
A few targeted Google searches can surface contact details that don’t show up in a basic search. Try combining the person’s name and company with “email” or “contact.” You can also use the site: operator to search within a specific domain. For example, searching site:company.com "email" OR "contact" can surface pages with staff directories or embedded email addresses that aren’t linked from the main navigation.
Searching for the person’s name in quotation marks along with “@companyname.com” sometimes turns up their email address from conference speaker bios, published articles, GitHub profiles, or public documents where it was included.
Check Social Media and Professional Directories
Twitter/X bios and Facebook business pages frequently include direct contact information, especially for smaller businesses. Many professionals also list their email in their Twitter bio or pinned post. Industry-specific directories like Crunchbase (for startups and tech companies), Healthgrades (for medical professionals), or Martindale-Hubbell (for attorneys) often include direct contact details alongside professional profiles.
Local businesses are often listed on Google Business Profiles, Yelp, and the Better Business Bureau directory, all of which typically display phone numbers, addresses, and website links. For B2B contacts, trade association membership directories can be a goldmine, since many associations publish member contact information in searchable online directories.
Rules for Using Business Contact Information
Once you find someone’s business email, you need to follow the law when using it for outreach. In the United States, the CAN-SPAM Act governs commercial email. Every marketing email you send must include your valid physical postal address, a clear way for the recipient to opt out of future emails, and accurate sender information. Subject lines cannot be deceptive, and you must identify the message as an advertisement. When someone opts out, you have 10 business days to stop emailing them. Violations carry penalties of up to $53,088 per email.
If you’re contacting people in the European Union, the General Data Protection Regulation (GDPR) imposes stricter requirements. You generally need a lawful basis for processing someone’s personal data, including their email address. For B2B outreach, many companies rely on “legitimate interest” as their legal basis, but you still need to provide a way for recipients to object and have their data deleted. Keeping records of where you obtained each contact and why you believe your outreach is appropriate helps demonstrate compliance.
The practical takeaway: always include an unsubscribe option, use your real name and business address, and remove people from your list the moment they ask.