Email Lookup for Recruiters: Find, Check, and Verify Addresses

An email lookup helps you find the right address for a candidate or client contact, or check who sits behind an address you don't recognize. Both come up regularly in recruiting work.

An email lookup connects a person to an address in one of two directions: from a name to an address, or from an address back to a person. Recruiters use it for outreach, and to check a sender before sharing candidate information or acting on a request.

The three kinds of email lookup

Email lookups come in three kinds: forward lookups, reverse lookups, and verification, and each answers a different question.

A forward lookup starts with a name and a company and tries to produce the person's address. Most finder tools take the company's web domain, apply the naming pattern it appears to use (such as first.last), and test the result. The result is an educated guess rather than a confirmed address.

A reverse lookup starts with an address and searches public pages, profiles, and company sites for places it appears. Verification answers a narrower question: will mail sent to an address arrive? It tells you nothing about who reads the inbox.

Forward lookups and verification support outreach, while reverse lookups help when you need to trust a message before acting on it.

Types of email lookup tools and what each one does

Email lookup tools fall into five broad types, and two of them aren't separate products at all. One is the contact data already in your applicant tracking system (ATS) or candidate relationship management (CRM) system. The other is the set of public sources a person controls, such as their own site.

In practice, the types overlap, and some search and CRM products include a finder or a verification check. If you're deciding whether a dedicated finder belongs in your stack, compare it with the sourcing tools you already pay for.

Email lookup by name: check your own records before you use a tool

To look up someone's email by name, start with the most reliable source and work down to the least. Start with your own records, then public sources the person controls, then a finder tool, and verify whatever the tool returns.

Your own records come first because the person gave you that address. Search your ATS, CRM, and inbox by name and by company, since people sometimes apply years before they fit a role you're filling. Update details whenever a past candidate replies to keep your talent pool current.

Public sources the person controls come next. A personal site, portfolio, published paper, speaker page, or company team page may list an address, and publishing it shows a willingness to be contacted there. Use it in the context offered, since a contact address on a research paper suits a relevant role better than one on a personal blog.

A finder tool is the third step, for the many people who never publish an address. Its guess is only as good as the pattern it infers, and mixed formats, rebrands, or multiple domains make guesses less reliable. Before you send, run the guess through the checks for a guessed address, and treat it as unconfirmed until the person replies.

Think about which address you're writing to, as well. Sending a message about another job to a candidate's work address can put them in an awkward spot if their employer monitors company email. A personal address they published may be the better first contact, while the work address suits client contacts. Whichever you use, keep the first message short and specific to the role, as good recruiter outreach messages are.

How a reverse email lookup works and when to use it

A reverse email lookup searches public pages, profiles, and records for an address and returns what's linked to it, such as a name or employer. Three recruiting situations make one worth running:

• A mismatched application: the address doesn't match the name or work history on the resume.
• A client request from a personal account: someone signs as a hiring manager at a client but writes from free webmail.
• A request for information or payment: a message asks you to send candidate details, pay a fee, or change bank details.

An email address lookup can show whether the domain belongs to the company the sender names. It can also show whether the address appears on that company's site or the person's public profiles. It can't prove who is typing, because anyone can open a free account under a real person's name.

Suppose a message from a personal webmail account, signed with a client hiring manager's name, asks for the resumes you've sent over. A lookup might confirm that a manager by that name works there, which says nothing about who wrote the message. The safer step is to call the client's main number or reply to the manager's address on file, and hold the resumes until the manager confirms.

A mismatch on a candidate's application calls for a question, not a conclusion. People apply from old, nickname, or shared family accounts for ordinary reasons, so a short reply asking them to confirm their details can settle it.

How to check an address is deliverable before you send

An address is deliverable when it's correctly formatted, its domain accepts mail, and the specific mailbox is active. Verification tools check those layers in that order, and each one catches a different problem.

The format check catches typos. The domain check confirms the domain has mail exchange (MX) records, meaning a mail server is set up to receive its messages. Some tools then ask that server whether the mailbox exists without sending anything, although not every server answers.

Catch-all domains complicate the mailbox check, because they accept mail for any address at the domain. A guess there will pass or come back as unknown whatever you type, so treat it as unverified.

After you send, watch your bounces. A hard bounce means the address doesn't work, so correct it or remove it from your records. Repeated sends to dead addresses can hurt how mail providers treat your domain.

How to spot scam and impersonation messages

Messages that impersonate recruiters often share a few traits, and federal consumer guidance tells job seekers what to look for. A July 2025 consumer alert from the Federal Trade Commission (FTC) says job scammers often reach out by email or text with a remote job offer. It adds that they sometimes write from a personal account, while recruiters generally email from a corporate one.

The same alert says scammers push for personal information before answering job questions. That can mean a driver's license, Social Security, or bank account number, framed as paperwork for the new job. The alert is guidance rather than data, but it shows what candidates are being told to check.

That guidance also serves as a checklist for your outreach. Write from your work domain and give candidates a way to confirm who you are. Hold back requests for identity or financial numbers until an offer process calls for them, and if you work independently, a business domain makes you easier to verify.

The same checks apply when someone impersonates a client. A personal account, combined with a request for candidate data or payment, is a reason to confirm through a channel you already know.

What rules apply to recruiting email?

In the U.S., the CAN-SPAM Act sets federal rules for commercial email, including business development email an agency sends to prospective clients. The FTC's compliance guide says the law makes no exception for business-to-business email. Writing to a company contact rather than a consumer doesn't change the obligations.

The guide requires accurate header and sender information, honest subject lines, and clear identification of the message as an ad. You also need to provide your physical postal address, explain how to opt out, and honor opt-out requests within 10 business days. If a vendor sends on your behalf, the guide expects you to monitor what that vendor does.

Messages to candidates about a specific job are less clear-cut. The guide classifies a message by its primary purpose, so whether a candidate email is covered depends on what it says. If your outreach mixes job details with promotion of your services, check with counsel, and keep in mind that state laws can add their own rules.

Good records make these rules easier to follow. Note each address's source, such as the candidate, a public page, or a finder guess, along with any opt-in or opt-out. That way, a new lookup won't re-add someone who asked to be left alone. If you buy lists for business development, ask the B2B email list provider the same question about sources.

Collect only the contact details outreach needs, and use lookup results to reach people. Keep background details that could affect a hiring decision in the employer's formal screening process. That process may use background verification software and has its own consent steps, whether the employer is your company or your client.

How to choose an email lookup tool

Choose an email lookup tool based on how it sources and checks its data, since that determines how much you can trust the results. These are the points worth comparing:

• Data source and freshness: ask where addresses come from and how often records are re-checked, since published addresses and pattern guesses differ in reliability.
• Verification method: find out whether the tool checks the mailbox or only the domain, and how it labels catch-all results.
• Accuracy reporting: look for results labeled by status or confidence, and test addresses you already know before you commit.
• Privacy terms and data sourcing: read how the vendor collected its data and how people ask to be removed, because you inherit those choices.
• Integration with your ATS or CRM: check whether results, sources, and opt-outs flow into your records or need copying by hand.
• Opt-out handling: confirm the tool can suppress contacts who opted out, so a new search doesn't bring them back.
• Pricing model: free tiers suit occasional lookups, credits suit uneven volume, and per-seat plans suit daily team outreach.

An agency sending business development emails has more commercial mail to manage, so opt-out handling matters more. An in-house team may care most about ATS fit.

Start with the source before you send

Every email lookup method comes back to where an address came from and what that tells you about using it. Addresses people gave you or published carry their consent, while tools fill the gaps and verification covers what a guess can't confirm. Writing from your work domain and recording each source makes you easier for candidates to trust and makes opt-outs easier to honor. Before your next outreach batch, add a source field to your contact records and fill it in as you go.