You have a phone number. You need an email address. Maybe a prospect left their number on a form, a recruiter called but didn't drop an email, or you're trying to reconnect with a contact who changed jobs. Whatever the reason, figuring out how to find someone's email address by phone number is one of those tasks that sounds simple — until you actually try it.

The truth is, there's no single "type the number, get the email" magic box. Phone numbers and email addresses live in different systems, behind different privacy walls. But there are reliable methods that work — some free, some paid, some better for personal lookups, others built for B2B at scale.

This guide walks you through eight practical approaches, ranked by how well they actually perform. No fluff, no fake success rates — just what works and when to use it.

Why This Is Harder Than It Sounds

Before diving into methods, it helps to understand why this particular search is tricky.

Phone numbers and emails don't naturally link together. When someone signs up for a service, they might provide both — but those records are siloed inside that company's database. There's no universal public registry that maps phone numbers to emails the way a phone book once mapped numbers to names.

Privacy settings have gotten stricter too. Facebook removed phone-number-based search years ago. LinkedIn doesn't let you look up profiles by phone. Google indexes less personal contact information than it used to. The result: you often need a two-step process — first identify the person behind the number (name, company, role), then use that information to find their email.

Keep that two-step framework in mind. It's the backbone of every method below.

Method 1: Google the Phone Number

Start here. It costs nothing and takes 30 seconds.

Put the phone number in quotes in Google: "(555) 123-4567" or "+15551234567". Try both formats — different websites store numbers differently.

What you're hoping for: a company contact page, a LinkedIn profile, a conference speaker bio, or a directory listing that includes both the phone number and an email address on the same page.

Refine with operators:

• "555-123-4567" email — adds the word "email" to narrow results

• "555-123-4567" site:linkedin.com — limits search to LinkedIn

• "John Smith" "company.com" email — useful once you know the person's name

Realistic success rate: Low for personal numbers. Moderate for business numbers that appear on company websites, conference listings, or press releases. Think of this as a quick sanity check before moving to dedicated tools.

Method 2: Reverse Phone Lookup Tools

Reverse phone lookup services search public records, social media profiles, and data aggregator databases to identify who owns a phone number. Some also surface associated email addresses.

Popular options include:

• TrueCaller — crowdsourced caller ID database, strong for mobile numbers worldwide. Free tier shows name and location; email data is limited.

• WhitePages — best for US numbers. Free preview gives name and city; full reports (including email) require a paid subscription.

• Spokeo — aggregates data from public records, social profiles, and marketing databases. Paid reports often include email addresses.

What to expect: These tools excel at identifying the person behind a number — name, location, age, sometimes employer. Email data is hit-or-miss. If the tool surfaces a name and company, you've cleared the biggest hurdle and can use that information with the methods below.

Watch out for: Many reverse lookup sites use aggressive upselling. You'll see a "report found!" teaser that requires payment to view. The paid reports are sometimes useful, sometimes disappointingly thin. Start with the free preview to confirm you've got the right person before paying.

If you're interested in the reverse approach — starting with an email and finding who's behind it — check out our guide to reverse email lookup tools.

Method 3: Search Social Media Profiles

Once you have a phone number, social media platforms can help you connect it to a person — and sometimes directly to their email.

LinkedIn

LinkedIn doesn't support phone number search natively. But if a reverse lookup gave you a name and company, search for that person on LinkedIn. Once you find their profile:

• Check the Contact Info section (visible on connected profiles) for a listed email

• Note their current company and job title — you'll need these for email permutation (Method 5)

LinkedIn is the most reliable source for professional context, even if it doesn't directly show the email.

Facebook

Facebook removed direct phone number search years ago, but you can still try. Some older or less privacy-conscious profiles have phone numbers linked. If you find a matching profile, check the About > Contact and Basic Info section for an email. Success rate: low, but non-zero.

Instagram

Business and creator accounts on Instagram sometimes display an Email button in their profile. Search for the person's name, find their profile, and check for contact options. Personal accounts rarely show email addresses.

X (formerly Twitter)

Check bios and pinned tweets. Some professionals list their email directly in their bio. You can also use X's advanced search to look for posts from a specific user containing "@gmail.com" or their company domain.

The pattern across all platforms: social media is better for confirming identity than for finding emails. Use it to gather the name, company, and role — then take that data to a more targeted method.

Method 4: Email Permutation and Verification

This is the underrated method most guides skip over. Once you know someone's name and company, you can guess their email with surprisingly high accuracy.

Most business emails follow predictable patterns:

• firstname@company.com

• firstname.lastname@company.com

• f.lastname@company.com

• firstnamelastname@company.com

About 80% of small and mid-size companies use one of the first two patterns. Enterprise companies sometimes use employee IDs or initials, but those are the exception.

How to do it:

1. Find the company's domain — usually their website URL minus the "www."

2. Generate permutations — tools like Mailmeteor's Email Permutator or email-format.com list the most common patterns for any domain

3. Verify each guess — use a free email verification tool (NeverBounce, ZeroBounce, or MailTester) to check which permutation is valid

Pro tip: Before generating permutations, check if anyone else at the company has a public email (on press releases, GitHub repos, or support pages). That tells you the company's email format, and you can apply it to your target person.

This method costs nothing and works well for B2B contacts. The main limitation: it doesn't work for personal Gmail or Outlook addresses, only company domains.

Method 5: Use a Data Enrichment Platform

If you're regularly doing this kind of lookup — especially for sales or recruiting — manual methods won't scale. This is where data enrichment services come in.

A data enrichment platform takes a partial contact record (like a phone number or a name + company) and fills in the missing fields — email, job title, LinkedIn URL, company size, and more. If you're not familiar with the concept, here's a primer on what data enrichment is and why it matters for B2B teams.

How enrichment platforms work:

• You input whatever you have — phone number, name, company, LinkedIn URL

• The platform searches across its database (or multiple databases) to find matching contact records

• It returns verified email addresses, phone numbers, and professional details

The best platforms don't rely on a single database. They use a waterfall approach — querying multiple data vendors in sequence until they find a match. Think of it like fishing with multiple nets instead of one. If the first net comes up empty, the next one might catch what the first missed.

This matters because no single data vendor covers everyone. One provider might be strong in the US tech sector, another in European finance, a third in healthcare. By querying them all, waterfall enrichment platforms achieve find rates above 80% — roughly double what any single vendor manages alone.

When evaluating B2B data providers, look for:

• Multiple data sources — more sources means higher coverage

• Email verification — the platform should verify emails before returning them, not just guess

• Pay-per-result pricing — you shouldn't pay for searches that return nothing

• Compliance — GDPR and CCPA compliance is non-negotiable

For teams that need to integrate enrichment into their workflows programmatically, data enrichment APIs let you automate the entire process — feed in phone numbers or partial records, get back verified emails at scale.

Method 6: Check Company Websites and Directories

Sometimes the simplest path is the one people forget: just check where the person works.

Company websites often publish contact information on:

• Team or About pages — especially at smaller companies where individual emails are listed

• Contact pages — may list department emails (sales@, info@) that get you into the right inbox

• Press or media pages — PR contacts are almost always listed with direct email addresses

Industry directories — professional associations, conference speaker lists, and industry databases — often include email addresses alongside phone numbers and bios. If you know someone's industry, search for relevant directories.

GitHub, personal blogs, and portfolio sites — developers, designers, and other technical professionals frequently list their email on personal sites. A quick search for "Jane Smith portfolio" or "Jane Smith GitHub" can surface what you need.

Method 7: Just Ask

You have their phone number. You could — and this is a radical idea — just call or text them.

This works better than most people expect, especially in professional contexts. A brief, honest text often gets a response:

"Hi [Name], this is [Your Name] from [Company]. I'd love to send you some information by email — would you mind sharing your preferred email address?"

When to use this: When you already have a legitimate reason to contact the person (they filled out a form, attended your event, had a prior conversation). Cold-texting strangers asking for their email is a different story — tread carefully there.

When NOT to use this: When you're working with a large list of numbers and need emails in bulk. This doesn't scale. For that, you need Method 5.

Method 8: Try Messaging Apps

Many phone numbers are linked to messaging apps like WhatsApp, Telegram, or Signal. These apps sometimes reveal the person's profile — including their name, photo, and occasionally a linked email.

WhatsApp is particularly useful: save the phone number to your contacts, open WhatsApp, and check if a profile appears. You won't get their email directly, but you'll confirm their identity and can send a message asking for it.

Telegram works similarly. If the person uses Telegram, their username and profile may appear when you search by phone number.

This won't work for everyone — privacy settings vary — but it's a free, fast check that often fills in the identity gap.

Which Method Should You Use?

The right approach depends on your situation. Here's a quick decision framework:

If you need one email for a specific person (personal context):

1. Google the number

2. Check social media

3. Try a reverse phone lookup

4. Ask them directly

If you need a professional/work email:

1. Google the number to identify the person

2. Find them on LinkedIn for name + company

3. Use email permutation + verification

4. Fall back to a data enrichment platform for stubborn cases

If you need emails for dozens or hundreds of phone numbers:

1. Skip manual methods entirely

2. Use a B2B lead enrichment platform that supports bulk processing

3. Prioritize platforms with waterfall enrichment for the highest match rates

Privacy and Legal Considerations

Finding someone's email isn't inherently wrong, but how you use it matters.

Key rules to follow:

• GDPR (Europe): You need legitimate interest to contact someone. You must identify yourself, explain why you're reaching out, and provide a clear opt-out in every message.

• CAN-SPAM (US): Commercial emails must include a physical address and an unsubscribe link. Misleading subject lines are prohibited.

• CCPA (California): Consumers can request that you delete their data. You must honor those requests.

Best practices regardless of jurisdiction:

• Only use publicly available data or data from compliant providers

• Don't scrape private databases or bypass security measures

• Always include an unsubscribe option in outreach emails

• If someone asks you to stop contacting them, stop immediately

• Document where and how you obtained each contact's information

Being thoughtful about privacy isn't just a legal requirement — it's good business. People are more likely to engage with outreach that respects their boundaries.

Making It Work at Scale

If you found this guide because you occasionally need to look up a single contact, the free methods above will serve you well. Google, social media, and email permutation can handle one-off lookups without spending a dime.

But if you're doing this regularly — enriching lead lists, building prospect databases, or filling gaps in your CRM — you'll hit a wall with manual approaches fast. That's where waterfall enrichment platforms earn their keep, querying multiple data sources automatically until they find a verified email, so you don't have to piece it together yourself.

Platforms like FullEnrich take this approach, aggregating 20+ data vendors to achieve find rates above 80% with triple-verified email addresses. You can try it free with 50 credits — no credit card required.

Whatever method you choose, start with the free and simple options, escalate to paid tools only when you need to, and always verify before you hit send.