LinkedIn outreach

How to find an email address from a LinkedIn profile

By Asen Levov, co-founder of Sellinger. Reviewed by Viktorio Shopov. Published . Last updated . 7 minute read.

A LinkedIn profile rarely shows an email. LinkedIn shows a member's contact info only to first degree connections, and only if the member added it. The usual routes are the contact info box, the company website, a pattern guess checked with a verifier, a contact database lookup, or simply asking in a LinkedIn message. Check every address before you send.

This is a how to for sales and recruiting teams who found the right person on LinkedIn and now want to continue by email. It covers five methods in order of effort, the checks that keep your bounce rate low, and the point at which you should stop hunting and write on LinkedIn instead.

Why does LinkedIn hide the email?

Because the member decides. LinkedIn's help centre says that by default the primary email address a member registered is visible only to their first degree connections, and the member can change that under Settings and Privacy. The contact info section works the same way: what a member typed there is shown to first degree connections, not to the world. If a person never added an address, no amount of clicking will reveal it.

That is why a profile alone is a weak source. The five methods below work around the gap, each with a different cost and a different failure mode.

Table
1. Contact info boxFreeWorks only for connections who shared an addressOften personal addresses, not work
2. Company websiteFreeRole addresses such as info@ or a team pageNot the person you want
3. Pattern guess plus verifierLowA likely address for the personCatch all domains cannot be verified
4. Contact database lookupPer lookupA verified work address when the person is in the databaseGaps for small firms and new roles
5. Ask on LinkedInFreeAn address the person chose to giveSlower, needs a reply

Method 1: the contact info box

Open the profile and click Contact info. LinkedIn's help page on viewing a connection's details explains that you see what the connection chose to share. For a first degree connection who added a work address, this is the best source you can have, because the person put it there on purpose.

Two cautions. Many people add a personal address, and you would be writing to a private inbox about a business topic. Also, for a person you are not connected to, the box shows little. The connection request comes first, which is the natural order anyway: connect, talk, then move to email. Our post on the LinkedIn then email cadence shows how the two channels hand over to each other.

Method 2: the company website

Read the company site for a team page, a press page, a blog author box or a conference speaker line. Many firms print the email pattern in their own materials, for example in a press contact, which tells you how everyone's address is built. A role address such as sales@ or info@ is rarely the person you want, and replies from it often go to a shared inbox. Use it to learn the pattern, not as the destination.

Method 3: guess the pattern and verify it

Most companies use one of a few patterns: first name, first name dot last name, first initial plus last name, and so on. A finder tool or a spreadsheet builds the likely candidates for a name and a domain, then tests each one against the mail server to ask whether the mailbox exists, without sending a message.

The weak point is the catch all domain, a mail server that accepts every address. On such a domain, every guess looks valid, even those that reach nobody, so a verifier can only return unknown or risky. We cover how this works, and how to read the labels, in email finder tools: how they work. Treat unverified guesses as risky and keep them out of your main campaign until you have tested a small batch.

Method 4: a contact database lookup

If you do this often, a database lookup is faster than guessing. Sellinger includes a database of 700M+ contacts. You search by job title, location, company and more, check the search cost, and choose what to reveal on import: profile details, a verified email address or a mobile phone. Contact details are charged only when they are found, and lookups start from $0.01. The steps are on the help page for finding leads in the contact database.

A database is not magic. Small firms, new roles and people who changed jobs last month are the gaps. We do not publish an accuracy percentage for the database, because we have not measured one in a labelled test, and a vendor number is only as good as the way it is counted. Verify, send a small first batch, and read the bounces.

Method 5: ask, on LinkedIn

The simplest method is the one people skip. Once someone has replied on LinkedIn, ask: "Would you rather continue here or by email? Happy to send the details to the address you prefer." You get an address the person chose, you avoid guessing and you start a thread they expect. The Shelly installer programme reached 3,940 installers by email, and its result shows what a thread on the right channel can do: 360 replied and 225 answered the survey. See the case study for how the questions were asked.

How do you check an address before sending?

Do these in order, and stop at the first failure.

  1. Syntax and domain. The domain must exist and have mail servers.
  2. Mailbox check. Run a verifier. Mark catch all results as unverified.
  3. Role and personal addresses. Drop role addresses such as info@ for personal outreach, and think twice about free webmail for a business pitch.
  4. Small first batch. Send to 50 and count bounces before sending to 500. Instantly's 2026 benchmark report advises keeping bounce rates below 2% and cleaning the list if they rise.
  5. Keep a suppression list. Anyone who opts out stays out, whichever method found them.

Is it allowed to email someone you found on LinkedIn?

Finding an address is a separate question from being allowed to use it. The rules depend on where the recipient is, and they differ sharply: the US lets you send B2B cold email if you follow its rules, while parts of Europe ask for consent. Our guide to whether cold email is legal compares CAN-SPAM, GDPR, UK rules and Canada's CASL in plain English. Read it, speak to a lawyer for the markets you target, and keep the address source in your records, because a recipient who asks "where did you get my address?" is owed an honest answer. Nothing here is legal advice.

A short workflow

  1. Qualify the person on LinkedIn first. Do not collect addresses for people you would not write to.
  2. Connect, and check the contact info box.
  3. If nothing is there, try the database or the pattern method.
  4. Verify, label catch all results, and send a small batch.
  5. Continue on LinkedIn for anyone without a verified address.

The best outbound does not treat email as a replacement for LinkedIn. It treats each channel as a place where the next step is easiest. An address you cannot verify is a reason to write on LinkedIn, not a reason to take a risk with your sending domain.

Common questions

Can I see anyone's email on LinkedIn?
No. LinkedIn says that by default the primary email address a member registered is visible only to their first degree connections, and a member can narrow or widen that. If the member never added an address to the contact info section, there is nothing to see.
Is guessing an email address from a name allowed?
Guessing is a technical method, not a legal permission. Whether you may email a person is decided by the law where they are and by how you got the address. Read our plain English guide on cold email law, then decide.
How do I know an address is real before I send?
Run it through an email verifier, and treat results from catch all domains as unverified, because those servers accept every address. Send the first batch in small numbers and watch the bounces.
What is a safe bounce rate?
Instantly's 2026 benchmark report advises keeping bounce rates below 2%, and pausing a campaign to clean the list if they rise.
Do I need an email at all if I am already connected on LinkedIn?
Not always. A connected person can be messaged in LinkedIn. Email is the next step when they do not reply there or when the topic suits a longer message.

How Sellinger helps

Sources

See it on your own accounts

Start with a 30 day free trial, no card. Nothing is sent without your approval unless you turn that on.

Unit4ShellyRocket.ChatGetAcceptPeopleForce

Teams that have used Sellinger

Start free trial