Practical guide
How to find a hiring manager’s email address, and check it before you send
Check the job posting and the company’s own pages for a published address first. If there is none, work out the company’s address format from addresses it publishes, then test your result with a verification or lookup tool. Send one message to one address, and use the posting’s channel if it says so.
Try a free lookup first
Still need the person? The free lookup suggests a likely hiring manager from a Greenhouse, Lever or Ashby job link, with no account. Treat the name as a lead to check, then use this guide to find and verify an address.
1. Confirm the person before you look for the address
An address for the wrong person is worse than no address. Before searching, check that the person plausibly leads the work in the posting: the same team, region, and function, and still at the company. This guide starts after that step. If you have not done it, the guide on finding the hiring manager covers the evidence to check.
Write down the person’s full name as the company spells it, the company’s exact domain, and the posting’s requisition ID. You will need all three, and a missing detail is the usual reason a lookup returns nothing.
2. Start with addresses the company has published
Look in the places a company intentionally gives out contact details. Read the posting itself, including the end, where employers often put a recruiting inbox or a line such as ‘questions about this role’. Then check the company’s careers page, team or leadership pages, press and media pages, and conference or event speaker listings.
An address the posting names is the one to use, because the employer has chosen it for this purpose. A press-contact address belongs to a different job: it is meant for journalists, so do not send an application there.
- The posting or the confirmation email after you applied.
- A careers page that lists a recruiting or candidate-questions inbox.
- A team page that shows a named contact for the function.
- Public documents the person authored, such as a talk or a published article, where a work address appears by choice.
3. Work out the company’s address format from published examples
Most companies use one pattern for staff addresses. If you can find two or three real addresses at the same domain, such as the press contact and a speaker listing, you can see the pattern and apply it to your person’s name. Treat the result as a hypothesis until you check it.
The example below is entirely fictional. The company, domain, and people are invented to show the reasoning, and the domain is not a real one.
Two matching examples are a better basis than one, and a shared inbox like careers@ says nothing about how personal addresses are built. Larger companies sometimes use more than one format, and people with common names may have a number or middle initial added.
| Published address (fictional) | Where it appeared | Pattern it suggests |
|---|---|---|
| priya.nair@lumenfreight.example | Conference speaker page | first.last |
| tom.okafor@lumenfreight.example | Press release contact line | first.last |
| careers@lumenfreight.example | Posting footer | A shared inbox, not a person |
Target: Dana Whitfield, Head of Operations, Lumen Freight Two published examples both read first.last@lumenfreight.example Candidate address: dana.whitfield@lumenfreight.example Status: unverified. Do not send until checked, and do not also try dwhitfield@ or dana@.
4. Check the address before you send
A lookup tool such as Hunter’s Email Finder takes a person’s first and last name and the company or domain, and returns an address based on available public sources, showing those sources with the result. When it has no sources for an address, it labels the address ‘Inferred’ and says it inferred it from public data at the domain level, then checked it with its verifier. It says no email was found when it cannot find a reliable match.
What that tells you is limited. A verification status can suggest an address is deliverable, and the listed sources show where the address came from. Neither shows that the person owns your vacancy, reads that inbox, or wants cold messages. Hunter’s page also says that when it cannot confirm a deliverable address, a stored or accept-all alternative carries more uncertainty than a fully verified match. Treat a result as evidence about the address only.
If the result is inferred rather than sourced, or the tool finds nothing, do not guess further. Move to a channel in the next section.
Sources: Hunter: how Email Finder works.
5. When another channel is the better choice
Use the posting’s instructions first. If it says to apply only through the portal, an extra email can read as ignoring the process. If a recruiter is named, write to the recruiter and ask whether the hiring manager is the right person to contact.
LinkedIn suits cases where you cannot get a verified address, the company is large and addresses are hard to infer, or the person is clearly active there. The comparison of email and InMail covers the trade-offs. In every case, apply through the stated process as well, so the message supplements the application rather than replacing it.
6. What not to do
If an email bounces, stop. Check the spelling and the pattern once, then use another channel. A single clear message to one address is easier to answer than a trail of guesses.
- Do not send the same message to several guessed variants of one name. If one is wrong, you have mailed strangers, and the right one sees duplicates.
- Do not use a personal address you found through a data broker, a social profile, or a leaked list. If the person has not chosen to publish it as a contact, it is not an address you can reasonably use.
- Do not ignore a ‘no unsolicited contact’ line in the posting.
- Do not claim you know the role is open to them if you do not.
- Do not paste an address you could not check into a long mass mailing.
Frequently asked questions
Is it okay to guess a hiring manager’s email address?
Only once, and only after you have a pattern from real published addresses at the same company. A single educated guess that you then check with a verification tool is reasonable. Sending to several variants of the same name is not, because it reaches people who are not your recipient and looks careless. If the check is inconclusive, use LinkedIn or the application channel.
Can I email someone at a company without their permission?
Yes, a short, relevant message to a professional work address is normal in job searching, but it is unsolicited, so keep it brief and specific to one vacancy. Respect any line in the posting that discourages direct contact. Stop if the person asks you to.
What if the email tool says no email was found?
Accept the result and change channel rather than trying harder to force an address. Hunter says no email is returned when there is little public data, the name matches several people, or the mail server could not be checked. A recruiter named in the posting, a LinkedIn message, or the application portal can all reach the right team.
Does a verified email mean the hiring manager will read my message?
No. Verification speaks to the address, usually whether mail is likely to be accepted, not to whether the person reads it, owns the vacancy, or welcomes outreach. A verified address still needs a message that names the exact role and makes one small request. Treat delivery as the first step, and expect that many messages go unanswered.
Should I use a recruiter’s email instead of the hiring manager’s?
Use the recruiter if the posting names one or asks for questions to go to them. Recruiters usually run the process and can route you, while a hiring manager may prefer not to receive many cold messages. If you have strong evidence about who leads the team and no named recruiter, a short note to the manager is reasonable.