To find a recruiter's email address, Google "[company] email format" — sites like RocketReach and LeadIQ publish the pattern most companies use (usually firstname.lastname@company.com). Apply that pattern to the recruiter's name, then check the address with a free email verifier before sending. If the pattern isn't published or the check fails, send your application as a LinkedIn message instead.
Key takeaways
- Most corporate emails are guessable: companies use one consistent format, and it's usually published online.
- Always verify before sending — a bounced email helps nobody, and repeated bounces hurt your Gmail's reputation.
- An initial isn't enough: "Priya S." can't fill a
firstname.lastname@pattern — find the full name first. - One relevant email beats ten guesses. This is outreach, not spam.
- Or skip all of it: DearRecruiter finds and verifies the recruiter's email automatically when you apply from LinkedIn.
Method 1: Check the job post itself
Obvious but often skipped: many LinkedIn hiring posts include the application email right in the text — "send your CV to careers@…" or the recruiter's own address. Read the full post, including the comments, where recruiters often add the email after posting. LinkedIn job listings, on the other hand, almost never show an email — that's when the methods below earn their keep.
Method 2: The company email-format trick
This is the workhorse. Companies standardize their email addresses, and the format is public knowledge:
- Google
[company] email format. The top results (RocketReach, LeadIQ, SignalHire) show the pattern and how consistently it's used — e.g. "first.last is used by 78% of Acme employees." - Get the recruiter's full name from the job listing's "Meet the hiring team" card or the hiring post's sign-off.
- Build the address. Priya Sharma +
{first}.{last}@acme.com→priya.sharma@acme.com.
| Published pattern | Priya Sharma becomes | Common at |
|---|---|---|
{first}.{last}@ | priya.sharma@acme.com | Most mid-size & large companies |
{first}@ | priya@acme.com | Startups & small teams |
{f}{last}@ | psharma@acme.com | Older enterprises |
{first}.{l}@ | priya.s@acme.com | Companies with many name collisions |
Watch the domain. The email domain isn't always the website you expect — Swiggy uses @swiggy.in, not @swiggy.com. The format sites list the correct domain alongside the pattern.
Method 3: Hunt the pattern on LinkedIn itself
Search LinkedIn Posts for [company] hiring. Recruiters at the same company post hiring calls with their emails all the time — one visible address tells you the company's format, which you can then apply to your recruiter's name. This also works when the format sites have nothing on a smaller company.
Method 4: Verify before you send
Never fire a guessed address blind. Free verifiers (MillionVerifier, Hunter's email verifier, ZeroBounce) ask the company's mail server whether the mailbox exists — without delivering anything. Three outcomes:
- Valid — send with confidence.
- Invalid — don't send; try another pattern or another method.
- Unknown / catch-all — the server accepts everything, so the check proves nothing. The address is still a reasonable bet if the pattern is the company's dominant one.
Why this matters beyond one lost email: every bounce slightly damages your Gmail sender reputation, and a damaged reputation lands your future applications in spam folders.
Method 5: When you only have "Priya S."
LinkedIn often truncates surnames to an initial for out-of-network viewers. You can't fill first.last@ with an initial — priya.s@acme.com only works if that's genuinely the company's format. To recover the full name: check the company's team or about page, Google "Priya S" recruiter Acme, or look at the recruiter's own posts and comments where the full name often appears. No luck? Move to the fallback below.
When nothing works: DM the draft
No verified email is not a dead end. Write the application email anyway, then send it as a LinkedIn message or InMail to the recruiter — same content, different channel. Recruiters read their LinkedIn inboxes precisely because candidates use them. A thoughtful, role-specific message gets replies wherever it lands.
A note on doing this respectfully
Finding a work email for a relevant, personalized application is normal professional outreach — recruiters exist to be contacted about roles. What crosses the line is volume: blasting the same message to every recruiter whose address you can construct. Apply to roles you genuinely fit, personalize every message, and never send to an address you suspect is wrong just to "try it."
Or let DearRecruiter do all five steps for you
When you apply to a LinkedIn job with DearRecruiter, it detects the hiring manager, works out the company's email format, verifies the mailbox, and fills the address in automatically — while drafting a personalized application email from your résumé and the job description. If no reliable address exists, it tells you honestly before anything is sent.
Add DearRecruiter to Chrome — freeFrequently asked questions
How do I find a recruiter's email address for free?
Google the company's email format, apply the pattern to the recruiter's name, and verify with a free checker. It costs nothing and works for most mid-size and large companies.
What's the most common company email format?
firstname.lastname@company.com, by a wide margin. Startups often use just firstname@.
Is it okay to email a recruiter I found this way?
Yes — for a relevant, personalized application. It's how direct applications have always worked. Bulk-blasting is what recruiters (rightly) resent.
What if verification says "unknown"?
The company likely runs a catch-all mail server, which accepts everything and proves nothing. If the pattern is the company's dominant one, the address is still a reasonable bet.