Check the hiring post first — a surprising number of recruiters put their email straight into it. If it isn't there, work down this list in order: their LinkedIn Contact info section, a free email-finder tool (Hunter, Apollo, RocketReach), or deduce the company's email pattern — usually first.last@company.com — and verify it before you send. If none of that works, the company's careers@ alias or a short LinkedIn note is a perfectly good fallback.
Key takeaways
- Start with the post. It's the highest-hit-rate, zero-effort source — and it means they want to be emailed.
- LinkedIn "Contact info" is the next stop, and it's free.
- Pattern + verify beats guessing.
first.last@is the most common corporate format. - Always verify before sending. Bounces hurt your deliverability and waste the shot.
- Never send to five guesses. One verified address, one good email.
- Work email only. Personal addresses from data-broker sites are off limits.
Why the email is worth the effort
Applying through a portal drops your résumé into a queue with hundreds of others. A direct, relevant email lands in the inbox of the one person who is actually being measured on filling that role. It's the same résumé — it just skips the line.
That's the whole case for finding the address. Everything below is just mechanics. And a warning up front: the goal is one well-researched email to the right person, not a hundred sprayed at guessed addresses. The first gets interviews; the second gets you blocked.
Method 1: Read the hiring post properly
Start here, always. Recruiters posting on LinkedIn, X, or a company careers page frequently write something like "Interested? Send your CV to priya.sharma@acme.com" — and most applicants scroll straight past it to hit Easy Apply.
- Read the full post, including the "…see more" fold where contact details usually hide.
- Check the comments — recruiters often drop the email in a reply when someone asks.
- Check the job description body on the careers page, usually near the bottom.
If you find it here, you're done — and you have an explicit invitation to email, which is the strongest possible position to start from.
Method 2: LinkedIn "Contact info"
On any LinkedIn profile, click Contact info just under the headline. Many recruiters deliberately list a work email there because being reachable is literally their job.
- You'll usually see it if you're a 1st-degree connection — so send a connection request first.
- Some profiles are set to Open Profile, which exposes contact details to everyone.
- Also scan their About section and Featured links — emails often live there instead.
Method 3: Email-finder tools
These search a database of known company emails and infer the rest from the domain's pattern. As a job seeker you'll almost never need a paid plan — free tiers cover a focused search.
| Tool | How it helps | Best for |
|---|---|---|
| Hunter.io | Finds addresses by name + domain, shows the company's dominant pattern, includes a verifier | The best single starting point |
| Apollo.io | Large B2B contact database with a LinkedIn extension | Looking up someone while on their profile |
| RocketReach | Broad coverage across companies and regions | When Hunter comes up empty |
| Clearbit Connect | Gmail add-on that finds addresses without leaving your inbox | Searching as you write |
Free limits and features change often — check the current tier before relying on any of them.
Method 4: Work out the company's email pattern
Almost every company uses one consistent format for all staff. Find any employee's email at that domain and you can construct the recruiter's.
To find a known address, search the web for "@company.com" alongside a press release, a support page, a conference speaker bio, or a GitHub commit. Then map it:
| Pattern | Priya Sharma at acme.com | How common |
|---|---|---|
first.last@ | priya.sharma@acme.com | Most common |
first@ | priya@acme.com | Common at startups |
flast@ | psharma@acme.com | Common at large firms |
firstl@ | priyas@acme.com | Occasional |
first_last@ | priya_sharma@acme.com | Rare |
last.first@ | sharma.priya@acme.com | Rare |
Two cautions. Big companies with common names use tie-breakers (priya.sharma2@), and multinationals sometimes use country domains (@acme.in, @acme.co.uk). Both are reasons to verify rather than assume.
Method 5: Verify before you send
This is the step people skip, and it's the one that matters. A verifier pings the mail server to ask whether the mailbox exists — without sending anything. Hunter, NeverBounce, and most finder tools include one free.
| Result | What it means | Do this |
|---|---|---|
| Valid / Deliverable | The mailbox exists | Send with confidence |
| Risky / Accept-all | The domain accepts everything, so it can't be confirmed | Send, but expect silence; have a fallback |
| Invalid | The mailbox doesn't exist | Don't send — try another pattern |
Never email several guessed variations at once hoping one sticks. The bounces damage your sending reputation, and if two do land, the recruiter sees duplicates and reads you as a mass-mailer.
Method 6: Search the open web
Recruiters publish their addresses in more places than you'd think. Useful searches:
"Priya Sharma" "@acme.com"
site:acme.com "recruiting" OR "talent" email
"acme.com" recruiter email -site:linkedin.com
"Priya Sharma" recruiter contact acme
Also worth a look: their X/Twitter bio, a personal site or Linktree, conference speaker pages, and hiring threads on Reddit or community Slacks where recruiters post openings with contact details.
Method 7: Just ask (the underrated one)
Not everything needs a tool.
- Comment on the hiring post: "This looks like a great fit — what's the best address to send my CV to?" Public, polite, and it often gets a public reply that helps everyone reading.
- Ask a mutual connection for an intro. A warm forward outperforms any cold email you could write.
- Use the alias:
careers@,jobs@, orrecruiting@company.comalmost always exists and is monitored by the talent team.
You found the address. Now write the email.
Finding it is the easy half — the blank page is what stalls people. DearRecruiter reads the hiring post and your résumé and drafts a tailored email in seconds, which you review, tweak, and send from your own Gmail. Free for your first drafts.
Add DearRecruiter to ChromeWhen you genuinely can't find it
Sometimes the address just isn't out there — and that's fine. In order of preference:
- Send a LinkedIn connection request with a note. 300 characters: role, one line of fit, and that you'd love to send your CV.
- Email the
careers@alias with the role and the recruiter's name in the subject so it gets routed. - Apply through the portal, then comment on the post so your name registers with a human.
A good message to a general inbox beats a perfect message to an address that bounces. Don't let the hunt for an email become the reason you never applied.
The etiquette (this part matters)
Finding a work email is normal professional research. Here's the line:
- Work addresses only. Never use a personal Gmail scraped from a data-broker site or a breach dump.
- One person, one email, one role. If you're pasting the same text to twenty recruiters, you're doing the thing this guide is trying to prevent.
- Respect the answer. "Please apply through our portal" means apply through the portal. No means no.
- Follow up once, not five times — see our follow-up guide.
- Never buy contact lists. Bulk-mailing purchased data is spam, and it's what anti-spam law exists to stop.
Recruiters publish their emails because they want relevant candidates to reach them. Be relevant, and you're exactly who that invitation was for.
Frequently asked questions
How do I find a recruiter's email address?
Check the hiring post first — many recruiters include it. If not, try their LinkedIn "Contact info", a free email-finder tool like Hunter or Apollo, or work out the company's email pattern and verify it before sending.
What is the most common company email format?
first.last@company.com is the most common, followed by first@ at startups and flast@ at larger firms. Confirm by finding any known employee's address at that domain.
Is it OK to guess a recruiter's email?
Deducing an address from a known company pattern is fine — but verify it first. Never send to five variations hoping one lands; the bounces hurt you and duplicates look like spam.
How do I verify a recruiter's email before sending?
Use a free verifier (Hunter, NeverBounce, or the one built into most finder tools). It checks whether the mailbox exists without sending anything. "Valid" means send; "risky" or "unknown" means treat it as a guess.
What if I can't find the recruiter's email?
Use the company's careers@ alias or send a short LinkedIn connection request with a note. Both work fine — don't let the search stop you from applying.
Should I email a recruiter's personal email address?
No. Use their work address. Personal addresses found via data brokers are intrusive and will hurt your candidacy more than not reaching out at all.
Are email finder tools free?
Most give you a small number of free lookups per month — plenty for a focused search where you contact a few recruiters a week. You rarely need a paid plan.
Is it legal to find and email a recruiter?
Yes. Emailing someone at their professional address about a role they're hiring for is ordinary one-to-one business correspondence. Scraping or buying bulk lists and mass-mailing them is what crosses the line.
Conclusion
Finding a recruiter's email is rarely hard — it's usually sitting in the hiring post or one click away under "Contact info". When it isn't, an email-finder tool or the company's own address pattern will get you there in about two minutes, and a quick verification keeps you from burning the opportunity on a bounce.
Just remember the address is the means, not the point. The email you send is what actually decides whether you hear back. Once you've got it, write something short, specific, and relevant — or let DearRecruiter draft it from the hiring post and your résumé so you can review and send in seconds.