How to find a company's email format and verify it before you send

You have a name and a company. You don’t have an email address. So you guess first.last@company.com, hit send, and watch it bounce an hour later.

That guess just cost you a little bit of sender reputation for nothing. The prospect never saw your message, and now your domain has one more hard bounce attached to it. Do this often enough and your real, verified emails start landing in spam too.

This post is my answer to that problem. I’ll show you how to find a company’s email format using a single confirmed address, how to confirm the pattern with a couple of search operators, and how to catch the exceptions that trip up most reps (duplicate names, legacy addresses, catch-all domains). Then I’ll show you how to verify whatever you build before it ever touches a campaign.

Get this right once per account and you stop guessing for good. Get it wrong at scale and you’re cleaning up bounce damage for weeks.

What a company email format is

A company email format is the naming pattern an organization applies to every employee’s address using their name and the company domain. If you know the pattern, you can construct anyone’s address from their first name, last name, and the domain.

Most companies pick one format and use it for everyone. The IT team sets it up once, and every new hire gets an address that follows the same rule. A handful of patterns cover the large majority of B2B addresses.

Exceptions exist. When two people share the same name, the second person usually gets a number appended (jane.doe2@). Long-tenured employees who joined before a rebrand sometimes keep a legacy format. And shared inboxes like sales@ or support@ follow their own logic entirely. But for individual contributors, the pattern is almost always consistent.

The most common company email formats

Most business email addresses follow one of three patterns: first.last@, flast@, or first@. The first.last format is widely seen as the default for mid-size and large companies, while first name only tends to show up in small teams.

Here are the patterns you will run into most often:

If you guess one format blind at a mid-size or large company, first.last is the safest bet. But guessing blind is exactly what we want to avoid. The rest of this article walks you through confirming the pattern before you send.

1. Find one real address at the company

You only need one confirmed address to reverse-engineer the format. Find any one real address at the company, from its website, a press release, or an email signature, and read the format from it. Most companies give everyone the same format, so one published address tells you how to write everyone else’s.

Here is where to look:

• •

  The company’s Contact or About page, where team members sometimes list their direct addresses

• •

  Press releases and newsroom pages, which often include a media contact with a full email

• •

  Author bios on the company blog

• •

  PDF whitepapers, case studies, or job postings hosted on the domain

• •

  Email signatures from past threads in your inbox

• •

  The From field of any email you have already received from someone at that company

One address is enough. If you see that the VP of Marketing is sarah.jones@company.com, you know the format is first.last. Now you can apply it to any name at that domain.

2. Use search operators to confirm the pattern

Before you build a list from a single data point, confirm the pattern with a second or third address. Google search operators make this fast.

Try these queries:

This surfaces pages on the company’s own site that contain email addresses.

This pulls results from any indexed page where someone’s address appears alongside a job title.

This searches PDFs hosted on the domain, like annual reports, speaker bios, or event programs, where addresses often appear unredacted.

If two or three results show the same pattern, you have your answer. If you see conflicting formats, read the next section before applying anything.

3. Check for exceptions before you apply it

A single pattern covers most employees, but there are real exceptions that can trip you up. Ranking pages rarely cover these, so this is where careful reps pull ahead.

Duplicate names. When two Jane Does work at the same company, IT usually appends a number or middle initial. You might see jane.doe2@ or jane.m.doe@. If your target has a common name, verification matters even more.

Regional and subsidiary domains. A global company might use company.com for US staff, company.co.uk for the UK office, and company.de for Germany. The format could be the same across all of them, or each region might run its own mail system. Check which domain your prospect actually sits on.

Rebrands and acquisitions. When Company A acquires Company B, both domains often stay live for months or years. Employees who joined under the old brand may still use the old domain. If you are prospecting into a company that recently merged, search for addresses on both domains.

Executive legacy formats. Founders and C-suite leaders sometimes keep a short vanity address (jane@company.com) even when the rest of the company uses first.last. If you are reaching out to a senior executive, do not assume they follow the standard pattern.

4. Build the address and verify it

Once you have the pattern and the prospect’s name, you can construct the address. But sending to an unverified guess is a gamble. If the address does not exist, you get a hard bounce, and hard bounces damage your sender reputation with mailbox providers.

Run the address through a verification tool before it enters any campaign. Verification checks whether the mail server will accept delivery to that specific mailbox. You will get one of four results:

• •

  Deliverable. The mailbox exists. Safe to send.

• •

  Risky. The address might work, but the tool flagged something: a full mailbox, a disposable domain, or an accept-all server. Proceed with caution.

• •

  Undeliverable. The mailbox does not exist. Remove it. Sending here will cause a hard bounce.

• •

  Unknown. The tool could not get a definitive answer. Treat it like risky.

Remove every undeliverable address immediately. For risky and unknown results, isolate them into a separate sending batch so a spike in bounces does not drag down your main campaign.

Catch-all domains

Some companies configure their mail server to accept email sent to any address on the domain, whether the mailbox exists or not. These servers accept mail for any address at their domain, making it impossible to determine through standard SMTP verification whether a specific mailbox actually exists.

That means your guessed address will pass verification even if no one will ever read it. Catch-all emails are risky because they may accept emails initially but bounce later as delayed bounces, and they often contain spam traps that can get senders blacklisted.

If verification returns a catch-all result, treat the address as risky. Send in small batches, monitor bounce rates closely, and look for a second way to confirm the address, like a LinkedIn message that prompts a reply from their work email.

When to skip the guessing and use enrichment

Pattern guessing works when you are targeting a handful of accounts. You find one address, confirm the format, build a few more, verify them, and send. For five or ten prospects, that is fine.

It breaks at list scale. If you need to reach contacts across dozens of companies, you are not going to manually search for a confirmed address at each one, run operators, check for exceptions, and verify every guess. The math does not work.

This is where lead enrichment takes over. Instead of guessing the format, enrichment tools query data providers that already have verified email addresses on file. You give them a name and a company, and they return a verified address.

Waterfall enrichment goes a step further. It queries several providers in sequence, moving to the next one only if the previous provider did not return a result. This stacks coverage so you end up with a higher find rate than any single provider would give you.

If you are working a named account list of ten companies, pattern guessing is a solid skill. If you are building pipeline at scale, enrichment is the system that replaces guesswork.

Keep guessed emails from hurting deliverability

Every hard bounce tells mailbox providers that you are sending to addresses that do not exist. Enough bounces and your domain reputation drops, which means even your verified emails start landing in spam.

Here is how to protect yourself when working with guessed addresses:

• •

  Verify every address before it enters a campaign. No exceptions.

• •

  Remove every undeliverable result immediately.

• •

  Send risky and unknown addresses in a separate campaign with lower daily volume.

• •

  Watch your bounce rate per campaign. If it climbs above a few percent, pause and clean the list.

If you want a standalone tool for this step, the guide to the best email verification tools covers what to look for.

How to find and verify company emails in lemlist

lemlist gives you a way to skip the manual guessing entirely, or to verify addresses you built yourself.

Start by searching the People database, which includes 650M+ contacts across 65M+ companies. You can filter by job title, industry, company size, and location to find the right person. If you are prospecting on LinkedIn, the Chrome extension lets you add contacts directly from profiles or Sales Navigator searches.

Once you have your contacts, run waterfall enrichment across 14+ providers to find verified email addresses. The system queries each provider in order and stops when it finds a verified result, so you get the highest possible coverage without paying for duplicates.

Every email comes back with a verification status:

• •

  Deliverable

• •

  Risky (accept-all domain, full mailbox, or disposable address)

• •

  Undeliverable

• •

  Unknown

lemlist also has a built-in safety net. You get a bounce rate alert at 10%. If your bounce rate hits 50% after at least 100 leads have been contacted, the campaign pauses automatically. And any lead that bounces is unsubscribed from email steps so you never send to that address again.

For the full walkthrough on finding anyone’s work email, see the guide on how to find someone’s email in B2B.

Final takeaway

Finding a company’s email format comes down to one confirmed address, a quick search to validate the pattern, and verification before you send. For a few key accounts, that manual workflow is reliable. At scale, waterfall enrichment replaces the guesswork and protects your sender reputation at the same time.

Build your first signal-based sequence in lemlist.