How do I find the right person's email at a company without guessing the address?
Look for an address the company or the person has published: the team, about or contact page, their own site, or a conference or podcast bio. If there is none, do not guess a pattern such as first.last@; wrong guesses bounce and damage the sending domain. Check the domain has an MX record, and prefer a named person to info@ or hello@.
Published by GrowFast. Last updated 2026-11-13. We make GrowFast, so weigh our side accordingly. Markdown version: /solutions/find-decision-maker-email-without-guessing.md.
Why it happens
Address-guessing tools try common patterns and report the ones that do not bounce immediately. Some mail servers accept every address and bounce later, so "did not bounce" does not mean "exists". A wrong guess is either a bounce, which hurts your reputation, or a message to a stranger who owns that address.
Role mailboxes such as info@, hello@ and contact@ are the opposite problem: the address exists but may be unmonitored, shared or filtered. In our own sending they were the weak spot.
The fix that works without GrowFast
- Check the company's own pages. Team, about, contact, press and legal pages. In some countries, such as Germany, legal notice pages name a responsible person and give an address.
- Check the person's own presence. Their personal site, blog or code profile often lists a contact address meant for business.
- Check bios they wrote. Podcast guest pages, conference speaker pages and published interviews sometimes include an address for follow-up.
- Confirm the domain receives mail. Run dig MX company.com +short. No result means there is no mail server and nothing to send to.
- Do not guess. If no named address is published, use the company's contact form or skip the company. A guessed address is not worth the risk.
- Keep the source beside each address. Store the page URL in your sheet. It lets you re-check later; people change jobs and pages change.
- Re-verify old lists. An address that worked a year ago may be gone. Re-check before a new campaign.
| Address type | Example | Risk | Advice |
|---|---|---|---|
| Named person, published by them or their company | jane@company.com on the team page | Lowest | Preferred |
| Role mailbox | info@, hello@, contact@ | Higher: 4 of our 5 bounces in a 160-email week came from hello@ and contact@ (57 sends, 4 bounces, about 7%; the other 103 had 1 bounce) | Avoid, or use a contact form |
| Guessed pattern | first.last@company.com | Highest: bounces, or mail to the wrong person | Never |
| Catch-all domain | Any address accepted | A bounce can arrive later | Treat as unverified |
What an MX check does and does not prove
An MX record shows that the domain has a mail server. It does not show that a particular mailbox exists, because many servers accept all recipients and sort it out afterwards. It removes the dead domains, not every bad address, which is why you still start with a small batch and watch bounces.
When to use GrowFast
In a GrowFast scan each contact address was read from a public page, the page is recorded, and the domain is MX-checked. Service and generic inboxes (info@, support@, noreply, and for autopilot also hello@, hi@ and contact@) are dropped, as are public-sector and school domains. draft_outreach_emails names the founder or owner only if the company's own site names them. GrowFast does not guess addresses.
When it is not the right tool. If a company publishes no address for the person you want, GrowFast has nothing to return and will not invent one. A warm introduction or a different channel is the honest route. An MX check also does not prove a mailbox exists.
Plans and limits are on the pricing page.
Ask your AI assistant
Paste this into an assistant that has the GrowFast MCP server connected. The tools it uses are on the ChatGPT and Claude connectors, which research and draft but cannot send.
Assign to GrowFast: scan mynewsletter.com and, for each of the 5 best-fit companies, show me the contact address, whose it is and the page it was read from. Don't guess any address and don't send anything. Show me what you found so I can approve.
Tools used: scan_domain
FAQ
Are email-guessing tools safe to use?
They reduce hard bounces by testing patterns, but a catch-all server accepts anything and a hit can still belong to someone else. Published addresses are safer, and that is what we use.
Is info@ ever fine?
For a very small company where one person reads it, sometimes. In our own sending, role addresses bounced more than named ones; the sample is small, so treat it as a signal, not a rule.
What do I do when no address is published?
Use the contact form, ask for an introduction, or move on. Do not guess.
Does a valid MX record mean the address works?
No. It means the domain receives mail. The mailbox may still not exist.