Email Tools7 min read·February 5, 2025

Email Permutation: How to Find Anyone's Business Email Address

Learn the professional technique of email permutation for sales outreach and prospecting. Discover the most common business email formats and how to verify them.

What Is Email Permutation?

Email permutation is the practice of generating all likely email address formats for a person at a given company domain, then verifying which format is actually valid. It's a technique widely used in sales prospecting, PR outreach, and recruiting to find professional contact emails when they're not publicly available.

The key insight is that most companies use consistent email naming conventions across their entire organization. Once you know the pattern for one employee, you can apply it to find others.

Common Business Email Naming Conventions

Research across millions of business email addresses shows these are the most common formats:

Most common (accounting for ~75% of business emails):

1. firstname.lastname@company.com (john.smith@acme.com) — ~35%

2. firstnamelastname@company.com (johnsmith@acme.com) — ~20%

3. firstname@company.com (john@acme.com) — ~10%

4. flastname@company.com (jsmith@acme.com) — ~10%

Less common but significant:

5. firstname_lastname@company.com (john_smith@acme.com)

6. f.lastname@company.com (j.smith@acme.com)

7. lastname@company.com (smith@acme.com)

8. lastnamefirstname@company.com (smithjohn@acme.com)

9. lfirstname@company.com (sjohn@acme.com)

10. firstname.l@company.com (john.s@acme.com)

Rare but used:

11. firstname-lastname@company.com

12. firstnamelastinitial@company.com (johns@acme.com)

13. initialsonly@company.com (js@acme.com)

Why Permutation Works

Companies have hundreds or thousands of employees but typically only one email naming convention (occasionally two for acquired companies or subsidiaries). IT departments standardize on one format for simplicity in email system management.

If you can identify the format used by any publicly known employee (often executives whose emails appear in press releases, SEC filings, or LinkedIn), you can apply that format to anyone else at the company.

The Step-by-Step Permutation Process

Step 1: Research the Company Domain

Find the company's primary domain. Check:

  • Their website
  • LinkedIn company page
  • Email signatures in any received correspondence
  • Most companies use their primary domain (acme.com) rather than a subdomain (mail.acme.com) for employee email.

    Step 2: Find a Known Email

    Look for any publicly disclosed email from the company:

  • Press releases often include PR contact emails
  • Conference speaker bios frequently list contact info
  • GitHub profiles for tech companies often show work emails
  • SEC filings (for public companies) may list investor relations emails
  • LinkedIn sometimes shows email addresses directly
  • Step 3: Identify the Pattern

    From the known email, determine the naming convention. If you see jsmith@acme.com, the pattern is likely first-initial + last name.

    Step 4: Generate Permutations

    Use our Email Permutation Generator to automatically create all likely formats for your target contact. Enter the first name, last name, and company domain, and the tool generates every common variant.

    Step 5: Verify the Address

    This is the most important step. Sending to invalid addresses hurts your email reputation. Verify using:

    Free methods:

  • Check LinkedIn for the email
  • Search Google for the person's name + company + email
  • Look for their email in conference speaker listings, GitHub, Twitter bio
  • Use SMTP verification (advanced): telnet to the mail server and use RCPT TO to check if the address exists (most modern servers block this)
  • Paid verification tools:

  • Hunter.io email finder + verifier
  • VoilaNorbert
  • Clearbit Connect
  • Snov.io
  • Apollo.io
  • These services cross-reference billions of email addresses found in public sources and provide confidence scores.

    Using Permutation for Effective Sales Outreach

    Building Prospect Lists

    When you have a list of target companies and names:

    1. Run all names through a permutation generator

    2. Batch verify the generated addresses

    3. Export verified addresses for your CRM or outreach tool

    4. Focus outreach on high-confidence verified addresses

    Prioritizing Your Efforts

    Not all permutation results need to be verified manually. Use these prioritization rules:

  • Companies where you already know the naming convention → Very high confidence
  • Large companies (1000+ employees) → More likely to use common formats
  • Small startups → More variable, worth checking LinkedIn carefully
  • Technical roles → Often have GitHub or public presence with email
  • Cold Email Best Practices

    Once you have verified email addresses, ensure your outreach respects professional and legal boundaries:

  • Personalize genuinely: Reference their company, recent news, or specific role
  • Be clear about who you are and why you're reaching out
  • Include a clear value proposition — what's in it for them?
  • Make it easy to opt out — include unsubscribe options
  • Comply with regulations: CAN-SPAM (US), GDPR (EU), CASL (Canada) have specific requirements for cold email
  • The Legal and Ethical Dimension

    Email permutation for legitimate professional outreach (B2B sales, PR, recruiting) is legal in most jurisdictions when you:

  • Target business email addresses (not personal)
  • Disclose who you are
  • Honor opt-out requests immediately
  • Follow applicable regulations
  • Mass unsolicited email (spam) to harvested addresses is illegal and unethical regardless of technique.

    Tools That Automate the Process

    Our Email Permutation Generator handles Step 4 automatically — generating all common variants for a name + domain combination. For Steps 5 onward, integrate with:

    Hunter.io: Domain search shows verified emails and identified patterns for thousands of companies. Often reveals the naming convention without guesswork.

    Apollo.io: Combines permutation, verification, and a database of 270M+ contacts. Popular for sales teams.

    LinkedIn Sales Navigator: Official LinkedIn tool that often surfaces direct email addresses for premium subscribers.

    RocketReach: Email finder with a focus on individual contact lookup across platforms.

    Common Challenges and Solutions

    Challenge: Company uses multiple formats (acquired subsidiary)

    Solution: Look for any emails from both the target's team and verify separately

    Challenge: Very common names (John Smith) with multiple employees

    Solution: Use middle initial variants; check LinkedIn profile for clues

    Challenge: Company uses initials-only format (jds@company.com for John David Smith)

    Solution: Generate middle-name variants; check LinkedIn for middle name

    Challenge: International names with different Western abbreviation conventions

    Solution: Try multiple first-name variations (full name, common nickname); research LinkedIn profile

    Measuring Success

    Track your permutation accuracy by monitoring:

  • Bounce rate on outreach: Under 5% is excellent, over 10% indicates verification issues
  • Reply rate: Personalized cold outreach averages 1-5%; higher indicates quality targeting
  • Catch-all domains: Some companies accept all email to their domain regardless of validity — verify these differently
  • With the right combination of permutation, verification, and personalization, email permutation is a reliable component of professional outreach strategy.

    #email permutation#email prospecting#sales outreach#email finding

    More Articles