A reverse email lookup turns an email address into a person. You start with something like j.doe@acme.com and end with a name, a job title, a company, and often a LinkedIn profile. It is the inverse of an email finder, which goes from a name to an address. For a single address, free checks (Google in quotes, LinkedIn, Gravatar) are enough. For volume, a verified tool such as Overloop identifies the owner against a 450M B2B contact database and confirms the mailbox is live in the same step.
Disclosure: I am the CEO of Overloop, an outbound platform with a built-in email finder and verifier. I recommend Overloop where it fits, but this guide covers free methods and competitors too, because the right method depends on how many addresses you are dealing with.
The short version
- Reverse = address in, identity out. The opposite of finding an email from a name.
- Free for one-offs. Google "the@address.com" in quotes, LinkedIn search, and Gravatar cover single checks.
- Tools for scale. Past a few dozen addresses, a database-backed enrichment tool is faster and more accurate.
- Always verify. Confirm the mailbox exists with an SMTP check before you reply. Keep bounces under 2%.
- Catch-alls lie. A sizable share of business domains accept every address, so a "valid" result there means nothing.
What Is a Reverse Email Lookup?
A reverse email lookup is the process of identifying the owner of an email address. You feed in the address and get back what is publicly tied to it: full name, job title, employer, and links to social profiles. Run it well and you also learn whether the mailbox is real, which matters before you spend a reply on it.
It helps to see it next to the thing most people already know. An email finder answers "what is Sarah's address?" A reverse lookup answers "whose address is this, and is it live?" Same plumbing (a contact database, pattern logic, and SMTP verification), run in the opposite direction.
OSINT vs. B2B reverse lookup
The term covers two jobs that pull in different directions. An OSINT reverse lookup wants to identify a person behind an address: where it shows up online, which accounts it registered, what public footprint it leaves. Tools like Epieos and the Google/Gravatar checks below are built for this, and they return signal without confirming the mailbox is live. A B2B reverse lookup wants to enrich a prospect: turn the address into a named, titled, deliverable contact you can sequence. That job needs a contact database plus SMTP verification, which is where a tool like Overloop fits. Same starting point, an email, but one ends in identification and the other ends in a contact record ready for outreach. This guide covers both, and flags which method serves which intent.
When You Actually Need One
Reverse lookups are not a curiosity. They sit inside a handful of jobs that any sales, recruiting, or revops team runs every week:
- Identify an inbound contact. Someone fills a form or replies from an address with no name attached. A reverse lookup tells you who they are before you respond.
- Clean a CRM. Imported lists arrive with bare addresses. Enriching them with names and companies kills duplicates and fills gaps.
- Confirm a forwarded address is real. A teammate hands you a contact. Before you sequence it, you check it exists.
- Vet a lead. A free webmail address (gmail.com, outlook.com) on a "company" signup is a flag worth catching early.
The common thread is data quality. Bad addresses are the most expensive part of outreach: invalid emails are the leading source of hard bounces, and Validity's deliverability research puts the average inbox placement rate around 85%, meaning roughly one in six legitimate emails never reaches the inbox. Sending to addresses you have not checked makes that worse fast.
Got an address but no name?
Overloop reverse-matches an email against a 450M-contact database, returns the owner's name and company, and confirms the mailbox is live, in one step.
Try free →Book a demoFree Reverse Email Lookup Methods
For a single address, you do not need to pay for anything. These four methods cost nothing and work for public-facing contacts.
1. Google the address in quotes
Paste the full address inside quotation marks: "j.doe@acme.com". The quotes force an exact-match search, so Google only returns pages where that literal string appears: directories, conference programs, PDFs, GitHub files, and the occasional leaked spreadsheet. It is the fastest free check and surfaces results for anyone who has ever published their address.
2. Search LinkedIn
Drop the address into the LinkedIn search bar. If the person used that email to register their account, their profile often comes up directly. Even when it does not, the company domain in the address tells you where they work, which narrows a name search to a single org. LinkedIn is the strongest free signal for B2B because the data is self-maintained.
3. Check Gravatar
Gravatar is a globally recognized avatar tied to an email address, used across WordPress, GitHub, Slack, and thousands of other sites. Visit gravatar.com and append the MD5 hash of the address to a profile URL, or use its profile lookup. If the person registered, you get their photo, name, and linked accounts. Developers and anyone in the WordPress orbit are well covered here.
4. Use a free tier
Several B2B tools let you check a handful of addresses for free. Hunter's email verifier includes 25 free verifications per month, and Overloop's email verifier checks individual addresses without a paid plan. Free tiers are perfect for occasional lookups but cap out quickly, which is the natural cue to move to a tool.
Reverse Lookup Tools Compared
Once you are past a few dozen addresses, manual methods stop scaling. Here is how the main options compare on what matters: whether they identify the owner, whether they verify the mailbox, and what they cost to start.
| Method | Identifies owner | Verifies mailbox | Cost to start | Best for |
|---|---|---|---|---|
| Overloop 450M DB · EU storage (Brussels) |
Yes | Yes (built-in SMTP) | $69/mo Starter | Enrich + verify at scale |
| Hunter.io | Partial | Yes | Free: 25/mo | Domain search, light volume |
| Epieos | Yes (OSINT) | No | Free / paid | Instant OSINT-style lookup, no verification |
| Tomba | Partial | Yes | Free: 25/mo | Domain search, developer API |
| Mailmeteor | No | Yes | Free tier | Bulk verification, Gmail mail merge |
| Google (exact match) | Sometimes | No | Free | Public-facing contacts |
| LinkedIn search | Often | No | Free | One-off B2B identity |
| Gravatar | If registered | No | Free | Developers, WordPress users |
| People-search sites | US-skewed | No | Freemium | Personal (not B2B) |
The split is simple. Free methods identify but do not verify, so you still have to confirm the address is live somewhere else. A database-backed tool does both in one pass, which is why teams running outreach standardise on one. For a full breakdown of accuracy and pricing across finders, see our guide on how to find anyone's email address.
How to Find an Email by Domain
A related task is the domain search: instead of one address, you want every address (and the pattern) tied to a company domain. This is how you go from "I know the company" to "I have the contact."
Enter the domain (for example acme.com) into a tool like Overloop or Hunter and it returns the addresses it knows plus the company's dominant pattern. That pattern is the useful part. According to Hunter's analysis of millions of professional addresses, firstname.lastname@ is the single most common format, covering roughly 46% of companies, with firstname@ the next most common. Once you know the pattern, you can build a candidate address for any named person at that company and verify it.
firstname.lastname@acme.com is likely but not certain, so always run the candidate through an SMTP check before it enters a sequence. Pattern plus verification is what separates a 90%+ deliverable list from a bounce machine.How to Check If an Email Exists
This is the step people skip, and it is the one that protects your sender reputation. To check whether an address is real, you run an SMTP verification. The verifier opens a connection to the recipient's mail server and asks, in effect, "does this mailbox exist?" without sending an actual message. A live mailbox returns an accept code; a dead one returns a 550 error.
Three things to know before you trust the result:
- Catch-all domains break verification. A catch-all accepts every address, so the server confirms anything you ask. There is no authoritative public count, but a sizable share of business domains run this way, so it is common enough to plan around rather than ignore. A "valid" result on a catch-all is not a real signal; treat those addresses with lower volume.
- Bounce rate is the metric that matters. Mailbox providers throttle senders whose bounces climb. Keep hard bounces under 2%. Past 5%, Gmail and Outlook start filtering you regardless of content.
- Verification is not one-and-done. Addresses decay. Validity estimates B2B data decays at roughly 22.5% per year as people change jobs, so a list verified six months ago is already partly stale.
For the full mechanics of catch-alls, greylisting, and bounce typology, see our email verification guide. The practical takeaway: a reverse lookup that does not end in a verification step is only half done.
Reverse Lookup With Overloop
Overloop is built for the scale case, where you have addresses coming in faster than you can Google them. Drop an address (or a CSV of them) in, and it reverse-matches against a 450M B2B contact database, returns the owner's name, role, and company, and runs a real-time SMTP check in the same pass. You get identity and a live/dead verdict together, not in two tools.
What makes it the practical default for European teams specifically:
- One step, not three. Identify, enrich, and verify happen together. The output is a clean, named, deliverable contact ready to sequence.
- EU data residency. The contact database is stored in Brussels, which keeps your GDPR posture clean when you process European contacts.
- Credits, not surprises. The Starter plan is $69/mo with 500 finder credits per seat. Credits are gated by the plan, so there is no overage bill at month-end.
- It lives where you work. The finder and verifier sit inside the same platform that runs your LinkedIn and email sequences, so a reverse lookup flows straight into outreach.
If you want the click-by-click version, our walkthrough on using the Overloop email finder step by step covers single lookups, bulk CSV runs, and verification settings.
Is It Legal?
Looking up a professional email address is legal in most jurisdictions, and the lookup itself is data processing, not contact. The rules that matter kick in when you reach out:
- EU (GDPR). Processing business contact data is allowed under legitimate interest, provided you offer an opt-out and keep the data tied to a clear business purpose. See the GDPR full text for the legal basis.
- US (CAN-SPAM). B2B cold email is permitted with a working unsubscribe link and a physical mailing address, per the FTC compliance guide.
- Canada (CASL). Stricter than both, and generally requires implied or express consent before you send.
The short of it: identifying and verifying an address is fine. Treat the outreach that follows with the same care you would any cold channel. For the deeper dive, read our full guide on finding email addresses, which covers the legal posture per region in more detail.
Turn unknown addresses into named, verified contacts.
Overloop reverse-matches and verifies emails against a 450M-contact database, then drops them straight into a multichannel sequence.
Start with Overloop →See a demoFrequently asked questions
What is a reverse email lookup?
A reverse email lookup is the process of starting with an email address and working backwards to find who it belongs to: the person's name, job title, company, and sometimes their social profiles. It is the inverse of an email finder, which starts with a name and returns an address. Sales and recruiting teams use it to identify inbound contacts, deduplicate CRM records, and confirm an address is real before they reply or send.
Can I do a reverse email lookup for free?
Yes, for one-off checks. Paste the address into Google in quotes, search it on LinkedIn, or check Gravatar, which returns a public profile for any email registered with the service. Free tiers of B2B tools also help: Hunter.io gives 25 verifications per month and Overloop's free email verifier checks single addresses without a paid plan. Free methods are fine for a handful of addresses but break down past a few dozen, where a database-backed tool is faster and more accurate.
How do I check if an email address actually exists?
Run an SMTP verification. The verifier opens a connection to the recipient's mail server and asks whether the mailbox exists, without sending a real message. A valid mailbox returns an accept code, an invalid one returns a 550 error. The exception is catch-all domains, which accept every address and cannot be verified this way. Keep your bounce rate under 2%, because mailbox providers throttle senders whose bounces climb above that. See our email verification guide for the full mechanics.
How do I find an email address by domain?
A domain search returns the email addresses and patterns associated with a company domain. Enter the domain (for example acme.com) into a tool like Overloop or Hunter.io and it returns known addresses plus the dominant pattern, such as firstname.lastname@acme.com, which covers roughly 46% of companies according to Hunter's analysis of millions of addresses. You can then combine the pattern with a specific name and verify the result.
Is a reverse email lookup legal?
Looking up a professional email address is legal in most jurisdictions, and the lookup itself is data processing rather than contact. In the EU under GDPR, processing business contact data is allowed under legitimate interest with an opt-out, and the address must stay tied to a clear business purpose. In the US, CAN-SPAM permits B2B cold email with an unsubscribe link and a physical address. Canada's CASL is stricter and generally requires consent. Always check local rules before you reach out.