Reverse email lookup, free

A reverse email lookup starts with an email address and works backwards. Paste one below: this free tool tells you if the address is valid, whether the domain accepts mail, who hosts it, and whether it is a corporate, free, disposable or role account. Everything runs in your browser.

Look up an email address

Live DNS checks plus pattern analysis. Nothing is sent to Overloop and nothing is stored.

This does not name the person behind the address. No browser can. The comparison below says what actually can, and what it costs.

What the lookup actually checks

1

The address itself

Syntax against the rules mail servers apply, plus the exact reason when an address is malformed.

2

The domain, live

MX, SPF and DMARC records over DNS. Does the domain accept mail, who hosts it, is it set up to send.

3

The pattern

Free provider, corporate, disposable or role account, and the name the local part implies. Labelled as inference, because it is.

Every reverse email lookup method, compared

MethodReturns a nameVerifies the mailboxFreeWhat it really is
This toolInferred onlyNoYesLive DNS lookups plus pattern analysis, in your browser
Google, exact matchSometimesNoYesSearch the address in quotes. Finds it only if someone published it
LinkedIn searchOften, in B2BNoYesWorks when the person registered with that address. Self-maintained data
Gravatar profileIf registeredNoYesA public avatar and profile keyed to a hash of the address
OSINT toolsSometimesNoFree tierProbe public services for account existence, for example Epieos or Holehe
SMTP verificationNoYes, except catch-allSingle checksAsks the receiving server whether the mailbox exists, without sending mail
B2B contact databaseYes, if in the datasetYesPaid, free tiers existA licensed dataset of work contacts. Overloop, Hunter, Apollo
Consumer data brokersUS-skewedNoResult paywalledBackground-check aggregators like Spokeo or BeenVerified. Weak on EU data

Read across one row and the split is obvious. Free methods identify without verifying. SMTP verification verifies without identifying. Only a dataset does both in one pass, which is why teams running volume standardise on one.

Pick the method that matches the job

You want to know if an address is safe to send to

Use this page, then the email verifier. This page tells you whether the domain can receive mail at all and whether the address is disposable or a shared inbox. The verifier opens the SMTP conversation and confirms the mailbox. Together they catch most of what makes a send bounce.

You want the name behind one address

Start free: search the address in quotes on Google, then on LinkedIn. For a single lookup that is usually enough, and it costs nothing. If the address is a role account like info@ or sales@, no lookup will produce a person, because there is no single person on the other end.

You want names for hundreds of addresses

Manual methods stop scaling somewhere around a few dozen. Past that you need a B2B contact database that reverse-matches an address to a contact record and verifies the mailbox in the same pass. Overloop stores its dataset in the EU.

You have the name and need the address

That is the opposite job, and it has its own tool: the email finder takes a name and a company domain and returns the address. Useful once this page has shown you the sending pattern a domain uses, since that pattern usually holds across the whole company.

You want the long version

Our guide to the reverse email lookup walks through each free method step by step, compares the paid tools on accuracy and price, and covers the legal position per region.

Questions we get every day

A reverse email lookup starts with an email address and works backwards to find what can be established about it: whether it is valid, which mail provider hosts the domain, what kind of address it is, and ideally who owns it. It is the inverse of an email finder, which starts from a name and returns an address.
Yes, for one-off checks. This page runs live DNS checks and pattern analysis for free with no signup. To identify a person, search the address in quotes on Google, search it on LinkedIn, or check Gravatar. Free methods identify public-facing contacts well and stop short of confirming the mailbox is live.
Sometimes, and only when the owner is discoverable in public sources. If they published the address, listed it on a profile, or registered a Gravatar, a free search finds them. If they did not, no free tool can produce a name, because the name is not in DNS and not in the address. Anyone promising an identity for every address is selling a data-broker query, not a lookup.
Seven things: whether the syntax is valid and exactly why not if it fails, whether the domain has MX records and so can receive mail, which provider hosts the mailbox, whether SPF and DMARC are published, whether the address is on a free provider, a corporate domain, a disposable domain or a role account, the name the local part implies, and the company the domain implies.
Because names are not stored in DNS. A domain's records say which servers accept its mail and how its mail is authenticated, never who reads it. A name derived from a pattern like first.last is an inference, and it breaks on shared surnames, initials, nicknames and non-Western name order. Naming an owner reliably needs a contact dataset or a public profile.
Run an SMTP verification. The verifier connects to the recipient's mail server and asks whether the mailbox exists without sending a message. A live mailbox returns an accept code, a dead one returns a 550. Catch-all domains accept everything and cannot be verified this way. Our email verifier does single checks free.
Looking up a professional address is legal in most jurisdictions, since the lookup is data processing rather than contact. The rules that bite apply to the outreach afterwards: in the EU, GDPR allows processing business contact data under legitimate interest with an opt-out; in the US, CAN-SPAM requires a working unsubscribe and a physical address; Canada's CASL generally requires consent before you send.
No. The syntax and pattern analysis runs entirely in your browser. The only network requests are DNS queries for the domain's MX, SPF and DMARC records, sent to Google's public DNS resolver. The full address never leaves the page, and nothing is logged on our side.

More free tools

Address checked. Now get the name.

Overloop matches addresses to contacts, verifies them, and sequences the outreach. First campaign live in 15 minutes.

Try Overloop free