If you are a founder launching a new product, an agency owner looking for your next client, or a sales rep starting a new territory, you need to find decision-makers’ contact info. But if you don’t have the budget to commit to a $15,000 annual database contract (or the technical team to build a complex data pipeline), you might feel stuck.
The good news is that you don’t need expensive tools to find the email of almost any B2B decision-maker. The open web contains all the clues you need.
Here is a step-by-step manual guide to finding decision-maker contact info for free, followed by how to think about moving from manual lookups to automated research.
Step 1: Identify the Right Decision-Maker
Before you look for an email, you must ensure you have the right person.
- Use LinkedIn or Google with search operators to map the organization structure.
- If you target mid-sized or enterprise firms, search for job titles that relate directly to your offer (e.g.,
site:linkedin.com/in/ "Head of Operations" "Acme Corporation"). - Make a list of 2–3 potential stakeholders. Targeting a single person is a common mistake; in 2026, B2B buying decisions are almost always made by committees.
Step 2: Reverse-Engineer the Company’s Email Pattern
Most companies use a single, standardized format for all employee emails. If you can find the pattern, you can guess your prospect’s address. Common patterns include:
first.last@company.com(jane.doe@acme.com)firstinitiallast@company.com(jdoe@acme.com)first@company.com(jane@acme.com)
How do you find the pattern without buying a database?
- Search Company Disclosures: Search Google for the domain name along with common email symbols, using quotes:
"@company.com"or"email * @company.com". This often pulls up press releases, public filings, or support pages where employee emails are listed. - Use Free Pattern Locators: Tools like Hunter.io or RocketReach allow a small number of free searches per month. They will display the “most common pattern” found for that domain.
Step 3: Test and Verify the Guess
Once you have guessed the email (e.g., jdoe@acme.com), you must verify it before sending. Sending emails to invalid addresses damages your sender reputation and lands you in spam folders.
- Run a Free Verification Check: Use free online email verifiers (like Mailtester, Hunter’s Verifier, or NeverBounce). These tools send a ping to the recipient’s mail server to check if the address exists without sending a physical email.
- Check for “Catch-All” Domains: Be careful if the verifier returns a status of “Catch-All”. This means the mail server is configured to accept all emails sent to their domain, regardless of whether the specific mailbox exists. Catch-all emails must be handled with care, as they have a higher bounce rate.
Step 4: The Manual Limits
This manual process is highly effective and free. If you are only looking for 10–15 leads a week, you do not need to buy any software.
But manual research doesn’t scale. If you want to contact 100 prospects a week, doing this by hand becomes a major bottleneck. You’ll spend hours searching LinkedIn, guessing patterns, verifying emails, and copy-pasting lines into your outreach tool.
This is the point where most teams look for a ZoomInfo alternative or try to build data pipes in Clay. But both routes carry high software costs and steep learning curves.
The Hybrid Alternative: Automated Research
Instead of choosing between tedious manual work and expensive software, you can outsource the research to an automated lead-research service.
With Bebaat, we handle the entire prospecting and verification workflow for you. We find the right decision-maker, identify their pattern, run multi-step verification checks, and write a personalized opener based on their public profile. The leads land directly in your spreadsheet, ready to send. There’s no subscription and no setup required.
If you are currently doing manual lookup and want to scale your outbound, see how our pricing compares, or request 25 free sample leads to see our verification process in action.
