LinkedIn Email Finder: How to Get a Verified Work Email From a Profile, and What Each Tool Charges

Open the profile's Contact info panel first. If no address sits there, a LinkedIn email finder turns the name and employer on the profile into a work email in seconds. Among the tools priced below, a found address costs between $0 and $0.13.

The catch is the word "found". Every vendor runs its own check and publishes its own accuracy figure, and no independent benchmark exists. So this guide prices one lookup tool by tool and shows what Spona's own tests and first weeks of lookups returned. It then sets out the US and UK rules to meet before you send.

Get thousands of leads in 4 minutes.

Stop stitching tools together.
Start with verified sales data, delivered in minutes.

SCALE SALES NOW

No contracts · No setup · No onboarding

LinkedIn email finder: how it works

A finder needs two things from the profile: the person's name and their current employer. Mailmeteor's free tool reads both from the public profile, works out the company's email pattern, then checks the address against the mail server. Its page promises "three steps, under 10 seconds".

The output is an address plus a status. Mailmeteor labels results Valid or Risky. Tomba's finder adds a confidence score from 0 to 100. It also lists up to 20 public pages where it saw the address.

The status matters. A Risky or catch-all result is one the mail server accepted without confirming the mailbox, and it carries bounce risk. Anymailfinder's page states its billing rule plainly: "If an address cannot be verified, we return nothing and charge nothing."

Tools come in two shapes. A web tool takes a pasted profile URL and runs on the vendor's servers; Hunter's API also accepts a LinkedIn handle. A browser extension, such as Skrapp's, adds a sidebar to the profile you are viewing and works on first, second and third degree profiles. Extensions save the copy and paste; web tools need nothing installed.

How to find someone's email on LinkedIn in four steps

1. Check the Contact info section

Open the profile and click Contact info, just under the headline. Some profiles show a work email there. When one shows, you can skip the finder, and the lookup costs nothing. When none shows, the next three steps are for you.

A listed address still deserves a check in step four. People list personal addresses and old domains, and few update Contact info on the day they change jobs.

2. Copy the profile URL and company domain

The profile URL sits in your browser's address bar and reads linkedin.com/in/ followed by the person's handle. Copy it. Then note the current employer and its website domain. The finder guesses the pattern on that domain, so a wrong employer yields a wrong address.

Check that the employer is current. Mailmeteor warns that its accuracy drops for "people who changed jobs in the last 30 days". A headline that lags the Experience section is the usual sign.

3. Run one lookup in a finder

Paste the URL into a web tool, or open the extension on the profile and run the lookup. The result comes back with a status. In most tools you pay only when it does.

GetProspect's pricing page states "you are not charged for the not found emails". At Salesflare, a credit goes out only "when Salesflare finds a quality email address". Tomba's rule is "No address, no charge".

Skrapp is the exception worth knowing. It does not charge for Invalid or Unknown results, but it does charge for Catch-all. A catch-all result costs you a credit there.

A miss in one tool is not proof the address does not exist. In Spona's same-sample test of five data platforms, find rates ranged from 82.0% to 96.0% on the same people. Try a second finder before you guess the pattern yourself, or fall back to a LinkedIn message.

4. Verify the address before the first send

A finder's status is the vendor's own check. Run an independent one before the address enters a sequence. At Anymailfinder, a verification costs 0.2 credits. Dedicated bulk verifiers charge less per address as volume grows.

In Spona's test, 93.3% to 97.4% of returned addresses passed an independent verifier. Roughly one returned address in twenty did not. Each tool also returned a handful of catch-all addresses, between 4 and 8 of them.

Treat catch-alls as their own segment and suppress hard bounces at once. Keep the first send small, so one bad batch cannot hurt your deliverability.

What one lookup costs, tool by tool

Price per found email is the headline number, but the other columns decide the real bill. For a few lookups a week, Mailmeteor costs nothing. Its page says "100% free" with "no limit on the number of manual lookups", subject to fair use. For volume, Skrapp is the cheapest paid option in the table at under two cents a found email on its entry plan.

Anymailfinder's price falls to half a cent on its largest yearly plan. GetProspect bills only valid emails at $0.049 each. Lusha prices by credit: one credit buys an email and five buy a phone number. Its paid plan prices are not in its page text.

Spona's Targeted Search sits at the top of the table on price per email. Its case is the mobile number and the charge-only-on-return rule, covered below. For finders that work outside LinkedIn, see our list of email finder tools.

How accurate are LinkedIn email finders?

No neutral third party has published a test. The one listicle in the US top ten, Outreachbloom's, gives a whole section to why no independent accuracy benchmark exists. Each vendor publishes its own figure, measured its own way.

A vendor's "accuracy" usually means its own verifier agreed with its own result. And you need two different numbers. The find rate says how often a lookup returns anything. Validity says how many returned addresses pass an independent check.

Spona's two figures measure different things too. The 98.3% comes from the first four weeks of Targeted Search. Of 3,286 profile lookups, that share returned an email that passed Spona's own check at lookup time. It is a return rate, not a deliverability figure, and the first week held only 97 lookups.

The 97.4% comes from a separate test on 200 named sales leaders in the US, UK and Germany. MillionVerifier checked the returned addresses the same day. No emails went out in either case, so neither figure says anything about bounces. That test also ran on data platforms, not browser extensions; the full five-vendor table sits in our Apollo vs Cognism comparison.

Is it legal to find emails from LinkedIn?

Two sets of rules matter for a US and UK sales team, and neither bans B2B cold email outright. Both govern what you send, and UK data protection law also covers the address you hold. LinkedIn's own terms are a separate question. Read them on LinkedIn's site; this post does not summarize them.

United States. CAN-SPAM covers every commercial email, and the FTC's compliance guide says "the law makes no exception for business-to-business email". Each separate email in violation can cost "up to $53,088". The guide also lists criminal penalties, including imprisonment, for "harvesting email addresses or generating them through a dictionary attack".

Each message must identify you as the sender, avoid deceptive subject lines and disclose clearly that it is an ad. It must include "your valid physical postal address" and explain how to opt out. Honor opt-out requests "within 10 business days".

United Kingdom. The ICO is clear that "the PECR rule on direct marketing by electronic mail does not apply to corporate subscribers". Its PECR guide says you can email any corporate body: "a company, Scottish partnership, limited liability partnership or government body". So PECR does not require prior consent to email a named person at a limited company.

The ICO adds that "sole traders and some partnerships are treated as individuals", so they need consent or the soft opt-in. Every message must still identify you and "give a valid address" for opt-outs.

The person's work email is still personal data. The ICO says a named work address "will constitute personal data even if they are acting in their business capacity". So UK GDPR applies on top of PECR. Direct marketing "may be a legitimate interest", but you "still need to apply the three-part test" to show it applies.

Two duties follow. You must "tell people that you have obtained their data", usually in the first email or a privacy notice. And you must stop when they object, because that right "is absolute".

For the other finding methods and the email law in more depth, see how to find anyone's business email.

Spona Targeted Search: cost, results and limits

Targeted Search is a chat-style Chrome extension. On a profile, you type what you need, for example a verified work email and a mobile. The result comes back with its status and the credits charged. Spona charges only when a result returns; a miss costs nothing.

An email costs 13 credits and a mobile 88. By plan, that is $0.10 to $0.13 for the email. The mobile comes to $0.70 to $0.88. A lookup that returns both fields therefore costs 101 credits.

Credits come with the plans on the pricing page. Pro at $99 a month carries 10,500 credits. Unused credits expire at the start of each billing period.

In the first four weeks after launch, users ran 3,286 lookups. Of those, 98.3% returned an email that passed Spona's own check at lookup time. 81.1% returned a mobile number, and the median charge was 101 credits a lookup.

The first week held only 97 lookups, a small sample. And "passed Spona's check" is a return rate measured by Spona itself, not an independent accuracy or deliverability figure. The independently verified figure is the 97.4% from the same-sample test above, which ran on Spona's data platform, not the extension. In that test, Spona also returned a mobile or direct dial for 146 of 200 contacts.

One anonymized customer result: a UK recruitment agency with 11 to 50 staff used it for profile lookups with email and mobile. It ran 312 lookups and compared two four-week periods:

• Before: 7 qualified meetings from 289 attempted outreaches.
• After: 23 qualified meetings from 307 attempted outreaches.

It is a before-and-after comparison, not a controlled test.

Now the limits. Among the priced tools in the table, Spona costs the most per found email, at $0.10 to $0.13. Skrapp and Anymailfinder sit below two cents on volume plans. Mailmeteor gives manual lookups away.

Skrapp saves Sales Navigator lists, while Targeted Search works one profile at a time. The only native CRM integration is HubSpot, on Premium and Expert, and Salesforce takes a CSV. Pick Targeted Search when the mobile number matters and a miss should cost nothing. Pick a cheaper finder when you need emails alone at volume.

Get thousands of leads in 4 minutes.

Stop stitching tools together.
Start with verified sales data, delivered in minutes.

SCALE SALES NOW

No contracts · No setup · No onboarding

FAQ: emails from LinkedIn profiles

Is there a free LinkedIn email finder?

Yes, Mailmeteor's web tool is free for manual lookups under a fair-use rule. The paid tools give free credits instead, with 100 credits in Anymailfinder's seven-day trial and 50 on Skrapp's free plan. Lusha gives up to 40 credits a month. GetProspect's free tier covers 50 valid emails and 100 verifications a month.

Does LinkedIn show email addresses?

Sometimes. Open Contact info under the profile headline and look for a work email. If none shows, a finder works from the name and employer instead, as in the four steps above. Whatever you find, verify it before the first send.

Can I find someone on LinkedIn by email?

The tools in this post run from the profile to the address, not the other way round. A reverse lookup, from an address to a profile, is a different product, and the table above does not price it. Check the vendor's feature page before you buy credits for that purpose.

Do these tools work in Sales Navigator?

Some do. Skrapp's extension runs on Sales Navigator Core, Advanced and Advanced Plus, and GetProspect works "directly from LinkedIn and Sales Navigator". Anymailfinder "doesn't connect to Sales Navigator directly", so you paste the profile URL instead. Whether the seat pays for itself is a separate question, covered in our Sales Navigator pricing post.

What should I do with a catch-all result?

Keep it out of the first send. A catch-all domain accepts every address, so the finder cannot confirm that the mailbox exists. Skrapp charges a credit for one, and each of the five data platforms in Spona's test returned between 4 and 8. Put catch-alls in their own segment, send a small batch, and watch the bounce rate.