Your secret weapon: reach the people who hire, not the pile.  ·  Designed by a recruiter..
← All guides

How to Find a Hiring Manager's Email (and Know If It's Right)

From a recruiter with 20 years in hiring

To find a hiring manager's email, first get the right name, then find the company's email pattern from addresses that are already public, apply that pattern to the name, and check it before you send. Most work emails follow a simple format like firstname@company.com or firstname.lastname@company.com. The hard part isn't the format. It's being sure you have the right person and knowing whether the address is confirmed or a guess.

Try it free. You've got nothing to lose.

Paste the job you applied to and see who's behind it: the hiring manager and the recruiter, with their emails and a note ready to send. Your first 3 lookups are free, and if we can't find a proven contact, it doesn't count.

I'm a recruiter with about 20 years in agency and corporate hiring. Here's how I'd find the address, and how I'd find the recruiter's address while I'm at it.

Step 0: Make sure you have the right name

A perfect email to the wrong person is still the wrong email. Before you hunt for an address, know who the job reports to and confirm that person still works there. If you haven't done that yet, start with how to find the hiring manager for a job. Then come back.

You also want the recruiter's name. More on that below.

Step 1: Find the company's real email domain

This sounds obvious, but it trips people up. Some companies use a different domain for email than for their website. A hospital system might run its site on one name and its email on an older one. A company that was bought may still use the old name.

Look for any real employee address the company has published:

  • The "contact us" or press page (media contacts are usually real people)
  • Press releases, which often end with a named contact and email
  • Staff directories, especially at schools, hospitals, law firms and local government contractors
  • PDFs: annual reports, event programs, conference speaker lists, vendor forms
  • Job ads themselves, which sometimes say "questions? email jane.ortiz@..."

Don't expect it to be easy. Hunter looked at about 905,000 company websites and found that only 18.7% mentioned even one email address. So you may have to dig past the homepage.

Step 2: Work out the pattern

Once you have one or two real addresses from the same company, the pattern usually jumps out. Common ones:

  • first@company.com (jennifer@)
  • first.last@company.com (jennifer.walsh@)
  • firstinitiallast@company.com (jwalsh@)
  • firstlast@company.com (jenniferwalsh@)
  • first_last@company.com (jennifer_walsh@)

Hunter analyzed more than 12 million addresses and found that 49.9% of companies use the first-name pattern. That makes sense, because so many companies are small. Bigger employers, where a dozen people might share a first name, lean toward first.last or first initial plus last name.

If you only have one sample, test it against the name. If the media contact is "Sarah Kim" and her address is skim@, the pattern is first initial plus last name.

For more on patterns and tricky cases, see how to guess someone's work email.

Step 3: Watch for the exceptions

Patterns break. Plan for it.

  • Duplicate names. If there are two Mike Turners, the second one may be mturner2@ or michael.turner@.
  • Hyphenated and long names. Some companies drop the hyphen, some keep it, some truncate.
  • Nicknames. Bob versus Robert. Use the name they publish professionally, and if you're unsure, the legal-sounding version is the safer guess.
  • Different domains by division. Big companies sometimes have separate domains for subsidiaries.

Step 4: Check the address before you send

You can run an address through an email verification tool. Many offer a few free checks. They'll usually tell you one of three things:

  • Valid. The mail server confirmed that mailbox exists. Good to go.
  • Invalid. It doesn't exist. Try the next pattern.
  • Accept-all, catch-all or unknown. The server accepts mail for any address at that company, so the checker can't tell. This is common at bigger employers.

That third case matters. An address that "might be right" is a best guess. You can still send it. Just know what it is, and make sure your note to the recruiter goes out too, so you're not depending on one guess.

Don't send the same note to five variations hoping one lands. It looks careless if two of them reach real people, and it can get your address flagged as spam.

Step 5: Get the recruiter's email too

Most advice online says to skip the recruiter. I disagree, and not just because I am one. The recruiter's whole job is to fill this seat. I usually have 15 to 20 jobs open, each with hundreds and hundreds of applicants. When a candidate emails me directly, it stands out. I read it, I often call them, and I forward the good ones to the hiring manager.

The recruiter's email uses the same company pattern. If the job is posted by a staffing agency, use the agency's pattern for the agency recruiter.

A worked example

Mike Turner applies for an IT Support Specialist job at a 300-person manufacturer. He's worked out that the role reports to the IT Manager, Lisa Moreno, and confirmed she's current. The company's latest press release lists a media contact: Tom Becker, tbecker@ the company's domain.

Pattern: first initial plus last name. So his best guess for Lisa is lmoreno@. A verifier says the server is accept-all, so it can't confirm. He sends it anyway, labeled in his own notes as a best guess, and he writes to the company's recruiter, Dana Price, whose address he builds the same way.

Subject: IT Support Specialist application, Mike Turner

Hi Lisa,

I applied this morning for the IT Support Specialist role. I've supported about 250 users at a plant with shift workers, including imaging laptops, managing user accounts and keeping shop-floor terminals running. I'd like a short call to hear what's hardest about the job right now. My resume is attached.

Thank you, Mike Turner (555) 010-2290

If lmoreno@ bounces, he tries lisa.moreno@ next, once, and leans on the recruiter.

What to do today

  1. Confirm the hiring manager's name and that they still work there.
  2. Find the recruiter's name too.
  3. Find one or two real, published addresses at the company.
  4. Work out the pattern and apply it to both names.
  5. Run the addresses through a verifier and note which are confirmed and which are guesses.
  6. Send one short note to each. Plan one follow-up after about a week.

If you'd rather not dig

Some people would rather spend the time on their resume. If you don't know who to write to, paste the job link at emailthehiringmanager.com and it looks for the most likely hiring manager and the recruiter for that job. Names are free. When you buy lookups (10 for $9, or 40 for $19), each email is labeled verified or best guess, so you know which is which. It isn't always right, and if it can't find a proven contact, the credit comes back. There are other tools out there too, and the method above works fine without any of them.

Common questions

Is it OK to email a hiring manager at their work address?

Yes. A short, professional note about a job they're hiring for is a normal business email. Stick to their work address, keep it brief, and follow up once at most.

What should I do if my email bounces?

A bounce means the address doesn't exist. Try the next most common pattern for that company, or write to the recruiter and ask them to pass your note along. Don't blast every variation at once.

Can an email checker tell me for sure that an address is real?

Not always. Some company mail servers accept every address, real or not, so a checker can only say the address might work. Treat those as a best guess, not a confirmed address.

Related guides

Sources

Try it free. You've got nothing to lose.

Paste the job you applied to and see who's behind it: the hiring manager and the recruiter, with their emails and a note ready to send. Your first 3 lookups are free, and if we can't find a proven contact, it doesn't count.