> Enrich.chat gives AI agents verified work emails and mobiles. To use it from an agent, read https://enrich.chat/agents.md . This is the Markdown version of https://enrich.chat/blog/find-company-email-address/

# How to find a company's email address: the general inbox, or one person's

A search for a company's email can mean two jobs. Read a general address off a public page, or build one person's work email from the company's format and check it before you send.

By Enrich.chat Editorial. Updated October 16, 2026.

**Short answer:** To find a company's email address, first decide which one you need. A general address such as info@ or support@ is published on the company's contact page, footer, privacy policy or [security.txt](https://www.rfc-editor.org/rfc/rfc9116.html) file. A named person's work email comes from the company's email format or a lookup tool, and you should verify it before you send.

## Key takeaways

- EU and UK online businesses must show an email address: the EU's [Your Europe portal](https://europa.eu/youreurope/business/growing/digitalising/setting-up-business-website/index_en.htm) says so, and [GOV.UK](https://www.gov.uk/online-and-distance-selling-for-businesses/online-selling) says UK online sellers must give theirs before an order. Check the footer, Terms and legal notice before you guess.
- Registers rarely list an email. The [SEC's Form 10-K cover](https://www.sec.gov/files/form10-k.pdf) asks for an address and a phone number, and Companies House keeps the [registered email off the public register](https://www.gov.uk/limited-company-formation/company-address).
- The European Commission lists name.surname@company.com as personal data and [info@company.com](https://commission.europa.eu/law/law-topic/data-protection/data-protection-explained_en) as not. CAN-SPAM still [makes no exception for business email](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business).
- You can check a mailbox without sending: look up the MX records, then ask the mail server about the recipient. A catch-all domain says yes to everything, so a pass is evidence, not proof.
- An AI agent can go from a company website to people and work emails in two calls, and report verified, catch_all, unknown or not found. A work email found uses 10 credits, and a miss uses 0.

## Which company email address do you need: the general inbox or one person's?

A search for a company's email address can mean two different jobs. One is the company's own inbox, such as info@, support@ or press@. The other is the work email of a named person at that company. The first is published on purpose. The second usually is not.

That split decides where you look, how you check the result and which rules apply. Figure 1 shows both paths, and the table matches each need to a source, a cost and a risk.

**Figure 1: One search, two different jobs.** Two paths start from the search for a company's email address. Path A is a general or role address such as info@example.com. You look in the contact page, footer, privacy policy, security.txt and press kit. You check the MX record and the mail server's reply for that one mailbox. CAN-SPAM applies, and the address is not personal data if it names nobody. Path B is a person's work email such as dana.lee@example.com. You look at the company's email format plus a name, or use an email finder. You check the status, which is verified, catch_all, unknown or not found. The address is personal data in the UK and EU, and CAN-SPAM applies.

*The two jobs behind the search. Addresses are fictional and use the reserved example.com domain. The sources for each step are in the sections below.*

| What you need | Where to look | Cost | Main risk |
| --- | --- | --- | --- |
| A general inbox (info@, hello@) | Contact page, footer, Terms, legal notice | Free | Shared inbox, slow replies |
| A support, sales, press or careers inbox | Help center, newsroom, jobs page | Free | A guessed role address may not exist |
| A security contact | `/.well-known/security.txt` | Free | For vulnerability reports only |
| A privacy contact | Privacy policy | Free | For privacy requests only |
| A US public company's head office | Cover of its Form 10-K | Free | Address and phone only, no email |
| A UK company | Companies House | Free | Registered email is not published |
| One person's work email | Company format plus a mailbox check, or an email finder | Free to a few credits | Wrong pattern, catch-all domains |
| People at many companies | An AI agent calling a contact API | 10 free lookups a day, then 10 credits per work email found | Statuses are evidence, and not found is common |

The sections below take the general inbox first, then a person's address, then the loop an AI agent runs for both. For phone numbers, street addresses and social profiles too, see our guide to [finding contact information for any company or person](https://enrich.chat/blog/find-contact-information/).

## Where do companies publish their general email address?

Companies publish a general address on their own website first: the contact page, the footer and the legal pages. Next come the privacy policy, a security.txt file, press releases and app store listings. Registers and domain records add little, as Figure 2 shows.

### On the company's own site

Start with the Contact page, the footer, the Terms and any legal notice. The law pushes online businesses to list an email address. The EU's [Your Europe portal](https://europa.eu/youreurope/business/growing/digitalising/setting-up-business-website/index_en.htm) says a business is legally obliged to show its legal address, email address and telephone number on its website. [GOV.UK](https://www.gov.uk/online-and-distance-selling-for-businesses/online-selling) says UK online sellers must give their email address before an order is placed. Some sites still show only a form, so read the footer and the legal pages too.

Then search the site itself. Google's help page documents [quotes for an exact phrase and site: for one website](https://support.google.com/websearch/answer/2466433), so `site:example.com "@example.com"` lists pages on that domain that print an address. In your browser, view the page source and search for "mailto:". Some companies also mark up their contact details for search engines. Google's Organization documentation shows a [contactPoint with an email field](https://developers.google.com/search/docs/appearance/structured-data/organization), and calls it optional.

### In the privacy policy and Terms

Privacy law adds a second place. The [ICO says](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/what-privacy-information-should-we-provide/) a UK GDPR privacy notice must give the name and contact details of the organisation, plus the contact details of its data protection officer where it has one. That is why a privacy policy often ends with a privacy@ or dpo@ address. Use it for privacy requests only.

### In a security.txt file

Many sites publish a security contact at `/.well-known/security.txt`. [RFC 9116](https://www.rfc-editor.org/rfc/rfc9116.html) defines the file. Its Contact field must always be present, and an email value looks like `mailto:security@example.com`. The Expires field says when the data goes stale, so a date in the past means you should look elsewhere. This inbox is for vulnerability reports. Do not use it for sales.

### In press pages and app stores

PR Newswire's template guide tells companies to include a [media contact's name, phone number and email address](https://www.prnewswire.com/resources/articles/press-release-templates/), and admits some organizations leave it out. App stores add two more places. [Google Play](https://support.google.com/googleplay/android-developer/answer/13634081) requires an email address for a store listing and shows it on the listing page. [Apple's App Store Connect](https://developer.apple.com/help/app-store-connect/reference/app-information/platform-version-information) requires a Support URL that leads to real contact information, such as a legal address, email address or phone number.

### In registers and domain records

These sources are real but thin.

- **SEC filings.** The cover of a US public company's [Form 10-K](https://www.sec.gov/files/form10-k.pdf) asks for the address of its principal executive offices and its telephone number. It has no email field. Our guide to [finding a CEO's email address](https://enrich.chat/blog/find-ceo-email/) shows what filings do give you.
- **Companies House in the UK.** [GOV.UK](https://www.gov.uk/limited-company-formation/company-address) says a company's registered email address will not be published on the public register. The register's [search page](https://find-and-update.company-information.service.gov.uk/) adds that Companies House does not check the accuracy of what companies file. The register is open to anyone, and Companies House says it [cannot stop third parties using](https://www.gov.uk/guidance/your-personal-information-on-the-companies-house-register) the details of directors and officers. Anyone who holds those details must follow data protection law.
- **Domain records.** Under ICANN's Registration Data Policy, in effect since August 21, 2025, a registrar that redacts a registrant's email must [publish an email address or a link to a web form](https://www.icann.org/en/contracted-parties/advisories/advisory-registrars-use-of-communication-web-forms-in-rdds-25-05-2026-en) instead. ICANN's [lookup tool](https://lookup.icann.org/en) runs on RDAP, the successor to WHOIS. Expect a form, not a person.
- **Google Business Profile.** [Google's help page](https://support.google.com/business/answer/7032839) lists a primary phone number, up to two more, and a website. It lists no email field.

**Figure 2: Which public places publish a company email address.** A table of ten places and whether each one publishes an email address. The contact page and footer, the privacy policy and press pages often do: EU and UK online sellers must list one, privacy and data protection contacts are common, and a media contact appears if one is listed. A security.txt file has a mandatory contact field if the file exists. Google Play requires a contact email and shows it on the listing. The Apple App Store requires a support link that shows contact details. The SEC Form 10-K cover gives an address and phone but no email. Companies House keeps the registered email off the register. Domain records give an email or a web form, often redacted. Google Business Profile has phone and website fields but no email field.

*Which public places publish a company email address. Yes means the source requires one. Often means it is common. If file means the field is mandatory in a security.txt file, when a site has one. Link and Form mean you get a route to the company, not always an inbox. Sources: [Your Europe](https://europa.eu/youreurope/business/growing/digitalising/setting-up-business-website/index_en.htm), [GOV.UK](https://www.gov.uk/online-and-distance-selling-for-businesses/online-selling), [ICO](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/what-privacy-information-should-we-provide/), [IETF](https://www.rfc-editor.org/rfc/rfc9116.html), [Google Play Help](https://support.google.com/googleplay/android-developer/answer/13634081), [Apple](https://developer.apple.com/help/app-store-connect/reference/app-information/platform-version-information), [SEC](https://www.sec.gov/files/form10-k.pdf), [GOV.UK](https://www.gov.uk/limited-company-formation/company-address), [ICANN](https://www.icann.org/en/contracted-parties/advisories/advisory-registrars-use-of-communication-web-forms-in-rdds-25-05-2026-en), [Google Business Profile Help](https://support.google.com/business/answer/7032839).*

### Which role names can you expect?

[RFC 2142](https://www.rfc-editor.org/rfc/rfc2142.html) sets standard mailbox names. The business ones are info@, marketing@, sales@ and support@. The operations ones include abuse@, noc@ and security@. It asks organizations to support the names that match services they run. It does not define press@, careers@ or privacy@, so those are habits, not standards. Check the site before you trust a guess. Our guides to [email address formats](https://enrich.chat/blog/email-address-formats/) and [company email address examples](https://enrich.chat/blog/company-email-address-examples/) list more.

## How can you tell a real inbox from a dead one without sending mail?

Check where the address came from, look up the domain's MX records, then ask the mail server whether it accepts that recipient. Each step raises your confidence. None proves that a person reads the inbox.

1. **Read the page it came from.** Prefer the company's own page and note its date. A security.txt file whose Expires date has passed is stale.
2. **Look up the MX records.** [RFC 5321](https://www.rfc-editor.org/rfc/rfc5321.html) says a sender looks up the domain's MX records to find its mail servers. [RFC 7505](https://www.rfc-editor.org/rfc/rfc7505.html) defines a "null MX", the record `0 .`, for a domain that accepts no mail. A DNS lookup of example.com, the reserved documentation domain, returned that record on October 16, 2026. Every address at a domain with a null MX is dead. Run `dig MX example.com` in a terminal, or use any online MX lookup.
3. **Ask the server about the recipient.** A verifier opens a connection, names the address with the RCPT TO command and reads the reply. In RFC 5321, a 250 reply means the server accepts the recipient, and 550 means the mailbox is unavailable. The verifier then disconnects before any message goes out.
4. **Know the limits.** A catch-all domain answers yes to every address, and some servers block the check. [Hunter's verifier documentation](https://hunter.io/api-documentation/v2#email-verifier) warns that SMTP results on an accept-all server can be false positives. It also says a result may come from a check made up to one month before your request.

Verifiers report a label, not a verdict. The table lists the labels in Hunter's documentation, plus the role-based flag from [ZeroBounce's status codes](https://www.zerobounce.net/docs/email-validation-api-quickstart/v2-status-codes).

| Label | What it means | What to do |
| --- | --- | --- |
| valid | The check found the address deliverable | Keep it, and still watch bounces |
| invalid | The check found it not deliverable | Drop it |
| accept_all | The server accepts every address, so this one cannot be confirmed | Hold it, or find a second signal |
| unknown | The check failed or was blocked | Retry later, or hold it |
| role_based (ZeroBounce) | A valid address for a team, such as sales@ or info@, in a do-not-mail group because such addresses correlate with spam reports | Do not add it to a marketing list |

Never use a real send as the test. Google's [sender guidelines](https://support.google.com/a/answer/81126) tell senders to keep the spam rate below 0.10% and to automatically unsubscribe recipients with multiple bounces. Under [15 U.S.C. 7704(b)](https://www.law.cornell.edu/uscode/text/15/7704), an unlawful commercial email becomes an aggravated violation if the sender knew the address came from a tool that combines names, letters or numbers into numerous permutations. So never send to every guess. Our guide to [checking an address without sending mail](https://enrich.chat/blog/can-chatgpt-find-email-addresses/) walks through each check, and the [catch-all checker](https://enrich.chat/tools/catch-all-checker/) tests a domain.

## What can you do with a role address like info@ or sales@?

You can write to it, but email law still applies, and the privacy rules depend on whether the address names a person. An address that names nobody is usually not personal data. A commercial message to it is still regulated. This is a summary of what each source says, not legal advice.

| Rule | What the source says | For info@ and for jane.doe@ |
| --- | --- | --- |
| US CAN-SPAM | The [FTC's guide](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business) (August 2023, edited January 2024) says the law makes no exception for business-to-business email. You must honor an opt-out within 10 business days, and each email in violation can draw penalties of up to $53,088. | The same duties apply to both. The guide does not list role addresses as exempt. |
| UK PECR | The [ICO](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/) says the PECR email rule does not apply to corporate subscribers, such as companies. Sole traders and some partnerships are individual subscribers. If you are unsure, treat the details as an individual's. | Marketing email to info@ at a limited company needs no PECR consent. At a sole trader it needs consent or the soft opt-in. |
| UK GDPR | The [ICO](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/) says that if you do not know the name of the person you are writing to, you are not processing personal data. Its example is email to info@company.com. An address like initials.lastname@company.com does identify someone. | info@ is outside UK GDPR. jane.doe@ is personal data, even at work. |
| EU GDPR | The [European Commission](https://commission.europa.eu/law/law-topic/data-protection/data-protection-explained_en) lists name.surname@company.com as personal data and info@company.com as not. | Same split as the UK. You still need a lawful basis for named people. |
| EU ePrivacy | An [Article 29 Working Party opinion](https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2004/wp90_en.pdf) from February 2004 quotes Article 13(5): the consent rule applies to subscribers who are natural persons. Member states must protect other subscribers' legitimate interests, but are free to choose how. | Rules for company mailboxes differ by country. Check the country you send to. |

The ICO's page is marked as under review after the Data (Use and Access) Act, so recheck it before you rely on it. Its test turns on whether you know the person's name. An address you know belongs to one named person is a different case from a shared inbox.

Even where the law allows it, a role address is a poor target for cold outreach. ZeroBounce says role addresses such as sales@ and info@ [strongly correlate with spam reports](https://www.zerobounce.net/docs/email-validation-api-quickstart/v2-status-codes). A better use of info@ is a short question: who handles your topic, and what is their address? Canada and other countries have their own rules, which our guide to [buying email lists](https://enrich.chat/blog/buying-email-lists/) compares.

## How do you find a specific person's work email at a company?

Get the right name, learn the company's email format, apply it to the name, and verify the result. An email finder does the format and check steps for you when you give it a name and a company website.

1. **Pick the person.** Use the team page, the People tab on the company's LinkedIn Page, or a job title search. Our guides to [finding decision makers](https://enrich.chat/blog/decision-makers-in-a-company/) and [finding a CEO's email](https://enrich.chat/blog/find-ceo-email/) cover this step.
2. **Find the domain staff send from.** The brand's website is not always the mail domain, because a bought company can keep its own. The [email format finder](https://enrich.chat/tools/email-format-finder/) shows the format for a domain.
3. **Learn the format.** Find one real address for a named person, such as a press contact, and match it to the name. If Jane Doe is jane.doe@, the format is first.last. Check a second person, and skip role addresses when you work out the pattern. Our guide to [business email formats](https://enrich.chat/blog/email-address-formats/) lists the common ones.
4. **Build one candidate, not all of them.** The [email permutator](https://enrich.chat/tools/email-permutator/) lists likely variants in your browser. Choose the best one by format, not by sending.
5. **Verify it.** Run the name and domain through the [email finder](https://enrich.chat/tools/email-finder/), which returns an address with a status. Or check your candidate with the steps above.

Then read the status. An Enrich.chat result is `verified` (its records mark the mailbox as verified), `catch_all` (the domain accepts every address, so the mailbox cannot be confirmed) or `unknown`. Send to verified addresses, test catch-all ones in small batches, and hold unknown ones. If you have a LinkedIn profile URL instead of a domain, see our guide to [finding email on LinkedIn](https://enrich.chat/blog/find-email-on-linkedin/). For the full routine, with eight methods ranked, read [how to find someone's work email](https://enrich.chat/blog/how-to-find-someones-email/).

## When should you not email at all?

Skip the email when the address is personal, technical or unconfirmed, when the person asked you to stop, or when you would have to guess many variants. A slower route that reaches the right inbox beats a fast one that does not.

- **A technical role address.** abuse@, postmaster@ and noc@ exist for operations. Spamhaus calls domain registration addresses published in WHOIS a special type of [live trap](https://www.spamhaus.org/resource-hub/deliverability/spamtraps-fix-the-problem-not-the-symptom/) that should almost never be on a marketing list.
- **A personal address, or a UK sole trader.** The [ICO](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/) says sole traders and some partnerships can be emailed for marketing only with consent or the soft opt-in.
- **A status you cannot trust.** Hold catch_all and unknown results, and use another route.
- **A request to stop.** The [FTC](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business) says you must honor an opt-out within 10 business days. The ICO says you should honor one from a corporate subscriber too, even where PECR does not require it.
- **A guessed or harvested list.** [15 U.S.C. 7704(b)](https://www.law.cornell.edu/uscode/text/15/7704) treats addresses made by permutation tools, or collected by automated means from a site whose notice says it will not share them, as an aggravated violation.
- **A bought list.** Google's guidelines say not to [purchase email addresses from other companies](https://support.google.com/a/answer/81126). See [whether to buy an email list](https://enrich.chat/blog/buying-email-lists/).
- **A mobile number.** Calls and texts follow different rules, covered in [TCPA and B2B cold calling](https://enrich.chat/blog/tcpa-b2b-cold-calling/).

Use a channel the company gave you instead: its main phone line, its contact form, or an introduction from a mutual contact. Ask who handles your topic. Our [cold email data guide](https://enrich.chat/blog/cold-email/) covers lists and sender rules.

## How can an AI agent find a company's people and their work emails?

An agent starts from a company website, lists the people who match a title, looks up each one, and reports the work email with its status, or "not found". With Enrich.chat that is two kinds of GET request, or two MCP tool calls, and a lookup that finds nothing uses 0 credits.

**Figure 3: Company website in, people and work emails out.** An input of the company website example.com and the title head of sales goes to the Enrich.chat API, which lists people with the company people endpoint, looks up each one with the person endpoint, and reports the status. The agent then reports three fictional results. Dana Lee has the email dana.lee@example.com with status verified, so use it. Kim Park has kim.park@example.com with status catch_all, so test first. Sam Rivera has found false and status not found, which uses 0 credits.

*An agent turns a company website and a title into people, work emails and a status for each. The people and addresses are fictional and sit on the reserved example.com domain. The endpoints and statuses come from Enrich.chat's agent documentation, described in our [guide for AI agents](https://enrich.chat/agents/).*

1. **Start from a website.** Enrich.chat's person lookup by name needs a company website such as example.com. Company names alone are not supported.
2. **List the people.** The people endpoint takes the website and a title and returns each match with a LinkedIn URL.
3. **Look up each person.** The person endpoint takes that URL as a lookup key and returns the work email with its status. Enrich.chat never logs in to LinkedIn. It also accepts a name plus a company website, or a work email, to find the person behind it. Personal addresses such as Gmail are not looked up.
4. **Report misses honestly.** `{"found": false}` means nothing came back and nothing was used. The agent writes "not found". The email endpoint can return a `guess` on a miss, and the agent documentation tells agents that a guess is not data.
5. **Pace the calls.** Keep to about one request a second. On a 429, wait `retry_after` seconds. On a 402, stop and tell the user.

```
GET https://enrich.chat/v1/company/people?domain=example.com&title=head%20of%20sales&limit=3

{"found": true, "count": 3, "domain": "example.com",
 "people": [
   {"name": "Dana Lee", "title": "Head of Sales", "company": "Example Co",
    "linkedin_url": "https://www.linkedin.com/in/dana-lee-example"},
   {"name": "Kim Park", "title": "Head of Sales, EMEA", "company": "Example Co",
    "linkedin_url": "https://www.linkedin.com/in/kim-park-example"},
   {"name": "Sam Rivera", "title": "VP Sales", "company": "Example Co",
    "linkedin_url": "https://www.linkedin.com/in/sam-rivera-example"}],
 "credits_used": 15, "free_lookups_remaining": 9}

GET https://enrich.chat/v1/person?linkedin_url=linkedin.com/in/dana-lee-example&fields=email

{"found": true, "name": "Dana Lee", "title": "Head of Sales",
 "work_email": {"value": "dana.lee@example.com", "status": "verified"},
 "credits_used": 10, "free_lookups_remaining": 8}
```

Paste this prompt into an agent that can call the API or the MCP server:

```text
Use www.enrich.chat to list the head of sales and the head of marketing at [company website], then get each person's work email with its status. Mark anyone with no match as not found, and do not guess an address from a pattern.
```

Agents get 10 free lookups a day per IP address with no signup. On a plan, each person the people endpoint returns uses 5 credits and a work email found uses 10. Checking 50 companies, with two people and a work email each, uses at most 1,500 credits, which fits the Growth plan at $29 a month. A key is optional on the free tier. The [pricing page](https://enrich.chat/pricing/) lists every plan.

To connect once instead of pasting a prompt, add the MCP server at `https://enrich.chat/mcp`. Its tools include `company_people`, `find_person_contact` and `find_work_email`. The [agents page](https://enrich.chat/agents/) and the [install page](https://enrich.chat/install/) have the steps for Claude, ChatGPT and Cursor. The [people search API](https://enrich.chat/api/people-search/) page covers searching by role without a company website.

## What does Enrich.chat not do?

Enrich.chat is a lookup for people and companies you already know about. It works through two routes, the REST API and the MCP server, and it leaves several jobs to you.

- **Work emails only.** The email input takes work addresses. A personal mailbox such as Gmail is not looked up.
- **A website, not a name.** A lookup by name needs the company's website. A company name alone is not supported.
- **Company facts, not a general inbox.** The company endpoint returns a company's name, domain, industry, headcount, state and country. For info@ or support@, use the public places above.
- **No list-building workspace, bulk export or Chrome extension.** A longer list runs through your agent or code, one lookup at a time. There is also no sequencing or dialer.
- **Strong leads, not guarantees.** A `verified` status is a strong signal. It does not promise the person reads the inbox. Not found is a normal answer.

You are responsible for CAN-SPAM, PECR and GDPR in your own outreach, and using any lookup does not make a send compliant. Anyone can ask to be removed on the [opt-out page](https://enrich.chat/opt-out/), and requests are processed within 15 days. The [free email finder](https://enrich.chat/tools/email-finder/) and [email format finder](https://enrich.chat/tools/email-format-finder/) let you try a lookup in the browser, and our [comparison of email finder tools](https://enrich.chat/blog/best-email-finder-tools/) covers the alternatives.

## Frequently asked questions

### How do I find a company's email address?

Decide whether you need the general inbox or a person's address. For the general inbox, read the company's contact page, footer, privacy policy and any security.txt file. For a person, work out the company's email format, apply it to their name and verify the result, or use an email finder. Never send test messages to guesses. Our guide to [finding anyone's work email](https://enrich.chat/blog/how-to-find-someones-email/) covers eight methods.

### Where can I find a company's contact email if its website only has a form?

Check the footer, Terms, privacy policy and legal notice. The EU's [Your Europe portal](https://europa.eu/youreurope/business/growing/digitalising/setting-up-business-website/index_en.htm) says businesses must show an email address on their website, and [GOV.UK](https://www.gov.uk/online-and-distance-selling-for-businesses/online-selling) says UK online sellers must give theirs. Then look for a /.well-known/security.txt file, press releases and app store listings, because [Google Play](https://support.google.com/googleplay/android-developer/answer/13634081) requires a contact email on every store listing. If all fail, use the form and ask who handles your topic.

### Can I send marketing email to a company's info@ address?

Email law still applies, but data protection rules mostly do not. The [European Commission](https://commission.europa.eu/law/law-topic/data-protection/data-protection-explained_en) says an address such as info@company.com is not personal data, and the [ICO](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/) says UK GDPR does not apply when you do not know the recipient's name. CAN-SPAM covers business email, and UK PECR treats sole traders as individuals who need consent or the soft opt-in. This is not legal advice.

### How do I check that a company email address works without sending an email?

Look up the domain's MX records, then ask the mail server whether it accepts that recipient, and disconnect before any message is sent. In [RFC 5321](https://www.rfc-editor.org/rfc/rfc5321.html), 250 means accepted and 550 means mailbox unavailable. A catch-all domain accepts everything, so a pass is evidence, not proof. Try the free [email finder](https://enrich.chat/tools/email-finder/) or the [catch-all checker](https://enrich.chat/tools/catch-all-checker/).

### How do I find a company's email format?

Find one real address for a named person at the company, such as a press contact, and match it to the person's name. If Jane Doe is jane.doe@, the format is first.last. Check a second person, because exceptions exist, and skip role addresses like press@. Or enter the domain in the free [email format finder](https://enrich.chat/tools/email-format-finder/). Our guide to [business email formats](https://enrich.chat/blog/email-address-formats/) lists the common patterns.

### Can ChatGPT or Claude find a company's email address?

Not by guessing. Without a data source, a chatbot can only apply a pattern. Give an agent a contact API and it can list the people at a company website and look up each work email, reporting a status or not found. Paste a prompt that starts with www.enrich.chat. Agents get 10 free lookups a day with no signup. See [what ChatGPT can and cannot find](https://enrich.chat/blog/can-chatgpt-find-email-addresses/).

## Sources

1. [Setting up a business website for SMEs](https://europa.eu/youreurope/business/growing/digitalising/setting-up-business-website/index_en.htm)
2. [Online and distance selling: online selling](https://www.gov.uk/online-and-distance-selling-for-businesses/online-selling)
3. [What privacy information should we provide?](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/what-privacy-information-should-we-provide/)
4. [Opinion 5/2004 on unsolicited communications for marketing purposes under Article 13 of Directive 2002/58/EC (WP 90)](https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2004/wp90_en.pdf)
5. [Data protection explained: what is personal data?](https://commission.europa.eu/law/law-topic/data-protection/data-protection-explained_en)
6. [Business-to-business marketing](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/)
7. [CAN-SPAM Act: A Compliance Guide for Business](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business)
8. [15 U.S. Code 7704: Other protections for users of commercial electronic mail](https://www.law.cornell.edu/uscode/text/15/7704)
9. [RFC 2142: Mailbox Names for Common Services, Roles and Functions](https://www.rfc-editor.org/rfc/rfc2142.html)
10. [RFC 9116: A File Format to Aid in Security Vulnerability Disclosure](https://www.rfc-editor.org/rfc/rfc9116.html)
11. [RFC 5321: Simple Mail Transfer Protocol](https://www.rfc-editor.org/rfc/rfc5321.html)
12. [RFC 7505: A Null MX No Service Resource Record for Domains That Accept No Mail](https://www.rfc-editor.org/rfc/rfc7505.html)
13. [View and manage your developer account information](https://support.google.com/googleplay/android-developer/answer/13634081)
14. [Platform version information](https://developer.apple.com/help/app-store-connect/reference/app-information/platform-version-information)
15. [Organization structured data](https://developers.google.com/search/docs/appearance/structured-data/organization)
16. [Edit your Business Profile](https://support.google.com/business/answer/7032839)
17. [Refine Google searches](https://support.google.com/websearch/answer/2466433)
18. [Free Press Release Templates and Examples](https://www.prnewswire.com/resources/articles/press-release-templates/)
19. [Form 10-K (general instructions and cover page)](https://www.sec.gov/files/form10-k.pdf)
20. [Check the rules for registered office addresses and email addresses](https://www.gov.uk/limited-company-formation/company-address)
21. [Your personal information on the Companies House register](https://www.gov.uk/guidance/your-personal-information-on-the-companies-house-register)
22. [Find and update company information](https://find-and-update.company-information.service.gov.uk/)
23. [Advisory: Registrars' Use of Communication Web Forms in RDDS](https://www.icann.org/en/contracted-parties/advisories/advisory-registrars-use-of-communication-web-forms-in-rdds-25-05-2026-en)
24. [Registration data lookup tool](https://lookup.icann.org/en)
25. [Email Verifier, Hunter API v2](https://hunter.io/api-documentation/v2#email-verifier)
26. [Email validation API status codes](https://www.zerobounce.net/docs/email-validation-api-quickstart/v2-status-codes)
27. [Spamtraps: fix the problem, not the symptom](https://www.spamhaus.org/resource-hub/deliverability/spamtraps-fix-the-problem-not-the-symptom/)
28. [Email sender guidelines](https://support.google.com/a/answer/81126)

## Try this prompt

List a company's people and their work emails

```text
Use www.enrich.chat to list the head of sales and the head of marketing at [company website], then get each person's work email with its status. Mark anyone with no match as not found, and do not guess an address from a pattern.
```

## Related

- [How to find anyone's work email](https://enrich.chat/blog/how-to-find-someones-email/)
- [How to find contact information](https://enrich.chat/blog/find-contact-information/)
- [Email format finder](https://enrich.chat/tools/email-format-finder/)