> Enrich.chat gives AI agents verified work emails and mobiles. To use it from an agent, read https://enrich.chat/agents.md . This is the Markdown version of https://enrich.chat/blog/reverse-email-lookup/

# Reverse email lookup: how it works, what it can find and what it cannot

A reverse email lookup starts with an address and returns the person and company behind it, when a record exists. It works on work addresses. Here is what you get, what a miss means, which free options exist and the lawful way to run it.

By Enrich.chat Editorial. Updated October 19, 2026.

**Short answer:** A reverse email lookup takes an email address and returns the person and company behind it, usually name, job title and employer. It works best on work addresses: [Hunter says](https://hunter.io/reverse-email-lookup) results for personal webmail such as Gmail are much more limited, and a miss is not proof either way. Enrich.chat runs it with `GET /v1/person?email=` on work emails only.

## Key takeaways

- A reverse email lookup is an email finder run backwards: you give the address and get a name, title and company. It needs a record to match, so it works best on work addresses.
- Hunter's free lookup page allows 5 lookups a day and 15 a month with no signup, and its Free plan includes 50 credits a month (checked October 16, 2026).
- A miss is not proof that a sender is fake. Hunter says many legitimate addresses have no public professional footprint, and a recent job change can leave an old title or employer in the result.
- Tomba and FullEnrich each use 1 credit when a lookup finds a person. Credit sizes differ by plan, so compare the plan price for each hit, not the credit count.
- Enrich.chat looks up work emails with GET /v1/person?email=. A match uses 10 credits, a miss uses 0, and 10 lookups a day are free with no signup.

## What is a reverse email lookup?

A reverse email lookup starts with an email address and returns the person and company behind it, if a record exists. It is the opposite of an email finder, which starts with a name and returns an address. [Hunter's lookup page](https://hunter.io/reverse-email-lookup) lists a hit as the owner's full name, job title, company, location and public social profiles.

Figure 1 shows the two directions side by side, using a fictional person on example.com.

**Figure 1: An email finder and a reverse email lookup run in opposite directions.** Two lanes. In the top lane, an email finder takes a name, Ana Ruiz, and a company website, example.com, calls the Enrich.chat endpoint GET /v1/email, and returns the work email ana.ruiz@example.com. In the bottom lane, a reverse email lookup takes the work email ana.ruiz@example.com, calls GET /v1/person with an email, and returns the name Ana Ruiz, the title Head of Finance and the company Example Co. The person and company are fictional.

*An email finder and a reverse email lookup run in opposite directions. [Hunter describes](https://hunter.io/reverse-email-lookup) the finder as the inverse of the lookup. The person, company and address are fictional, and the endpoints are listed in [Enrich.chat's agents.md](https://enrich.chat/agents.md).*

The name covers several different jobs. Check which one you mean:

- **A business lookup.** You hold a work address from a form fill, an inbound reply or a CRM row, and you want the person's role and company. This guide covers it.
- **A sender check.** A message looks odd and you want to know who is behind it. A lookup is one clue. The headers and a phone call carry more weight, and a later section walks through them.
- **A private-person lookup.** The aim is to learn who an individual is, or where they live, from a personal address. This guide does not cover it. Identifying a private person from a mailbox can put that person at risk, and our guide to [who owns an email address](https://enrich.chat/blog/who-owns-this-email-address/) explains why no public record links a mailbox to its owner.

A fourth job sounds similar but is different: finding out whether your own address leaked. [Have I Been Pwned](https://haveibeenpwned.com/) checks an address against known data breaches and can notify you about future ones. It does not say who owns an address.

## What can a reverse email lookup find, and what can it not?

A reverse email lookup can find a name, a title and a company for a work address that has a record, and not much more. What you get depends on the kind of address you hold.

| Address you have | What a lookup can return | Why |
| --- | --- | --- |
| A named work address, such as ana.ruiz@example.com | Name, title, company, often a profile link | People publish work identities on company sites, professional profiles and conference pages. |
| A role address, such as info@ or sales@ | A team at most, no person | Nobody is named. Tomba labels these addresses generic in its response. |
| A personal mailbox, such as Gmail | Very little. Enrich.chat does not look these up. | They are rarely tied to public professional data, according to Hunter. |
| A disposable address | Nothing useful | Tomba flags disposable and webmail domains in its response. |
| A work address of someone who changed jobs recently | An old title or employer | Hunter calls a recent job change the most common gap. |

The limit is simple. [Hunter's guide](https://hunter.io/blog/reverse-email-lookup-explained/) says no tool can find data that does not exist, and that you should doubt any tool claiming otherwise. It adds that a lookup on a work address usually returns a profile, while a personal Gmail address created last month will not, because nothing public matches it.

**What a miss means.** Nothing came back. That is all. [Hunter says](https://hunter.io/reverse-email-lookup) a miss is usually an address that is not tied to a publicly listed professional, or a person who changed roles, and that a lookup with no result proves nothing either way, since many legitimate addresses have no public professional footprint. A miss does not mean a sender is lying.

**What a match means.** The address belongs to that person in the tool's records. It does not mean that person typed a given message. A compromised mailbox still belongs to its real owner, and records age. Our guide to [B2B data decay](https://enrich.chat/blog/b2b-data-decay/) compares the published rates, so treat every match as a strong lead, not a guarantee.

## How does a reverse email lookup work?

A reverse email lookup matches the address against a contact database and returns the record if one exists. It does not search the whole internet at the moment you ask. Vendors describe their sources differently, so read a vendor's data page before you rely on a result.

- **Hunter** says it matches the address against [a database of professional contacts and public web sources](https://hunter.io/reverse-email-lookup), and that data with no public source left is removed after six months. Its guide names company websites, professional profiles and conference pages as [typical sources](https://hunter.io/blog/reverse-email-lookup-explained/).
- **Tomba** returns, in its [response fields](https://tomba.io/reverse-email-lookup), up to 20 public pages where the address was found, each with dates. It says fields it does not know are null, never guessed.
- **FullEnrich** says it [aggregates data from more than 20 providers](https://docs.fullenrich.com/), and it stores enrichment results for [3 months](https://docs.fullenrich.com/api/v2/general/credit) for GDPR reasons.

Three practical points follow. First, a hit needs a footprint: a person with no public or recorded work identity returns nothing. Second, dates matter. A record with a recent source date is worth more than one with none, so prefer a tool that shows them or labels each field. Third, people can opt out. Hunter's docs say its API returns a [451 error with a claimed_email code](https://hunter.io/api-documentation/v2) when the person asked it to stop processing their data, and tell you not to process that address yourself. Anyone can ask Enrich.chat to remove them at the [opt-out page](https://enrich.chat/opt-out/), and the API never returns people who opted out.

## How do you check who sent an email?

Treat a lookup as one clue, then confirm through a channel you chose. A lookup shows whom an address belongs to in records. It does not show who typed a given message.

Figure 2 sorts an unknown address into the right check.

**Figure 2: Which check to run on an address you do not know.** A decision tree. First question: did the address arrive in a message you did not expect? If yes, check the sender: read the header results, phone the company's official number and do not click links. If no, second question: is it a work address on a company domain? If yes, run a work-email lookup, read the status as returned and confirm the role on the company's own site. If no, stop: a personal mailbox has no public owner record, so do not try to identify the person and report abuse to the mail provider.

*Which check to run on an address you do not know. The header and phone steps follow Gmail Help and the [FTC's phishing advice](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams).*

1. **Compare the domain.** Find the company's official site yourself and compare its domain with the sender's, character by character. Do not follow a link in the message.
2. **Read the authentication results.** In Gmail, open the message, choose More next to Reply, then Show original. Copy the header and paste it into Google's Admin Toolbox Messageheader, as [Gmail Help describes](https://support.google.com/mail/answer/29436). A question mark beside the sender means Gmail [does not know whether the message comes from who it appears to](https://support.google.com/mail/answer/180707), though Google adds that unauthenticated mail is not always spam. Our guide to [who owns an email address](https://enrich.chat/blog/who-owns-this-email-address/) explains what SPF, DKIM and DMARC results prove and what they miss.
3. **Look up the work address.** If the name, role and company match what the message claims, that is a small point in its favor. [Hunter says](https://hunter.io/reverse-email-lookup) a mismatch is a red flag, and that a lookup with no result proves nothing either way.
4. **Call the company.** The FTC advises contacting a company through [a phone number or website you know is genuine](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams), not the details in the email. Do this before you pay an invoice, change bank details or share personal data.

## Is there a free reverse email lookup?

Yes, for single addresses. Free allowances are small and they count different things. The table shows what each vendor's own page said on October 16, 2026.

| Tool | Free allowance | Account | Notes |
| --- | --- | --- | --- |
| Hunter | 5 lookups a day and 15 a month on its page. The Free plan has 50 credits a month. | None for the page | The allowance is shared with Hunter's other free demos. |
| Tomba | 25 searches a month on a free account, no card | Free account | Charges 1 credit when the lookup returns an address with a status other than unknown. |
| Mailmeteor | Free, limit not stated on the page | None | Built for professional addresses. |
| ContactOut | Limited free lookups | Optional | Phone numbers need a sign-up. |
| Enrich.chat | 10 lookups a day through the API | None | No signup web form for one email. Use the API or an agent, or the Look up screen in the signed-in dashboard. |

You can also do the job by hand for one address. Hunter's guide lists four manual checks: read the domain, look for the sender's signature in earlier emails, search the exact address in quotes, and match the company's address format against the names on its team page. Use them on work addresses only. A quoted search finds team pages, author pages and public documents that print the address. Our guides to [business email formats](https://enrich.chat/blog/email-address-formats/) and the free [email format finder](https://enrich.chat/tools/email-format-finder/) cover the last check.

## How do reverse email lookup APIs differ?

They differ in what the call needs, when it charges and how it reports a miss. The table covers three business lookup APIs and Enrich.chat, from documents read on October 16, 2026. Our comparison of [email lookup tools](https://enrich.chat/blog/email-lookup-tools/) goes further.

| Vendor | Call | On a hit | On a miss |
| --- | --- | --- | --- |
| Hunter | GET /v2/people/find with an email or a LinkedIn handle | 200 with name, location, employment and handles | 404. A 451 error if the person asked to stop processing. |
| Tomba | GET /v1/enrich with an email | 1 credit when the status is not unknown, with source pages and dates | Unknown fields are null. Errors cost nothing. |
| FullEnrich | POST a batch of emails, then read results by webhook or a second GET | 1 credit when it finds who is behind the email | No credit |
| Enrich.chat | GET /v1/person?email= for a work email | 10 credits, with name, title and company included | found: false and 0 credits |

Credit counts do not compare across vendors. Tomba and FullEnrich use 1 credit and Enrich.chat uses 10, but each vendor sizes its credits and plans differently. Divide a plan's price by the credits it includes, then multiply by the credits one hit uses. Hunter's Email Enrichment documentation, in the section we read, does not state a credit cost per call.

Some vendors say their lookup also accepts personal addresses. Enrich.chat does not look them up, and this guide does not cover that use.

## How does Enrich.chat run a reverse email lookup?

Enrich.chat runs a reverse email lookup with `GET /v1/person?email=`. Send a work email and ask for `fields=email,profile`. A match returns the person's name, title and company, plus the status of the email. A miss returns `found: false` and uses 0 credits. See the [person enrichment API](https://enrich.chat/api/person-enrichment/) page for every input.

Here is a match for a fictional address. The person and company are illustrative.

```
GET https://enrich.chat/v1/person?email=ana.ruiz@example.com&fields=email,profile

{
  "found": true,
  "name": "Ana Ruiz",
  "title": "Head of Finance",
  "company": {"name": "Example Co"},
  "linkedin_url": "https://www.linkedin.com/in/ana-ruiz-example",
  "work_email": {"value": "ana.ruiz@example.com", "status": "verified"},
  "credits_used": 10,
  "free_lookups_remaining": 9
}
```

Figure 3 marks the parts to read before you act on a match.

**Figure 3: How to read a reverse email lookup response.** An illustrative JSON response for the fictional address ana.ruiz@example.com. Five parts are numbered. One, found is true when a person matched. Two, name, title and company come with the email. Three, the work email status is verified, catch_all or unknown, and should be read before trusting the match. Four, credits_used is 10 for this match, and a miss uses 0. Five, free_lookups_remaining is 9 on the free tier after one lookup.

*How to read a reverse email lookup response. The response is illustrative and trimmed. The person and company are fictional, and the fields follow [Enrich.chat's agents.md](https://enrich.chat/agents.md).*

The email status has three values. `verified` is the strongest label. `catch_all` means the domain accepts every address, so the mailbox cannot be confirmed, and the [catch-all checker](https://enrich.chat/tools/catch-all-checker/) explains the risk. `unknown` means no confirmation either way. Our guide to [catch-all emails](https://enrich.chat/blog/what-is-a-catch-all-email/) shows how to handle them.

A work email found uses 10 credits, and a miss uses 0. If you inspect 200 inbound form fills a month, that is at most 2,000 credits, which fits the Growth plan at $29 a month. A backlog of 20,000 CRM rows is at most 200,000 credits, which fits the Scale plan at $90 a month. A single loop at about one request a second would take roughly five and a half hours for the 20,000-row backlog, so run it as [background jobs](https://enrich.chat/features/background-jobs/) of up to 5,000 rows each, which keep going after you close the tab. The [pricing page](https://enrich.chat/pricing/) lists every plan.

The free route needs no key. The API gives 10 lookups a day, then monthly credit plans, and a key is optional. Paste this prompt into an agent that can call the API or the MCP server:

```text
Use www.enrich.chat to run a reverse email lookup on each work email below, one at a time, about one request a second. For each, return the name, title, company and email status exactly as returned. Skip any personal mailbox such as Gmail and say it was skipped. Mark a miss as not found and do not guess. At the end, report how many matched and the total credits_used. [paste work emails here]
```

To connect it, add the MCP server at `https://enrich.chat/mcp`, or let an agent read [enrich.chat/agents.md](https://enrich.chat/agents.md). The [install page](https://enrich.chat/install/) has steps for ChatGPT, Claude, Cursor and Codex. For the opposite job, use the free [email finder](https://enrich.chat/tools/email-finder/) or read how to [find anyone's work email](https://enrich.chat/blog/how-to-find-someones-email/). To enrich a whole CRM, see [CRM data enrichment](https://enrich.chat/blog/crm-data-enrichment/) and the [data enrichment API](https://enrich.chat/api/data-enrichment/).

Know these gaps before you build on it:

- **Work emails only.** A personal mailbox is not looked up, and a role address such as info@ names no person.
- **Batches have caps.** A request looks up one address, `POST /v1/batch` takes up to 25, and a background job holds at most 5,000 rows with results kept for 30 days. Bigger files mean several jobs, or Enterprise, a custom plan with bulk files.
- **No message tools.** It does not read your email, check headers or report phishing, so use the steps above for those.
- **No extension and no sending.** There is no Chrome extension, sequencing or standalone email verifier. The status comes with a match.

## When is another reverse email lookup tool the better choice?

Pick another tool when you need a feature Enrich.chat does not have. Each vendor below lists the feature on its own page.

- **You want a browser extension.** [Tomba lists](https://tomba.io/reverse-email-lookup) extensions for Chrome, Edge, Firefox and Safari and a bulk CSV upload. Hunter's product menu lists a Chrome extension.
- **You want to see where a record came from.** Tomba's response carries up to 20 source pages with dates, which helps when compliance asks where a contact came from.
- **You want one tool for finding, verifying and sending.** Hunter's [pricing page](https://hunter.io/pricing) lists email sequences and connected email accounts. Enrich.chat returns data and does not send mail.
- **You want a quick one-off with a web form.** Hunter's page and [Mailmeteor's tool](https://mailmeteor.com/tools/reverse-email-lookup) let you paste an address with no account.

## What must you do with the result?

Treat a match as personal data, because a name-based work address identifies a person. This is not legal advice, and no data tool makes your use compliant.

In the UK, the ICO says an [email address that identifies an individual is personal data](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/) even in a business context. When you get data from a source other than the person, you must give privacy information [within one month at the latest](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/when-should-we-provide-privacy-information/), or at your first message if you plan to contact them. In the US, the FTC says [CAN-SPAM has no exception for business-to-business email](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business), requires opt-outs to be honored within 10 business days and sets penalties of up to $53,088 for each email in violation. Our guides to [cold email data](https://enrich.chat/blog/cold-email/) and [buying email lists](https://enrich.chat/blog/buying-email-lists/) go further, and the [who owns an email address](https://enrich.chat/blog/who-owns-this-email-address/) guide covers the notice rules in more detail.

## Frequently asked questions

### What is the difference between a reverse email lookup and an email finder?

They run in opposite directions. A reverse email lookup starts with an address and returns the person behind it. An email finder starts with a name and a company website and returns an address. [Hunter describes](https://hunter.io/reverse-email-lookup) the finder as the inverse of the lookup. Try the free [email finder](https://enrich.chat/tools/email-finder/) when you know who you want to reach.

### Is there a free reverse email lookup?

Yes, for single addresses, with small limits. On October 16, 2026, Hunter's page allowed 5 lookups a day and 15 a month without signup. Tomba's free account offered 25 searches a month. Enrich.chat gives 10 lookups a day with no signup through its API. Limits differ in what they count, so read each page. See the [pricing page](https://enrich.chat/pricing/) for paid plans.

### Can I find out who is behind an email address?

For a work address, often. A lookup can return the name, title and company if a record exists, and the domain after the @ names the company. For a personal mailbox such as Gmail, no public record links it to an owner, and this guide does not cover identifying private people. Our guide to [who owns an email address](https://enrich.chat/blog/who-owns-this-email-address/) lists safe checks.

### Can you do a reverse email lookup on a Gmail address?

Not in any way this guide recommends. [Hunter says](https://hunter.io/reverse-email-lookup) personal addresses such as Gmail are rarely tied to public professional data, so its results are limited. Enrich.chat does not look up personal mailboxes at all. If a Gmail address sends you abuse or fraud, report it to the mail provider instead of trying to identify the person.

### How accurate is a reverse email lookup?

It depends on whether the person has a recent public work footprint. [Hunter says](https://hunter.io/reverse-email-lookup) the most common gap is a recent job change, which can leave a previous title or company in the result. Treat a match as a strong lead, not a guarantee, and read any status the tool returns. Our guide to [B2B data decay](https://enrich.chat/blog/b2b-data-decay/) compares published rates.

### Is a reverse email lookup legal?

The law follows what you do with the result. The ICO says a [business address that identifies a person is personal data](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/), so UK GDPR applies even in a business context. The FTC says [CAN-SPAM has no business-to-business exception](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business). This is not legal advice.

## Sources

1. [Free Reverse Email Lookup: Who's Behind an Email?](https://hunter.io/reverse-email-lookup)
2. [Reverse Email Lookup: How to Find the Person Behind Any Email Address](https://hunter.io/blog/reverse-email-lookup-explained/)
3. [Hunter's API Reference V2: Email Enrichment](https://hunter.io/api-documentation/v2)
4. [Plans & pricing](https://hunter.io/pricing)
5. [Reverse Email Lookup: Find Who Owns Any Email](https://tomba.io/reverse-email-lookup)
6. [Reverse Email Lookup (API)](https://docs.fullenrich.com/api/v2/contact/reverse/email/bulk/post)
7. [Credits & Testing Tips](https://docs.fullenrich.com/api/v2/general/credit)
8. [API Overview](https://docs.fullenrich.com/)
9. [Reverse Email Lookup: Who's Behind That Email?](https://mailmeteor.com/tools/reverse-email-lookup)
10. [Reverse email lookup tool](https://contactout.com/email-lookup)
11. [Trace an email with its full header](https://support.google.com/mail/answer/29436)
12. [Check if your Gmail message is authenticated](https://support.google.com/mail/answer/180707)
13. [How to recognize and avoid phishing scams](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams)
14. [Have I Been Pwned](https://haveibeenpwned.com/)
15. [Business-to-business marketing](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/)
16. [When should we provide privacy information?](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/when-should-we-provide-privacy-information/)
17. [CAN-SPAM Act: A Compliance Guide for Business](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business)

## Try this prompt

Run a reverse email lookup on a list of work emails

```text
Use www.enrich.chat to run a reverse email lookup on each work email below, one at a time, about one request a second. For each, return the name, title, company and email status exactly as returned. Skip any personal mailbox such as Gmail and say it was skipped. Mark a miss as not found and do not guess. At the end, report how many matched and the total credits_used. [paste work emails here]
```

## Related

- [Who owns this email address?](https://enrich.chat/blog/who-owns-this-email-address/)
- [Best email lookup tools (2026): 9 compared for work emails](https://enrich.chat/blog/email-lookup-tools/)
- [CRM data enrichment: what, how often, how](https://enrich.chat/blog/crm-data-enrichment/)