How do I find email addresses for cold outreach?

There are a lot of ways to find email addresses for cold outreach. They vary significantly in quality, compliance risk, and what they actually cost you in deliverability terms. Here's an honest look at each.

Websites and public directories. Company websites, press releases, LinkedIn, and industry directories are the most defensible sources. The contacts opted into being public. They haven't been scraped and resold 40 times. Response rates are typically better because the prospect is actually a real person in a relevant role.

Data enrichment tools. Tools like Hunter.io, Apollo, Lusha, and Clay aggregate contact data from public sources and first-party data partnerships. They're faster than manual research and generally higher quality than bulk list providers. The tradeoff: data decays quickly (especially in B2B), so always verify before sending at volume.

LinkedIn. Sales Navigator exports and tools that pull LinkedIn contacts are common in B2B outreach. Useful for role-based targeting. Be aware that LinkedIn's terms prohibit bulk scraping, and some third-party tools operate in a legal gray area here.

Purchased or rented lists. These carry the highest risk and lowest quality. They typically contain outdated addresses, spam traps, and people who never agreed to hear from you. Under GDPR, purchasing contact data without verifiable consent is a compliance problem, not just a deliverability one. We'd recommend avoiding them entirely for EU contacts and treating them with extreme caution for US-only sends.

Whatever your source, verify addresses before sending. A list with even 5% invalid addresses will generate enough hard bounces to damage your sender reputation quickly. Our free list validation catches invalid addresses, spam traps, and high-risk contacts before they cost you. (If you've already bought a list, validate it before your first send.)