X (still "Twitter" to most people searching for this) is full of founders, engineers and operators talking in public about what they're building, what's broken, and what they're hiring for. For B2B sales that's a great source of signals. The catch is that a handle and a bio aren't a way to start a real conversation. At some point you want an email address.

This guide covers eight manual ways to find the email behind an X profile, what each one is good for, and how to run the same process for hundreds of profiles at once without scraping X yourself.

Quick overview: the methods compared

Why bother finding emails from X profiles

People on X share things they would never put on a LinkedIn profile: the tool they just ripped out, the migration that's going badly, the team they're about to hire, the launch they're nervous about. When someone posts about a problem you solve, that's a buying signal, and it's time-sensitive.

You could reply in public or send a DM, and sometimes that's the right move. But replies are noisy, DMs from strangers often land in a filtered requests folder, and neither is a good place to send a proposal or book a meeting. Email is where business conversations tend to happen, and an email that references what the person actually posted is far more relevant than a cold message built from a job title alone.

The problem is that X doesn't expose email addresses. Most people don't list one publicly, and doing research by hand stops being practical after the first twenty profiles.

8 ways to find an email address from an X profile

1. Check the bio and pinned post

Start with the obvious. Look for:

• An email written out, often disguised as "name [at] company [dot] com" to dodge scrapers

• Link-in-bio pages (Linktree, Carrd, Bento) that include a contact link or form

• A newsletter link, since the sender address is often a real inbox

• A pinned post that says something like "for business inquiries, email..."

Creators, consultants and solo founders list contact details far more often than employees at large companies. Adjust your expectations to the audience.

2. Visit the linked website

If the profile links to a personal site or company site, that's often the best lead. Check the contact and about pages, the team page, the footer, and any press or media kit page. On a company site, even a generic address like hello@ tells you the domain, which you need for method 3.

3. Use a name + domain email finder

Once you know someone's full name and the company domain, email finders can usually return the address. They look up known addresses in their own data, work out the company's email pattern (firstname@, firstname.lastname@, and so on), and verify the result. Options that are still active include Hunter, Snov.io, FindThatLead, Prospeo and Icypeas. (Clearbit Connect, which older guides recommend, was shut down in April 2025 after HubSpot folded Clearbit into Breeze Intelligence.)

Coverage is best for employees of established companies with consistent email formats and weakest for tiny startups, freelancers and people using personal domains. Different finders cover different people, so if one comes up empty, another often won't.

4. Cross-reference with LinkedIn

Many people who post on X also have a LinkedIn profile with a clearer employer, job title and sometimes a website. Search LinkedIn for the name from the X bio plus the company. Once you have the LinkedIn URL, you can use it as the input for an email finder, and many providers match LinkedIn URLs more reliably than names. The downside is time: you're now researching the person on two platforms. For more on this route, see our LinkedIn email finder guide.

5. Search their posts for an email

People occasionally post their email when they launch something, look for collaborators, or share speaker and press info. X's search supports operators, so try something like:

from:username (email OR "reach me" OR "DM or email" OR "@gmail.com")

from:username (email OR "reach me" OR "DM or email" OR "@gmail.com")

from:username (email OR "reach me" OR "DM or email" OR "@gmail.com")

from:username (email OR "reach me" OR "DM or email" OR "@gmail.com")

Swap in the company domain if you know it. It's slow and usually finds nothing, but when it works you get an address the person explicitly chose to share.

6. Look up the domain registration

If the person owns a personal domain, the registration record used to show the owner's email. Since GDPR, most registrars redact registrant details by default, so WHOIS and RDAP lookups rarely return a usable address anymore. It's worth ten seconds for an old personal domain and not much more.

7. Use Google search operators

Google indexes podcast show notes, conference speaker bios, guest posts and GitHub profiles, which often include an email that never appears on X. Try queries like:

• "Firstname Lastname" "@companydomain.com"

• "xhandle" email OR contact

• "Firstname Lastname" speaker OR podcast "email"

8. Just ask

Sometimes the simplest approach works. If you've replied to their posts or they follow you, a short DM that references something specific is reasonable:

"Your thread on moving off Segment was useful, we went through the same thing last year. I've got a short write-up on what we'd do differently. Okay if I email it over?"

Keep it short, make the reason specific, and don't pitch in the DM. A yes also means the person expects your email, which helps it get read.

Why manual research stops working at scale

These methods are fine for five high-value prospects. They fall apart for a list of 300 people who engaged with a competitor's launch post. At a few minutes per profile, that's a couple of days of research, with results scattered across tools, no consistent verification, and nothing but an email address at the end.

You also shouldn't solve this by pointing a scraper at X. X's terms prohibit crawling or scraping the service without prior written consent, and accounts used for scraping get limited or suspended. The practical approach is to collect the handles yourself (from your own followers, a list you curate, or people engaging with relevant posts), then enrich them through data providers instead of running your own scraper from your account.

Finding emails for a list of X profiles with Databar

Databar is a data enrichment platform with spreadsheet-like tables and access to 160+ data providers. Here's the workflow for turning a list of X handles into verified, enriched contacts.

Step 1: Load your handles

Create a table and import your list of X usernames or profile URLs from a CSV. Keep the format consistent: either all handles without the @, or all full profile URLs.

Step 2: Pull the profile details

Add an enrichment that returns profile data by handle: display name, bio, location, website link and follower counts. The name, bio and link are what you need for everything after this. If bios are messy (a nickname instead of a name, the company mentioned only in passing), the AI Researcher can read the bio and linked site for each row and pull out a clean full name and employer using a prompt you write.

Step 3: Find the email with a waterfall

With a name and company for each row, add an email waterfall. It tries several email-finding providers in order and stops at the first valid result, so you're not stuck with one database's coverage. If you've matched people to LinkedIn URLs, you can run a waterfall on the LinkedIn link instead, which usually matches more reliably. More on how that ordering works in how waterfall enrichment works.

Step 4: Verify deliverability

Run email verification on the results (Databar includes verifiers such as ZeroBounce, Bouncer and Emailable). Drop invalid addresses, and decide how you want to handle catch-all domains before you upload anything to your sending tool. Sending to unverified addresses is the fastest way to damage your domain's reputation.

Step 5: Add context for personalization

An email alone isn't much to write to. Add a person lookup by email to get job title, company size and industry, so you can segment the list and write different openers for a founder and a staff engineer.

Step 6: Send it where you work

Sync the finished table to HubSpot or Salesforce, or export it as a CSV for your sequencing tool. Keep the X handle and a note on why each person is on the list, because that's what makes the first email relevant.

You're charged for results, not for lookups that return no data, which matters here because some share of X handles will never resolve to a real person. Paid plans start at $99/month, and you can test this workflow on your own list with the 14-day free trial.

Best practices for outreach to X contacts

Reference what they actually said. The reason to source prospects from X is context. Mention the specific post, the problem they described, or the thing they launched. "I saw your profile on Twitter" is worse than no reference at all.

Move quickly on fresh signals. Someone complaining about a vendor today may have signed with a replacement next month. Launches, hiring posts and public frustration are worth acting on within a few days.

Don't be creepy. Referencing a public post about their work is fine. Referencing personal posts, family, or anything that makes it obvious you read their whole timeline is not.

Stay compliant. Include a clear opt-out and honor it. If you're emailing people in the EU or UK, you need a lawful basis (usually legitimate interest, with a documented assessment) and you should tell people where you got their details if they ask. For a broader look at using social platforms in your sales process, see our guide to social selling for B2B teams.

FAQ

Can you find someone's email from their Twitter account?

Often, but rarely from X itself. The email usually comes from their linked website, an email finder using their name and company, or a LinkedIn match. X doesn't show email addresses on profiles unless the person writes one into their bio or a post.

Is it legal to find someone's email from X?

Finding a publicly available business email for B2B outreach is legal in most places, but how you collect it and how you use it matter. Don't scrape X against its terms, follow CAN-SPAM in the US and GDPR in the EU and UK, and give recipients an easy way to opt out.

Do I need the person's full name?

For most email finders, yes, plus a company or domain. A handle alone rarely maps to an email unless it matches their professional address. That's why the workflow above starts by pulling a name and employer from the profile.

Should I tell people I found them on X?

Usually yes. Mentioning the post that caught your attention explains why you're writing, and it tends to read as more relevant than a message with no context.