Every outbound programme eventually hits the same wall: you know exactly which business you want to talk to, and you have no way to reach them.

There are seven reliable ways through that wall. They are not equally good, so they are listed here in the order you should try them, with an honest note on where each one fails.

1. The company website

Obvious, and still the best. A business that wants customers publishes a way to be contacted, and that address is current because they maintain it.

Where to look, in order: the contact page, the footer, the about or team page, the imprint or legal notice page (a legal requirement in much of Europe and a reliable source of a real address), and the privacy policy, which frequently contains a data protection contact.

Fails when: the site only has a contact form. See method 6.

2. Live map and directory listings

For local and regional businesses this is the highest-yield source there is, and it is chronically underused because doing it by hand is tedious.

Business listings on maps and directories carry the name, category, address, phone number, website and often an email, and the owner keeps them current because that is how customers find them. Trade association directories and industry bodies are even better: membership implies both legitimacy and budget.

The tedium is the only real obstacle, and it is a solved problem. Live discovery queries these sources by category and radius and returns structured records in minutes rather than an afternoon.

Fails when: you are selling to large corporates, who are not listed this way.

3. Any prior correspondence

Vastly underrated. Search your own inbox before you search anything else.

If they ever emailed you, quoted you, invoiced you, replied to a newsletter, registered for a webinar or asked a question two years ago, you already have a verified address and a legitimate reason to be in touch. Same for your CRM, your support tool and your accounting system.

Fails when: you have no history with them, which is most of the time, but the hit rate when you do have history is far higher than any cold source.

4. Public professional profiles and company pages

Team pages, professional networks, conference speaker bios, published papers, press releases and podcast appearances routinely include a contact address, and they also tell you the person's exact role, which matters more than you might think for the first line of your email.

Fails when: the profile lists a personal address rather than a business one. Skip those. A business email for a business purpose is a defensible position; a personal address is not.

5. Where they publish, not where they live

Businesses leave contact details in places nobody thinks to check: job adverts (recruiting@ and hiring managers), supplier and partner pages, procurement portals, planning applications, licensing registers, review site responses and support documentation.

A job advert in particular is a gift. It tells you what they are struggling with, when they started struggling, and who to talk to about it.

Fails when: nothing, really. This is just legwork, and it is the method your competitors are not using.

6. The contact form, used properly

Most people treat a contact form as a dead end. It is not, it is just a lower-leverage channel with one large advantage: it is unambiguously an invitation to make contact.

Use it when the business is small enough that a human reads it, keep the message to three lines, and ask a question rather than pitching. The reply comes from a real mailbox, which is method 3 for next time.

Fails when: the business is large enough that the form feeds a ticketing queue.

7. Pattern guessing, with verification

Company email addresses follow a small number of patterns:

PatternExampleRough frequency
first.last@anna.silva@company.comMost common
first@anna@company.comCommon in small businesses
flast@asilva@company.comCommon in North America
firstl@annas@company.comLess common
first_last@anna_silva@company.comRare

Find one known address at the company and you have the pattern for everyone else. That is the legitimate use of this method.

The illegitimate use is generating five variations and sending to all of them to see which sticks. Four of them bounce, your bounce rate climbs past the threshold where providers start filtering you, and you have traded a slightly larger list for a materially worse ability to reach anyone at all.

Rule: never send to a guessed address without verifying it first.

Verification is not optional

This is where most of the damage in outbound happens, so it is worth being blunt about it.

An unverified list has three costs. Bounced messages, obviously. But also a bounce rate that signals to providers that you obtained your data carelessly, and a real chance of hitting a spam trap, which is an address that exists purely to catch senders who did not collect data properly.

Verification checks whether the domain accepts mail and whether the specific mailbox exists, without delivering anything. It takes seconds per address in bulk, it costs a fraction of a cent, and it is the single highest-return habit in cold outreach.

The rules are simple:

  • Verify every address before its first send, not just guessed ones.
  • Remove anything flagged invalid. Do not send anyway to check.
  • Treat "risky" or "catch-all" results as a judgement call: fine for a small, well-targeted campaign, not for volume.
  • Re-verify anything older than about six months. Business email decays at roughly 25% a year.

Platforms that verify at the point of sending and simply skip anything invalid remove the discipline problem entirely, which matters because the discipline problem is the real one.

The order to work in

  1. Check your own history first. Free, verified, warmest.
  2. Check the company's own published sources: site, listing, imprint.
  3. For local businesses, harvest listings systematically instead of one at a time.
  4. For corporates, find one real address, derive the pattern, verify each derivation.
  5. Verify everything.
  6. Re-verify anything you have been sitting on.

And one last thing that is easy to lose sight of: the address is the cheap part. Knowing what to say when you have it is the expensive part, and no amount of contact data will substitute for having something worth saying.