Clay logo, go to homepage

Clay GTM guide

How to Find Work Email Addresses at Scale: A Step-by-Step Guide

Finding one person's work email is a two-minute job. Finding 5,000 verified work emails is not the same job done 5,000 times. It is a different problem with a different answer.

May 20, 202611 min read

The bottleneck at scale is never the lookup itself, it is coverage and deliverability: how much of your list you can actually reach, and how much of what you find survives contact with a mail server.

An SDR hunting emails by hand spends 45 to 60 minutes per hundred contacts, opening profiles, running searches, and copying fields into spreadsheets, and still misses 30 to 40% of the list. A Clay workflow doing the same work runs overnight, covers 85 to 95% of the list, and validates every result before anything ships. Same contacts. Different time, different coverage. This is how to build it.

What you need before you start

A Clay account. A list of companies or contacts to work from: a CRM export, an Apollo list, a saved prospecting search, or a list you build using Clay's Find Companies. The workflow works whether you are starting from scratch or enriching existing records.

Step 1: Gather your corner pieces before touching enrichment

Clay's enrichment architecture follows what the team calls the Jigsaw framework. You build a jigsaw from the corners inward. Email finding works the same way: a few starting inputs act as corner pieces that unlock everything else. Skip them and most enrichments fail or come back half-filled.

For work emails, the corner pieces are a full name, a company domain, and a professional profile URL where you can get one. The domain is the input that matters most. It is what email providers use to construct and verify the address. Without a domain, most providers guess or return nothing. With one, even providers that cannot find the exact email can infer the format (firstname.lastname@ or f.lastname@) and check whether a constructed address is likely to exist.

Toggle inputs on and off to see which enrichments each one unlocks

Contact record

Alex Kim

Northwind Labs

Company domain
Professional profile URL
First nameLast name

Available enrichments

Waterfall unavailable

Toggle a starting input on the left to see what it unlocks. A company domain opens the email waterfall.

Starting inputs determine what enrichments are available. A company domain alone opens the email waterfall, but adding a professional profile URL significantly improves accuracy and coverage.

So when you build your contact list, prioritize records that carry both a company domain and a professional profile URL. If you start from a company list and use Find People to pull contacts, Clay returns professional profile URLs for most results. Those become your corner pieces for the email waterfall that follows.

Step 2: Build your contact list using Find People

If you already have contacts with names and domains, skip to Step 3. If you start from a company list and need to find the right people at each company first, this is where you do that.

In Clay, open your company table, click Actions, and select "Find People at These Companies." The modal lets you define target personas by job title, function, seniority level, and location. For most outbound workflows, you want the specific decision-maker or practitioner who feels the problem your product solves. A broad "find all employees" search just buries you in enrichment work downstream.

On title filtering: lead with function-level filters ("Revenue Operations," "Sales") paired with seniority tiers (Director and above, or Manager and above) rather than exact job titles. Exact titles miss variation. "Head of RevOps" and "VP of Revenue Operations" are the same role under two names, and a title-only filter quietly drops one of them.

On volume: Clay caps Find People results per company. Most workflows want 1 to 3 contacts per company, ranked by seniority. Set the result limit so you are not enriching the wrong people before you have any email coverage data. The output is a people table where each row carries a full name, a professional profile URL, and the company domain pulled from the parent table. Those three fields are your corner pieces for the waterfall.

Step 3: Run the multi-provider email waterfall

This is where single-provider approaches break. No provider covers your whole list. Clay's own data tests, run across thousands of real B2B contacts, put the best individual work email providers somewhere between 52 and 90% coverage depending on the provider and the market. A waterfall sequences those providers so that when one comes back empty, the next one runs automatically, and Clay charges credits only for the provider that actually returns a result. The interaction below stacks them one at a time so you can see what each contributes.

Add providers one at a time and watch coverage grow

0%

covered

$0

per 1,000

avg quality

Infer Email+31% · free
Findymail+59% · $0.50
Hunter+3% · $0.40
Wiza+2% · $1.00
Enrow+2% · $0.20

No single provider covers your list. The top provider alone misses 10 to 48% of contacts. Stacking three providers in a waterfall reaches 90 to 95% coverage while paying only for successful matches.

To set up the waterfall in Clay, click Add Enrichment, search for "Work Email," and you will see a pre-configured waterfall. The default order is optimized for coverage. You can add, remove, or reorder providers depending on your priorities: lead with the highest-coverage provider (Findymail) when maximizing list completeness, or lead with the most cost-efficient provider (Enrow) when running high-volume campaigns where partial coverage is acceptable.

When one provider doesn't have it, Clay automatically checks the next one. It really helps our inbound and outbound motions because we can leverage the best source of data. I've never seen a tool that was so easy to do this process.

Clay's Work Email Waterfall cascades across 100+ providers in sequence and stops the moment it finds a valid result. You pay only for the provider that succeeds.

Step 4: Validate for deliverability before your list ships

Finding an email and having a deliverable email are not the same thing. Catch-all domains, where the mail server accepts everything regardless of whether the specific mailbox exists, make up a meaningful share of results from any waterfall. These addresses look valid and bounce anyway. Clay can validate emails inside the waterfall by setting an optional Validation Provider, which adds a validation column after each provider step. You then pick a Validation strategy, Conservative, Balanced, or Aggressive, and choose whether to require validation success. The validation mode you choose is what actually moves your usable list size and your deliverability risk.

Choose your validation mode and see the tradeoff

950/ 1000 usable
Safe to send: 680Catch-all: 220Risky: 50Suppressed: 50

Projected bounce

3-6%

Domain health

Best for: Warm domains with established sending history and tolerance for some bounces.

Catch-all emails look valid but may bounce. Choosing safe-to-send only reduces your list by 20 to 30% but protects your sending domain from reputation damage.

For catch-all verification specifically, Clay's data tests put Findymail in front at 94.99% quality with 100% coverage at $0.30 per lookup. When you need to confirm whether a catch-all address is genuinely deliverable, a second validation pass through Findymail or Listmint after the waterfall reclaims emails that conservative mode would otherwise suppress.

80%+

Enrichment coverage Vanta hit after switching to Clay's multi-provider waterfall, adding over 1,000 newly enriched contacts to their database every month.

A global list and a European list want different waterfall orders. If yours includes European contacts, use Clay's European-specific benchmarks: BetterContact performs best for EU markets at 91% quality with 90% coverage, while Hunter leads on quality at 95.91% but reaches only 55% of European contacts. Order the providers for the geography you are actually working.

Step 5: Enrich the full contact record beyond email

An email address gets your message delivered. The rest of the contact record decides whether the message is worth opening. Once you have a verified email, the same corner pieces (domain plus professional profile URL) unlock a full enrichment pass.

  • Job title and seniority tier: The contact's role and how senior they are, which shapes message framing.
  • Time in current role: New hires are often evaluating vendors; long-tenured contacts have established relationships with incumbents.
  • Company firmographics: Headcount, industry, and funding stage for relevance and segmentation.
  • Tech stack: What tools they currently use in your category, for a stronger opening line.

For the email itself, run a role-based check before the list enters a sequence:

AI formula: Email type classifier
Given this email address: {{email}}And this contact's job title: {{job_title}}Classify the email:{  "domain_type": "work / free / unknown",  "is_role_based": true/false (info@, contact@, support@, sales@, admin@, etc.),  "should_suppress": true/false,  "reason": "one sentence"}Rules:- Role-based emails (info@, contact@, hello@, support@) rarely reach a specific person- Free provider emails (gmail, yahoo, hotmail) may be personal accounts- Suppress role-based and free emails for B2B outbound unless explicitly neededReturn JSON only.

Role-based emails land in inboxes that several people watch and nobody owns. They almost never belong in personalized outbound. Filtering them before enrollment takes about five minutes to set up and heads off one of the most common deliverability complaints.

Step 6: Keep emails fresh with scheduled re-verification

A list of verified emails today is not a list of verified emails in six months. About 28% of professionals change jobs each year, so roughly 2 to 3% of any email list goes invalid every month. Run for 12 months with no re-verification and an estimated 25 to 35% of your verified contacts will have bounced or gone stale.

Scrub the timeline to see how quickly an email list decays

No re-verification

100%

With re-verification

100%

Month

0

Month 0Month 24

Main cause at month 0

Job changes

Recovered by re-verification

~0 of 1,000 contacts kept deliverable

Email lists decay at roughly 2 to 3% per month. After 12 months, nearly a third of verified contacts will have invalid addresses without re-verification.

To automate re-verification in Clay, build a dynamic filter in your CRM or Clay table for contacts whose "last enrichment date" is more than 30 to 60 days old. Import that list into a Clay table on a schedule and re-run the work email waterfall. The waterfall spends Data Credits only on the provider that returns a match, so re-running a stable list uses fewer Data Credits than the first pass. Actions, which cover the orchestration per row, still accrue.

For contacts who have changed jobs, Clay's job change signals flag them before your bounce rate climbs. When a contact's professional profile shows a new employer, the old work email is almost certainly dead, and catching that proactively keeps the stale record out of your sequencer.

Common failure modes

  • Starting without a company domain: The waterfall runs far worse without a domain. If all you have is a name, infer the domain first with Claygent or Clay's Find Companies before you run email enrichment.
  • Running enrichment on an uncleaned list: Inconsistent company name formats break domain lookups. Run company name normalization (credit-free in Clay) before the waterfall.
  • Skipping validation for bulk outreach: Sending to unvalidated emails at volume trips bounce thresholds that damage domain reputation. Always validate before shipping to a sequencer, especially on a new sending domain.
  • Not filtering role-based emails: info@, contact@, and support@ addresses show up in enrichment results and read like real work emails. They are not. Run the email type classifier before enrollment.
  • Treating the list as permanent: The most common mistake after an initial run. Emails decay. Building a quarterly re-verification cadence in from the start is far less disruptive than discovering a stale list mid-campaign.

Find verified work emails for your entire prospect list, not just the easy ones

Clay's multi-provider waterfall covers 90 to 95% of contacts and validates every result before it ships.

Frequently asked questions

What is the most accurate way to find someone's work email address?

The most accurate method is a multi-provider waterfall: run the contact's name and company domain through several email providers in sequence, stopping when one returns a verified result. No single provider covers every contact. The best individual providers reach 52 to 90% of a list, while a three-provider waterfall typically reaches 90 to 95% coverage. Clay's waterfall sequences 100+ providers and charges credits only for the provider that finds a match, so wider coverage does not mean proportionally higher cost.

How do I find a work email address from a name and company only?

In Clay, name plus company name gives you enough to find the company domain through Find Companies or Claygent. Once you have the domain, the email waterfall can run. The Infer Email option (free) constructs the likely email format from name and domain pattern and achieves roughly 31% coverage before any paid providers run. Adding a professional profile URL significantly improves accuracy and boosts coverage to 90%+.

What is the difference between a catch-all email and a verified email?

A verified (safe-to-send) email is one where the receiving mail server has confirmed the specific mailbox exists. A catch-all email comes from a domain configured to accept all incoming mail regardless of whether the individual mailbox exists, so the address looks valid but the specific person's inbox may not. Catch-all emails carry higher bounce risk. For cold outbound on new sending domains, use conservative (safe-to-send only) validation mode. For warm domains, balanced mode reclaims catch-all emails while keeping bounce rates manageable.

How do I find work emails in bulk without violating data privacy rules?

Clay's email finding workflow uses B2B contact data from established commercial providers who collect and license professional contact information. This is standard in B2B outreach and differs from scraping personal inboxes or consumer databases. For European contacts, ensure your workflow and outreach comply with GDPR requirements, which include having a legitimate interest basis for B2B prospecting. Clay's European data test recommends BetterContact (91% quality, 90% coverage) for EU markets where GDPR-compliant providers are preferred.

How often should I re-verify my email list?

For active outbound lists, every 30 to 60 days. For CRM records of contacts not currently in an active outreach sequence, every 90 days. The practical trigger is job change data: when Clay signals that a contact has moved to a new company, re-verify their email immediately rather than waiting for the scheduled cadence. With scheduled imports in Clay, this can be fully automated using a dynamic CRM list filtered by last enrichment date.