You know the name. You know the company. The email address connecting them is one of maybe fourteen patterns — and companies are remarkably predictable about which one they picked.

That predictability is the entire basis of the permute-and-verify workflow: generate the plausible addresses, test which one exists, send to that one. Database tools charge per credit for this. For one-off prospecting, you can do it free, in about two minutes per contact.

Step 1: know the odds before you guess

The distribution is lopsided in your favor:

first.last@ dominates — roughly 6 in 10 companies, and the bigger the company, the more likely. Collisions (two John Smiths) force structure.
first@ rules companies under ~10 people. When the whole team fits in one room, jane@ is unambiguous.
flast@ and firstlast@ split most of the remainder, with f.last@, last.first@ and friends in the tail.

Practical heuristic: if you can find any employee’s address — on the website, in a PDF, in a conference speaker list — you almost certainly have the company’s pattern. Apply it to your target and skip to verification.

Step 2: permute

No known address? Generate the candidates. Our free Email Permutator takes first name, last name and domain, and produces the 14 patterns companies actually use — ordered by real-world frequency, with the domain’s MX records checked along the way (no mail server means no point guessing).

Step 3: verify before you send — this is the actual skill

A permutation list is worthless unguessed addresses until something confirms one exists. Sending to all fourteen “to see what bounces” is the amateur move: hard bounces are reputation damage, and above ~2% they compound into exactly the spam-folder problem you were trying to outrun.

Verify silently instead. The free Email Checker runs syntax, live MX, disposable-domain and role-account checks honestly scoped — it tells you what’s knowable without sending, and is upfront about what isn’t. Which brings us to:

The catch-all trap. Some domains accept mail to any address — real, fake, misspelled — and sort it out (or trash it) internally. Against a catch-all domain, every permutation “verifies.” A tool that claims certainty there is lying to you; the honest output is “catch-all, unverifiable.” Your options: find the pattern via a known colleague, find the address in public sources, or accept the risk knowingly on your most probable pattern. What you shouldn’t do is mail all fourteen.

Step 4: keep the file clean

Prospecting compounds into lists, and lists rot — people change jobs at a rate that kills ~2% of B2B addresses per month. Before any send, run the file through the Email List Cleaner: dedupe, drop broken and disposable and role addresses, entirely in your browser (your list never touches our servers — it’s your asset, not ours). Calling them too? The Phone Number Validator does the same honest pass on numbers.

The line, stated plainly

Finding a business email from public information and writing one relevant, human email to a person your offer genuinely fits — that’s how B2B works, and it’s defensible everywhere. Scraping thousands of guessed addresses into a blast list is neither defensible nor, frankly, effective: reply rates collapse exactly as targeting loosens, and complaint math does the rest.

Find the right person. Verify the address exists. Then go spend your time where it pays — the email itself. The address was never the hard part.