You have a pitch. However, you need the CEO’s direct email and mobile, not the info@ address. Meanwhile, the CEO’s LinkedIn profile shows no contact details, the About page lists only the CMO, and your SDR tool says “no match found.” So what do you do, give up?

No. To find CEO email addresses and direct dials, you need a layered approach rather than a single silver-bullet tool. In fact, the seven methods below, ranked by speed and reliability, cover every scenario from a Fortune 500 CEO to a seed-stage founder. Plus, they work whether you’re prospecting one account or a hundred.

This tactical guide is built for founders, agency owners, and anyone doing founder-led or agency-led outbound. You’ll see the exact method to use for each scenario, the mistakes that burn credits and time, and a decision table that matches method to CEO type.

Quick Take (For the Busy Reader)

• CEO contact data has the highest churn rate of any professional group. So freshness matters more than raw database size.
• Paired voicemails and emails double reply rates from 2.7% to 5.87% LeadIQ. In other words, multi-channel beats single-channel for CEO outreach.
• CEOs spend roughly 24% of their time on email, so a well-crafted message does get read.
• Email pattern guessing works for ~70% of mid-sized company CEOs, but fails for enterprise execs who have custom formats.
• Waterfall enrichment tools hit 80%+ match rates on CEO LinkedIn URLs; single-source tools cap around 40-60%.

Why CEO contact info is harder to find

First, a quick frame. CEOs sit at the top of the gatekeeping pyramid. Plus, they change roles faster than mid-level managers, which drives up data decay. Meanwhile, larger companies actively scrub CEO contact info from public-facing sources.

In fact, enterprise CEOs tend not to reveal their contact details on LinkedIn and have gatekeepers who filter sales pitches. So the method that works for a $200M enterprise CEO differs from what works for a seed-stage founder.

However, the upside is real. A CEO who opens your message can say yes without running it past procurement. In contrast, a VP has to sell the idea up the chain. So the ROI per CEO conversation is much higher than per mid-manager conversation.

The 7 methods to find CEO email and phone

Here are the seven methods, ranked roughly by speed. Slower doesn’t mean worse. Some methods hit higher accuracy at the cost of manual work.

Method 1: SEC filings and investor relations pages

First, for public companies, SEC filings are a goldmine. Proxy statements, 10-Ks, and 8-Ks often list the CEO’s direct or executive office phone and email. Plus, investor relations pages on the company website sometimes link to an executive contact form.

For instance, Edgar (sec.gov/edgar) lets you search any public company’s filings. Then, the proxy statement (DEF 14A) usually has the clearest executive contact details.

This method is free, fast, and totally legitimate. However, it only works for public companies.

Method 2: Company website deep dive

Next, smaller company CEOs often list their email right on the site. Start with these five places:

• About page or team page
• Press or news page (author bios often include email)
• Contact page
• Blog posts written by the CEO (author byline)
• Job listings (CEO sometimes signs them personally at startups)

Plus, check PDFs linked on the site. Whitepapers, investor decks, and press contact sheets often print email addresses in headers or footers that scrapers miss.

Method 3: Podcast and conference appearances

Then, CEOs who do podcasts or speak at conferences often have contact info on those platforms. Podcast show notes frequently list speaker emails or websites. Meanwhile, conference speaker pages sometimes show email directly.

Also, watch the end of podcast episodes. Many CEOs say “reach me at [firstname]@[domain]” at the signoff. So a 2-minute listen to a recent episode can surface the pattern.

Method 4: Email pattern guessing + verification

After the free methods, pattern guessing works for most mid-sized companies. Start with the three most common patterns:

• firstname@company.com (common for founders and startups under 100 employees)
• firstname.lastname@company.com (common for companies over 500 employees)
• firstinitial+lastname@company.com (common for 500-5,000 employee range)

Then verify each guess with a free verifier like Hunter or MailTester. If one returns valid, you’ve likely got it.

However, enterprise CEOs often have custom formats (ceo@, [firstname].[lastname].executive@, etc.) to filter cold outreach. So patterns fail above a certain company size.

Method 5: LinkedIn profile and direct message

Meanwhile, LinkedIn works if the CEO is active there. Search the company on LinkedIn, filter by title, open the profile, and check the Contact Info section. Some CEOs list a personal email there.

If the email isn’t public, send a short connection request or InMail asking for the best way to reach them. Plus, a Google operator trick helps:

site:linkedin.com/in/ "Company Name" AND ("CEO" OR "Founder")

This surfaces the exact LinkedIn profile even when LinkedIn’s own search throws noise.

Method 6: Waterfall contact tool with LinkedIn URL input

Then, for speed at scale, a waterfall enrichment tool beats every manual method. Paste a LinkedIn URL and get back verified email and direct dial in seconds. Waterfall tools query 7-20+ data sources in sequence, so match rates hit 80%+ even for senior roles.

For instance, ReachFast accepts a LinkedIn URL or CSV upload, runs a 7+ source waterfall, verifies every email and phone in real time at export, and returns 97%+ email accuracy with 92%+ direct dial accuracy. Plus, credits refund on their own when data is bad. So for founders and agency owners chasing CEO outreach across many accounts, the unit economics work: $39.99/month for 1,000 credits and 100 phone numbers, plus 5 free verified contacts on signup.

Method 7: Warm intro through a mutual connection

Finally, the highest-response method is always a warm intro. Check LinkedIn for shared connections, or scan your CRM for anyone who’s worked with the CEO before.

Then send a short intro request to the mutual contact. Keep it under 100 words, explain the ask, and offer to draft a blurb. A warm intro from a trusted peer converts at 10-15x the rate of cold outreach.

However, this method doesn’t scale beyond a handful of accounts per week. So use it for your top 10-20 priority CEOs and lean on Methods 4-6 for the rest.

Which method fits which CEO scenario?

Match your approach to the type of CEO you’re chasing.

Your CEO target	Best method	Backup
Fortune 500 public company CEO	SEC filings + waterfall tool	Warm intro
Mid-market CEO ($50M-$500M revenue)	Waterfall tool + pattern guessing	Company website
SaaS founder / seed-Series B	Company website + LinkedIn	Podcast appearances
Solo founder / bootstrapped	Company website + Google search	Direct LinkedIn DM
Agency/consultancy CEO	LinkedIn + pattern guessing	Conference speaker pages
International CEO (non-US)	Waterfall tool with global coverage	LinkedIn DM

Key takeaway: Public and enterprise CEOs need structured sources (SEC, waterfall tools). Meanwhile, startup founders almost always have contact info on their own site. So skip the tool and hit the About page first.

Getting past the gatekeeper layer

Finding the email is only half the job. CEOs employ chiefs of staff, executive assistants, and inbox filters that block cold outreach. Here’s how to move past each.

The executive assistant (EA)

First, the EA is often the decision point for whether the CEO sees your email. So build the relationship, don’t bypass it. Treat the EA as a peer. Send a short, respectful message explaining who you are and why the CEO might want to see this. Plus, address it directly to the EA by name (LinkedIn search surfaces them).

The inbox filter

Next, some CEOs use keyword filters that auto-archive anything matching “sales,” “meeting,” “demo,” or “follow up.” So avoid those words in subject lines. Instead, try questions, specifics, or shared-context anchors (“your Fortune podcast episode on X”).

The chief of staff

Then, chiefs of staff act as strategic filters. If you’re selling something strategic, CC or address the chief of staff. Meanwhile, if you’re selling something operational, skip them and go direct to the CEO.

The voicemail

Also, CEO voicemail boxes get zero marketing calls screened out by default. So a short, specific voicemail paired with an email the same day often converts well. Paired voicemails and emails double reply rates from 2.7% to 5.87% LeadIQ.

Common mistakes when finding CEO email and phone

Avoid these and your hit rate climbs fast.

Trusting one tool blindly

First, no single-source tool hits the accuracy you need for CEO outreach. So always verify with a second source or run a final email check before sending.

Skipping verification on pattern guesses

Next, a pattern guess that “looks right” can still bounce. Run every guessed address through a verifier. In fact, a bounce on your first email to a CEO can get you filtered from future attempts.

Using stale lists

Then, CEO data decays faster than any other persona. A CEO email list bought 6 months ago already has 15-20% stale records. So source fresh data every time rather than reusing old lists.

Calling the main company line for CEO direct

Also, the switchboard rarely transfers cold callers to the CEO. Instead, it sends you to voicemail, sales, or a sales-screening rep. So build a direct dial list through proper enrichment rather than calling the main number.

Ignoring time zones

Finally, calling a West Coast CEO at 9 AM Eastern catches them at 6 AM local. Meanwhile, emailing a European CEO at 5 PM EST means the message arrives at 11 PM their time. So time both email and phone to the CEO’s local hours, not yours.

Frequently asked questions

What’s the fastest way to find a CEO’s email address?

For one-off outreach, try the three most common email patterns (firstname@, firstname.lastname@, firstinitial+lastname@) and verify each with a free tool like Hunter or MailTester. For bulk work across many CEOs, a waterfall contact tool with LinkedIn URL input returns verified email and phone in seconds at 80%+ match rates. So match your method to your volume.

Can I cold email a CEO legally?

In most countries, yes for B2B purposes, but rules vary. The US CAN-SPAM Act requires a clear subject line, accurate sender identity, and a visible opt-out. Meanwhile, EU GDPR allows legitimate interest outreach for B2B but requires an opt-out and a documented Legitimate Interest Assessment. Canada’s CASL is stricter, often requiring prior consent. So check your jurisdiction before launching.

Do email pattern guesses work for enterprise CEOs?

Often no. Enterprise CEOs (1,000+ employees) frequently use custom email formats or have personal aliases filtered by their EA. So patterns hit ~40-50% for enterprise vs ~70% for mid-market. For enterprise CEOs, a waterfall enrichment tool or SEC filings usually beats guessing.

How do I find a private company CEO’s email?

Three best paths. First, check the company’s About, Team, or Press pages. Founders of companies under 100 employees often list their email publicly. Second, try pattern guessing (firstname@company.com works for most startups). Third, use a waterfall enrichment tool with the CEO’s LinkedIn URL as input. Private company CEOs are usually easier than enterprise ones.

Are CEO phone numbers available in public records?

Rarely. Unlike email, CEO mobile numbers almost never appear in SEC filings, press releases, or websites. So the only reliable paths to a CEO’s direct dial are waterfall contact data tools, warm intros, or conference attendee lists. Meanwhile, the main company line rarely connects cold callers to the CEO directly.

What’s a good response rate for CEO cold outreach?

Lower than mid-market outreach. Cold email to CEOs averages 1-3% reply rate on verified lists. Meanwhile, multi-channel sequences (email + phone + LinkedIn) can push that to 5-10%. Plus, paired voicemail and email doubles reply rates from 2.7% to 5.87%. So expect lower volume but higher value per reply.

Should I send a CEO a long or short first email?

Short. Under 90 words, one clear ask, one reason this matters to them specifically. CEOs read email on mobile during short breaks, so long pitches get archived unread. Plus, the subject line matters more than the body. Lead with a question or a specific observation, not “quick intro” or “following up.”

How often does CEO contact data go stale?

Faster than any other role. CEO contact data churns at roughly 30-40% per year, compared to 22.5% for general B2B contacts. Reasons include job changes, acquisitions, and inbox rotation as CEOs cycle email addresses to avoid spam. So re-verify CEO contact data quarterly at minimum, and always verify at the moment you export, not from a stored list.

Your fastest path to the CEO inbox

Manual methods work for one or two accounts a week. However, if you’re running founder-led outbound across 20+ target CEOs or managing multiple client accounts as an agency, manual doesn’t scale.

ReachFast is built for exactly that gap. Paste a CEO’s LinkedIn URL or upload a CSV of target accounts, and get back verified email and direct mobile in one pass. The platform runs a 7+ source waterfall with real-time verification at export, hitting 97%+ email accuracy and 92%+ direct dial accuracy. Plus, credits refund on their own when data is bad, so you never pay for a bounced email or a dead dial. Month-to-month plans start at $39.99 for 1,000 credits and 100 phone numbers. New accounts get 5 free verified contacts on signup, enough to test the data on your top five target CEOs before committing. The platform meets GDPR, CCPA, and DSGVO rules for founders and agencies outbound into EU markets.

For founders doing founder-led sales, agency owners running ABM campaigns for clients, RevOps teams sourcing executive accounts, SDRs pushing into enterprise, and recruiters targeting C-suite hires, that means your top-priority outreach lands on CEOs who actually exist and still hold the role.

→ Try ReachFast free

Sources

1. UpLead: How to Find CEO Email Addresses 9 Methods That Work
2. Cognism: 10 Ways to Find CEO Email Addresses
3. LeadIQ: How to Find a CEO’s Email Address or Phone Number
4. SalesIntel: How to Find Every CEO’s Email and Phone Number
5. Skrapp: 7 Free & Paid Ways to Find CEO Email Addresses 2026
6. Seamless.AI: How to Find CEO Contact Information
7. eGrabber: How to Find CEO Email Addresses 2026
8. ContactOut: CEO Email List Database 2026
9. P2B Services: CEO Email List Verified Database 2026
10. SEC EDGAR Company Search