Who does this email address belong to?

There is no public directory of email owners. But a few free checks usually tell you whether an address belongs to a real company, a real person or a scammer.

By David Ray · Updated October 30, 2026 · 5 min read · How we research

What you can and can’t find out

An email address doesn't come with a name tag. Gmail, Outlook and Yahoo won't tell you who owns an account; they only hand that over to police with a legal order. So you can't look someone up the way you look up a phone number in a directory.

What you can do is gather clues: where the address appears in public, who owns the domain after the @, and whether the email came from where it claims to. Usually that is enough to tell a real company, a real person, or a scammer apart.

1. Search the address in quotes

Put the whole address in quotation marks and search for it on Google or Bing:

The quotes find that exact address. You may find:

• a company's contact page or staff list,
• a public profile where the person shared it,
• a forum post or business listing,
• or scam warnings, if other people have reported it. Also try searching the address with the word "scam".

No results doesn't mean anything bad. Most personal addresses are never published.

2. Look at the domain

The part after the @ tells you a lot.

Free email providers

If it ends in gmail.com, outlook.com, hotmail.com, yahoo.com, icloud.com or similar, anyone in the world can create one in two minutes, under any name. The display name ("PayPal Support", "Your Bank") proves nothing. A real bank or large company doesn't write to customers from a Gmail address.

Company domains

If it ends in a company name, like @lopezbakery.com:

1. Type the domain into your browser (lopezbakery.com) and see whose website it is.
2. Look it up on ICANN Lookup, the official registration lookup. It shows when the domain was registered and through which company. A domain registered last week sending you "account warnings" is a big red flag. Owner names are usually hidden for privacy, which is normal.
3. Real companies almost always have these records.

Look-alike domains

Scammers register names that look right at a glance: paypa1.com, amazon-support-help.com, microsoft.com.account-check.net. Read the domain slowly, right to left from the @. The real domain is the last two parts before the end: in microsoft.com.account-check.net, it is account-check.net.

3. Check where the email really came from

The From line can be faked. The headers, the hidden technical record attached to every email, are much harder to fake. They show the servers the email passed through and whether it passed SPF, DKIM and DMARC, the checks that prove a sender is allowed to use that domain.

1. In Gmail, open the email, click the three dots (More) and choose Show original. In new Outlook or Outlook on the web, click the three dots (More actions) and choose View › View message details. In classic Outlook, double-click the email to open it and choose File › Properties.
2. It shows where the email came from and flags failures. An email claiming to be from your bank that fails DMARC is fake.

Headers show the sending service, not the person. A Gmail message shows Google's servers, not the sender's home address.

4. Ask

The simplest way to find out who someone is: ask them. A reply like "Thanks for your email. Could you remind me who you are and how you got my address?" is polite, and a real person or business will answer.

But don't reply to anything that looks like a scam. Replying confirms your address is active. For an email that claims to be from a company you deal with, contact the company yourself using the phone number or website you already know, not the one in the email.

Want to know if an address is real before you write to it? Our guide on checking if an email is valid shows how to tell whether an address can receive mail.

Signs the email is a scam

The US Federal Trade Commission lists these warning signs. Any one of them is a reason to slow down:

• It says there is a problem with your account, a payment or a login, and you must act now.
• It asks you to confirm personal or financial details.
• It includes an invoice you don't recognize, or a link to make a payment.
• It says you are owed a refund or have won a prize or free product.
• It uses a generic greeting like "Dear customer", even with a real company's logo.
• It comes from a company you don't have an account with, or a person you don't know.

Forward phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org, report them at ReportFraud.ftc.gov, and use Report phishing in Gmail or Report › Report phishing in Outlook. Then delete them. For more on suspicious messages, see "We can't verify this email came from the sender" and privacy and security.

What about reverse email lookup sites?

Many websites promise to tell you who owns any email address. We don't recommend them. They mostly repackage data scraped from old breaches and data brokers, so results are often wrong or years out of date, and many charge a subscription for a "full report" that says little more than a free search. Some are themselves used to collect the addresses people type in.

Respect privacy too. If someone has chosen not to share who they are, the right step is to ask, or to not engage. If you are being harassed or threatened by email, keep the messages and report it to the email provider and, if needed, the police: they can get account details legally when it is justified.

Questions people ask

Can I find out who owns an email address?

Only partly. Email providers don't reveal account owners to the public. You can search the address in quotes, check who runs the domain after the @, analyze the email's headers, or ask the sender.

Is there a free reverse email lookup?

Searching the address in quotes on Google or Bing is the best free lookup. Paid people-finder sites are often wrong or out of date, and we don't recommend them.

How can I tell if an email is from a real company?

Check that the domain after the @ is the company's real website domain, and paste the headers into an email header analyzer to see whether SPF, DKIM and DMARC passed.

Can I find out who sent an anonymous email?

Usually not. Headers show the sending service, such as Gmail, not the person. If the emails are threatening, report them to the provider and the police.

Should I reply to ask who it is?

For normal emails, yes, a polite question is fine. Don't reply to anything that looks like a scam, because a reply confirms your address is active.