How to find out who owns an email address: 6 real methods

To find out who owns an email address, start free: search the exact address in quotes, look up the domain if it's a company's, and read the email's headers to see where it really came from. For a Gmail or Outlook address, the provider won't tell you who owns it. That takes a police report or a court subpoena.

Most "who owns this email" guides are written by sales tools that want to enrich a lead list. If you're here because a stranger, a scammer or a harasser wrote to you, the methods and the limits are different, so this guide is written for that reader.

Start with the domain

What you can learn depends on the part after the @.

The address ends in	What it tells you	Where to look next
A company or organization domain (@acme-corp.com)	The organization that controls the mailbox	Its website, its staff page, a phone call to its main number
A free webmail domain (@gmail.com, @outlook.com, @hotmail.com, @yahoo.com)	Almost nothing: anyone can open one	Search, headers, and the legal route
A personal domain (@janedoe.net)	Whoever registered and runs that domain	The website on it, and a domain lookup

A company address has a real organization behind it that you can contact. A free webmail address is the hard case, and it's the one most people are asking about.

6 ways to find out who owns an email address

1. Reply and ask

It sounds too simple, but if the sender is a business contact, a recruiter or someone you might know, a short "Sorry, who is this?" is the fastest answer. Skip this step for anything that looks like a scam, a threat or harassment. Replying confirms your address is active and starts a conversation you don't want.

2. Search the exact address

Put the full address in quotes in a search engine: "firstname.lastname@gmail.com". People reuse addresses on forum profiles, old résumés, club newsletters, product reviews and business listings. Try the part before the @ on its own too, since many people use the same handle as a username elsewhere. Check professional networks and social apps that let you search by email, if you're signed in.

Treat what you find as a lead, not proof. A matching handle on another site may belong to someone else.

3. Read the headers

The headers are the delivery record at the top of every email. They won't print the owner's name, but they show which servers handled the message and whether the From address passed its domain's authentication checks. That answers a question that matters more than you might think: did this really come from the address it claims?

To see them:

Gmail: open the message, click More (the three dots) next to Reply, then Show original (Gmail Help).
Outlook.com and new Outlook: open the message and choose View, then View message details (Microsoft Support).

Paste the full header block into the free Secria email header analyzer. It runs in your browser, so nothing you paste is uploaded or saved. It lays out the route from sender to you, shows whether SPF, DKIM and DMARC passed, and flags the sender's IP address when the headers expose one.

What to look for:

Authentication results. If DMARC fails for a message claiming to be from your bank, the owner of that address didn't send it. Someone else did. Our guide on how to tell if an email is spoofed explains each result.
Reply-To. If replies go to a different address than the From line, the Reply-To is the one the sender actually reads.
The first Received line. The mail standard says receiving servers should record where each message came from (RFC 5321). For mail sent from a company's own server, the earliest lines can point to that company. For mail sent through big webmail services, they usually show the provider's servers rather than the sender's own connection.

If you want to read every line yourself, our line-by-line header walkthrough covers it.

4. Look up the domain

For a company or personal domain, visit the website on it and check the contact or about page. A domain registration lookup (often called WHOIS or RDAP) can show when the domain was created and which registrar holds it. Many registrations hide the owner's personal details behind a privacy service, but a domain registered last week that imitates a well-known brand tells you plenty on its own.

5. Use reverse email lookup sites with care

People-search and "reverse email lookup" sites match an address against records they've collected. Keep three things in mind:

Results can be outdated or describe a different person.
Many sites show a teaser for free and charge for the "full report," which may contain little more than the teaser.
Don't use what they say to make decisions about a person's job, housing or credit. Use it, at most, as a starting point to verify some other way.

6. Go through the provider or the law

Gmail, Outlook.com and other webmail providers won't tell a member of the public who owns an account. What they will do is act on abuse: Google runs a form to report abuse from a Gmail account that violates its policies, and other providers have similar channels. They may suspend the account, but they won't send you the owner's details.

To get identity information, you need legal process:

Crimes such as threats, fraud, extortion or stalking: report to your local police, and in the US, to the FBI at ic3.gov. Investigators can then ask the provider. Google says US authorities must "issue a subpoena to compel disclosure of basic subscriber registration information and certain IP addresses," with stronger orders needed for more (Google).
Civil cases such as defamation or business disputes: a lawyer can file suit and subpoena the provider. Under US federal law, providers may share subscriber records "to any person other than a governmental entity," but they may not divulge the contents of messages (18 U.S.C. 2702). Expect it to take time, and expect the account holder to hear about it: for government requests, Google says it sends "an email to the user account before disclosing information," except in cases such as emergencies.

Even then, the result is whatever the owner entered at sign-up and the IP addresses the provider logged. If they used a fake name and a public network, the trail can end there.

Finding out who owns a Gmail, Outlook or Hotmail address

The rules are the same for all three. Search the address, read the headers to make sure the message came through the provider and not a lookalike, report abuse through the provider's own channel, and use legal process if you need a name. Hotmail addresses are Microsoft accounts, so Outlook.com's tools and policies apply to them.

One thing you might see: Gmail and Outlook sometimes show a name or profile photo next to a sender. That's whatever name the owner typed into their account, not a verified identity.

What doesn't work

"Email tracer" sites promising an exact location. At most they map an IP address from the headers to a city or a network operator, and mail from big webmail services often carries no IP address of the sender at all.
The password reset trick. Entering someone's address into a login page to see a partial phone number is the same move attackers use to scope out accounts. Don't.
Emailing the provider to ask. Without legal process, the answer is no.
Hiring a "hacker" to unmask someone. It's a scam aimed at people in exactly this situation, and paying someone to break into an account is a crime in most places.

If the email is threatening or harassing you

Your safety comes before identifying the sender.

Don't reply and don't try to contact the person another way.
Keep everything. Save the messages with full headers (Show original in Gmail, then download or copy), and take dated screenshots. Don't delete the account the messages came to.
Report it to the provider through its abuse form and, for threats, to the police. The FBI received 21,557 harassment and stalking complaints in 2025, according to its Internet Crime Report, which works out to dozens of reports a day.
Lock down your own accounts. If the sender seems to know things about you, change your email password and turn on two-factor authentication.

Frequently asked questions

Can I find out who owns an email address for free?

Sometimes. Searching the exact address, checking the domain and reading the headers are free and often enough for business or personal contacts. For an anonymous-looking webmail address, free methods usually stop at "who runs the mail server," not "who is the person."

Will Google tell me who owns a Gmail address?

No. Google doesn't share account details with the public. It discloses them to authorities through legal process such as a subpoena or court order, and publishes how it handles those requests. You can report a Gmail account that sent abusive mail, which may get it suspended.

Can you trace an email to a person?

Only partway, by yourself. Headers show the route and, for some senders, an IP address that points to a network and rough location. Turning that into a person needs records held by the email provider or internet provider, and those come out through police or a court.

Is it legal to look up who owns an email address?

Searching public information and reading the headers of mail sent to you is generally fine. Trying to get into the account, tricking the provider or using the results to harass someone is not. When in doubt about a specific case, ask a lawyer where you live.

If an email has you wondering who sent it, the headers are the first honest answer you'll get. Paste them into the free email header analyzer and see where it really came from.