Find Business Addresses: The 2026 SDR Playbook for Postal, Email and Phone

When a B2B seller says “I need to find a business address”, the word covers four very different things. The postal HQ to ship a gift box. The registered office to validate that a company is real. The work email to fire off a cold sequence. The direct phone number to get a human on the line.

Each one lives in a different place, costs a different amount of effort, and carries a different level of legal risk. This guide walks through the full stack for an SDR or B2B prospector in 2026: where every type of business address lives, which free and paid tools surface them, what compliance regime applies (CAN-SPAM, GDPR, CASL), and why physical mail is making a quiet comeback in outbound.

The five “addresses” hiding behind one word

Before opening a single tool, get clear on what you actually need. Confusing them costs hours.

Postal headquarters. The street address where a company physically operates. Useful for direct mail, ABM gifting, in-person visits and trade-show follow-up. Often differs from the legal registered office, especially for companies that lease coworking space.

Registered office. The legal address on file with the government registry. Used for service of legal documents, KYC checks and validating that a company actually exists. For US public companies it shows up in SEC filings. For UK companies it shows up on Companies House. Frequently a law firm or accountant address, not a real workplace.

Billing or vendor address. Where invoices get paid. Sometimes a third location entirely, especially in groups with shared services. You only need this if you are selling enterprise contracts and onboarding a new vendor record.

Work email. The professional email tied to a specific person at a specific domain. The single most valuable “address” for outbound prospecting at scale.

Direct work phone. A mobile or direct dial that bypasses the switchboard. The hardest of the five to get cleanly, the best converter on a cold call.

A clean prospecting record contains all five for tier-1 accounts and at least the email plus one of the others for everyone else.

Why finding addresses still matters in B2B

Email is louder than ever. Top of inbox real estate is fought over by hundreds of sequenced senders per buyer per week. Teams that pull ahead in 2026 add channels around the email, which means going back to the basics of physical, registry-grade and verified contact information.

Three concrete reasons sales teams are spending more time on address data, not less:

• Direct mail outbound is having a moment. Mailing a handwritten note to 30 named accounts gets opened. A cold email to the same 30 often does not. The unit economics of ABM mail beat email for top-of-funnel meetings on enterprise deals above 50k ACV.
• In-person prospection is back. Trade shows, local meetups, walk-in visits to office parks. You need a real postal address, not a PO box and not a registered office in another city.
• Validating a company before you sell to it. Sanctions screening, vendor onboarding, payment fraud avoidance. A registered office on Companies House or an EDGAR filing tells you the company is real, who signs for it and how old it is.

How to find a postal HQ address (free and paid)

Start with what is free. In most cases you do not need a paid tool to find a usable HQ address.

Google Maps and Google Business Profile. Search the company name plus the city. If the company has a verified profile, the address shows up in the right rail with hours and storefront photos. The best free source for SMB and mid-market companies with a physical location.

LinkedIn company page. Every page has an “About” section listing the HQ city and often the full street address. Reliable for the main HQ, less so for satellite offices.

Company website footer and contact page. The footer of any serious B2B website lists the HQ address plus the legal entity name. The “Contact us” page often lists every regional office. Ten seconds of work, often the cleanest source.

Apple Maps and Bing Maps. Worth a check when a company is missing from Google. Coverage in Asia and parts of Europe sometimes diverges.

For workflows where you need the address tied to a specific person, a B2B lead database consolidates company HQ, billing address and personal work contact in one record so you stop bouncing between five tabs.

Official registries: where to validate a company

When you are validating a counterparty, not a Google ranking, go to the source.

SEC EDGAR (US public companies). Free, full-text searchable. Annual reports (10-K), proxy statements and current reports (8-K) all carry the registered office. Useful for finding the legal entity name, the state of incorporation and the principal executive office for any US-listed company.

Companies House (UK). Free. Every UK limited company is searchable by name or company number. You get the registered office, directors, filed accounts and incorporation date in seconds. The bar for trustworthy address data in the UK.

OpenCorporates. Aggregates registry data from 140+ jurisdictions into one search interface. Coverage is uneven outside major Western markets but it is the only free single-search option for cross-border lookups.

Local equivalents. INPI and Infogreffe in France. Handelsregister in Germany. Registro Mercantil in Spain. KvK in the Netherlands. ASIC in Australia. A 30 second Google search of “company registry [country]” finds it.

Important caveat. The address on a registry is the legal registered office, often a registered agent, a law firm or an accountant. Do not mail a sales gift to a registered office. Use it for validation, not for outreach.

How to find a work email address

The work email is the workhorse of B2B outbound. Five techniques, in order of cost.

Pattern guessing. Most companies use a consistent email pattern. The common ones at a domain like acmeco.com:

• firstname.lastname@acmeco.com (around 40 to 50 percent globally)
• firstname@acmeco.com (15 to 20 percent, more common at startups)
• flastname@acmeco.com (10 to 15 percent)
• firstname.l@acmeco.com (5 to 10 percent)
• lastname@acmeco.com (5 to 10 percent, more common at large traditional firms)

If you know one work email at the domain, you know the pattern for everyone else. Free, fast, breaks on roughly 30 percent of companies with homonyms or hyphenated names.

Verified directories on the company website. Many B2B firms list named contacts with full work emails on their “About” or “Team” pages. The only source where the prospect explicitly published the address, which makes it bulletproof for compliance.

Press and PR pages. Press contacts, IR contacts and partnership leads usually publish an email. Useful when selling to marketing or comms personas.

Email finders. Hunter, Snov.io, Apollo and Zeliq combine pattern guessing, SMTP verification, opt-in directories and proprietary scraping to return a verified work email from a name plus domain. North American databases run deeper. European ones are stricter on GDPR but often cleaner on freshness.

Validation step (non-negotiable). Whatever the source, never send to an unverified email. Every modern finder layers SMTP ping, MX record check and catch-all detection. If your bounce rate exceeds 5 percent on a sequence, your domain reputation tanks for two to three months. Re-verify any list older than 90 days.

A modern stack uses B2B data enrichment to chain providers in a waterfall: hit provider A, fall back to B if missing, fall back to C, run SMTP verification at the end. You get coverage close to 80 percent on emails versus 50 to 60 percent for a single source.

How to find a direct phone number

Phone is harder than email. Switchboard numbers are easy. Direct dials and mobiles are gated behind paid databases.

LinkedIn profile. Some prospects publish a phone number under “Contact info”. Coverage sits below 10 percent globally but jumps in some regions and seniorities.

Sales Navigator and a LinkedIn extension. Browsing a profile with a LinkedIn extension running surfaces the verified phone (when one exists in the database) directly on the profile sidebar. This is how most SDRs build call lists without leaving LinkedIn in 2026.

RocketReach, Lusha, Cognism, Apollo, Zeliq. All offer phone numbers with varying coverage. Direct dial coverage in North America runs around 60 percent on senior B2B titles for the better databases. Mobile coverage is lower and depends heavily on jurisdiction.

A practical tip. Before paying for a phone number, check if the company switchboard plus a confident “could you put me through to [Name] please” gets you the line. Receptionists are friendlier than databases give them credit for.

Tired of stitching five tools together to find one prospect’s full record? See how Zeliq’s lead database consolidates HQ address, work email and direct phone into a single search, with waterfall enrichment built in. Start free.

The 2026 legal layer: CAN-SPAM, GDPR and CASL

Finding an address is the easy part. Using it without breaking the law is where SDRs get tripped up.

CAN-SPAM (United States). Commercial email to a US recipient must include a clear sender ID, a physical postal address, and a working unsubscribe mechanism honored within 10 business days. Subject lines must not be deceptive. No opt-in requirement for B2B prospecting. Statutory damages can reach over 50,000 USD per offending email.

GDPR (European Union, UK). Cold B2B emails to EU prospects rely on legitimate interest as the legal basis. To stand up in front of a regulator you need a documented assessment showing the outreach is relevant to the recipient’s professional role, you disclose where you got the data, and you offer easy opt-out. A work email to a VP Sales for a sales tool, with clear unsubscribe and source disclosure, sits on solid ground. A scraped personal mobile does not.

CASL (Canada). Stricter than both. Cold commercial email in Canada is illegal without prior express or implied consent. Implied consent exists for an existing business relationship or a publicly available business email where the recipient has not stated they refuse such communications. Penalties reach 10 million CAD per violation for organizations.

Practical rules of thumb. Keep a source-of-truth field on every contact. Honor opt-outs in minutes, not days. Maintain a suppression list. Do not buy from brokers who cannot tell you the source.

Direct mail in 2026: the quiet revival

Cold mail peaked in 1995, declined until 2015 and has been climbing again since 2022. The reason is simple. A handwritten envelope on a desk gets opened nine times out of ten. A cold email gets opened one time in five and replied to one time in fifty.

What works in 2026 for B2B direct mail:

• A short handwritten note (or convincing handwritten-style print) sent to a verified named recipient at the actual workplace, not the registered office.
• A small functional gift tied to a specific reason (a book the prospect mentioned on LinkedIn, a tool relevant to their stack).
• A QR code or short URL on the note that drops them into a personalized landing page.
• A follow-up email two days later referencing the mail.

What does not work: glossy printed brochures and unsolicited expensive gifts (most enterprises now cap acceptable gifts at 50 to 100 USD).

The unlock for direct mail is address quality. Wrong floor number, prospect left six months ago, you wasted the mail and the gift. A clean lead database earns its cost here.

The tooling stack: database, enrichment, extension

The modern address-finding stack has three layers.

Layer 1: a B2B contact database. A multi-million record database with firmographic filters (industry, size, revenue, geography) and persona filters (title, seniority, function). You search “VP Sales at SaaS companies between 50 and 200 employees in Germany” and get a list with HQ, email and phone for each match. That is what a B2B prospect database does for SDR teams.

Layer 2: waterfall enrichment. When the database is missing a field for one contact, an enrichment engine queries 40+ providers in cascade until it finds and verifies the missing piece. Critical for tail-end coverage and CRM hygiene.

Layer 3: a LinkedIn extension. SDRs spend hours per day in Sales Navigator. A Chrome extension that surfaces enriched contact data inside LinkedIn saves the context switch and adds prospects to sequences in one click.

Database for breadth. Enrichment for depth. Extension for speed.

Data quality decay: the silent killer

Contact data rots. A B2B record decays at roughly 30 percent per year. On a list built two years ago, more than half the addresses are now wrong.

What this means in practice:

• Re-verify before sending. Any list older than 90 days needs a fresh SMTP and phone validation pass.
• Refresh CRM enrichment quarterly. New job titles, new emails, new phone numbers, new HQ addresses for companies that moved.
• Track bounce and disconnect rates. Bounce above 4 percent or phone disconnect above 8 percent means your data is aging out.
• Source new data continuously. Do not work a static list of 5 000 leads for 12 months. Pull a fresh slice every month against new signals (hires, funding, tech installs).

Sales leaders who track this stuff (see the Zeliq for Sales Leaders view) make data freshness a KPI of the SDR ops function.

One-off versus at-scale workflows

Two modes, two stacks.

One off, single account. You need the HQ and the CEO’s email for one company. Ten minutes of manual search: Google Maps for the address, LinkedIn for the CEO, a free email finder, a switchboard call for the direct dial.

At scale, recurring. You need 200 verified records per week for an outbound team. Manual breaks. The right move is a database, enrichment and extension stack with a clear data hygiene process. Cost per verified record drops from 5 to 8 dollars manual to under 1 dollar at scale, and the data is fresher.

The mistake is using the manual approach at scale. SDRs end up spending 60 percent of their day on data entry instead of conversations.

FAQ

What is the best free way to find a company’s HQ address? Google Maps for the physical location, LinkedIn company page for the cross-check, and the company website footer for the most up to date listing. Three sources triangulate to the right answer in under two minutes.

Is it legal to email a B2B prospect I found through a database? In the US under CAN-SPAM, yes, with a postal address and an unsubscribe link in the email. In the EU under GDPR, yes if you can show a legitimate interest, you disclose where you got the data, and you offer easy opt-out. In Canada under CASL, only with express or implied consent (which includes publicly available business emails on which the recipient has not stated they refuse contact).

How do I find a work email if pattern guessing fails? Run the candidate through a verified email finder that aggregates multiple providers. If still missing, search the prospect’s name plus “email” on Google to find press mentions, GitHub commits or conference attendee lists where the email might be public. Last resort, ask for it on LinkedIn.

What is the difference between an HQ address and a registered office? The HQ is where the company physically operates. The registered office is the legal address on file with the government, often a law firm or accountant. Always use the HQ for outreach, the registered office for legal validation only.

How often should I re-verify a list of business addresses? Every 90 days for active outbound, every 30 days if you are running high-volume sequences where deliverability matters. Anything older than 12 months should be considered stale and re-built from scratch.

Can I scrape LinkedIn for emails? Scraping LinkedIn violates their terms of service and exposes you to account bans plus potential legal action. The compliant path is using a LinkedIn extension that pulls from a separately licensed B2B database, not the LinkedIn graph itself.

Wrapping up

Finding business addresses in 2026 is no longer one workflow. It is five (HQ, registered office, billing, email, phone) plus a compliance layer that varies by jurisdiction. SDRs who win build a stack that handles all five at once, keep their data fresh on a quarterly cadence, and use the right channel (mail, email, phone) for the right moment in the cycle.

The shortcut is to stop bouncing between Hunter, RocketReach, Companies House, Google Maps and a CRM. Pick a single platform that consolidates contact discovery, enrichment, verification and outreach, then layer your direct mail and phone playbooks on top.

Ready to see how much time your team gets back? Compare Zeliq plans and start finding verified business addresses in minutes.