How to Build a Small Business Email List from Scratch (Free & Verified, 2026)

Key takeaways
- Bought small business email lists fail for predictable reasons: the addresses are stale, the businesses never agreed to hear from you, and the same file has been sold to other senders.
- A list you build yourself from Google Maps and business websites is smaller, current, and made of addresses that businesses chose to publish.
- Verify every address before the first send, and clean the list after every send. Deliverability is the asset you are protecting.
- Know the consent and opt-out rules for the countries you send to. A sole trader's address is personal data.
Search for "small business email list" and you will find sellers offering hundreds of thousands of addresses by industry and region, and a few offering them free. The price looks like a shortcut. In practice a bought list is usually the most expensive way to reach small businesses, because the cost shows up later as bounces, spam complaints and a sending domain that no longer lands in the inbox.
This guide explains why bought and free lists fail, how to build a small business email list of your own from public sources, what a good record looks like, how to verify and maintain it, and the basics of consent and opt-out. It is aimed at agencies, freelancers and suppliers who sell to local businesses.
Why bought lists fail
Small business contact data decays fast. Businesses close, change hands, change domains and rebrand, and the address that worked last year bounces this year. A list compiled once and sold many times cannot keep up. The full case against buying is in should you buy Google Maps lead lists; the short version is below.
- Stale. You cannot tell when any address on the list was last confirmed, so you find out by sending, and every bounce counts against your domain.
- No consent or context. The businesses did not publish their address for you and have no idea who you are. Your first message is a stranger's.
- Shared. The same file goes to every buyer, so the same businesses receive the same pitches from many senders, and the addresses attract spam filters.
- Generic. Most rows are info@ or a contact form address with no name, no trade detail and nothing to personalise with.
- Spam traps. Old addresses that are recycled by mailbox providers to catch bulk senders end up in bought lists. One hit can get a domain blocklisted.
Free lists have the same problems with less accountability. If a list is free, it is either very old, scraped in a way you would not want to explain, or a sample designed to sell you the paid version.
What a good small business email list contains
The goal is not the biggest list. It is a list where every row is a real, open business that you can say something specific to. That needs more than an email column.
| Field | Why it matters | Where it comes from |
|---|---|---|
| Business name and category | Groups the list by trade so the message fits | Google Maps listing |
| Address and town | Local relevance; dedupe key with the name | Google Maps listing |
| Phone number | A second channel when email gets no reply | Google Maps listing |
| Website | The source of the email; a signal of maturity | Google Maps listing |
| Email address | The channel itself | The business website |
| Verification status | Whether the address is safe to send to | A verification check |
| Rating and review count | Filters for established businesses or new ones | Google Maps listing |
| One observation | The personal first line | Your own look at the listing and site |
| Source and date collected | Answers 'where did you get my address' and tells you when to re-verify | Your process |
| Opt-out flag | Never send to a row that asked you to stop | Your suppression list |
How to build your own from Google Maps and websites
- Pick one trade and one area. "Dentists in Leeds" produces a list you can personalise; "small businesses in the UK" does not.
- Pull the listings. Search Google Maps for the trade and location and collect the name, address, phone, website, rating, review count and category for each business.
- Filter. Drop listings with no website if you need email, since the address lives on the site. Keep them in a separate phone list. Add a rating floor or a review count range if your offer suits established or new businesses.
- Find the published address on each website. Contact, About, footer and legal pages hold it. This is the slow part by hand.
- Verify. Run every address through a check before it enters the list.
- Add an observation. Open the listing or site for each row and note one thing: missing hours, no booking link, a slow site, a great review you can mention.
- Record the source and date. Every row should say where the address came from and when.
LeadOutreach does steps two to five in one pass. It searches Google Maps by keyword and location, visits each business website to find the published email addresses and social profile links, runs basic email checks and shows the result in an Email Verified column, and exports to CSV. On Pro and Agency it exports to a CRM or webhook instead. The free plan covers 100 leads a month with 10 enrichment credits and no credit card, which is enough to see whether your trade and town produce usable addresses; see the pricing page for current limits.
Verification before the first send
Verification is what separates a list from a liability. A check confirms the address is well formed, that the domain has a mail server, and where possible that the mailbox exists. Some domains accept everything, which a good check reports as catch-all so you can treat those rows with more caution.
Verify before the first send, and re-verify anything older than a few months before you send to it again. Options, from free single checks to bulk tools, are compared in how to verify email addresses for free. Whatever you use, the rule is the same: an address that did not pass does not get mail.
Send small
Even a verified list should be sent in small daily batches from a domain that is separate from your main business email. A list of a thousand is not a thousand emails today; it is a month of careful sending.
Keeping the list clean
- Remove hard bounces immediately. A hard bounce is a dead address. Sending to it again is the fastest way to get filtered.
- Honour every opt-out on the same day. Add the address and the business to a suppression list and check it before every send, on every channel.
- Watch replies for closures and changes. "This business has closed" and "I no longer work here" are updates to your list, not just non-replies.
- Deduplicate on every import. Match on email, then phone, then website, then name plus address. Merge rather than delete so you keep the observation and the history.
- Re-verify on a schedule. Anything untouched for a quarter should be checked again before it receives mail.
- Re-run the source search. Monthly for active areas. New businesses appear, closed ones disappear, and the difference between two exports is your update.
Consent and opt-out basics
The rules for emailing businesses differ by country, and the difference between a company address and a personal one matters. This is not legal advice, and the general principles are set out in is Google Maps scraping legal. The points below are the ones that shape how a list is built and used.
- The United States. The FTC's CAN-SPAM compliance guide requires accurate header information, a truthful subject line, a clear statement that the message is an advertisement, your valid physical postal address, a clear way to opt out, and honouring opt-outs within ten business days. It also says you cannot contract away that responsibility by hiring someone else to send.
- The UK and EU. Marketing email to corporate addresses is treated differently from email to individuals, and a sole trader's or partner's address counts as an individual's. Personal data rules apply to any address that identifies a person, so you need a lawful basis, a privacy notice you can point to, and a record of where the address came from.
- Everywhere. Use addresses the business published for contact, say who you are, make opting out easy, and never send to someone who asked you to stop.
A list you built yourself makes all of this easier. You know where every address came from, you can show the business the page it was on, and you have never sent to anyone who opted out from a different sender's campaign.
A monthly routine
- Re-run your saved searches for each trade and town and export.
- Compare with last month's export. Add new businesses, flag ones that disappeared.
- Verify new addresses and re-verify anything older than three months.
- Deduplicate and merge on email, phone, website and name plus address.
- Check the suppression list and remove any matches.
- Add one observation to each new row.
- Send in small daily batches, remove bounces the same day, and log every reply.
Done monthly, this keeps a list of a few hundred businesses accurate with an hour or two of work. That list will outperform any file you can buy, because every row on it is a business you can actually talk to.
Sources and further reading
Start Finding Verified Leads Today
Extract verified emails, phone numbers, and social links from Google Maps. Start with a 7-day Starter trial (1,000 leads included) and keep 100 free leads every month forever after. No credit card required.
Instant setup · No credit card required · 100 free leads/mo forever after
Related articles
Buying Google Maps Lead Lists vs Building Your Own: Cost, Quality and Risk
What you are really buying, the risks of shared lists and how to test a sample before you spend.
How to Verify a List of Email Addresses for Free (Before You Send)
What verification catches, a free script you can run today and the small test send that catches the rest.
Is Scraping Google Maps Legal? GDPR, CAN-SPAM & CCPA Rules for Lead Generation (2026)
Collecting public business data from Google Maps is generally legal, but cold email has rules. Here is what hiQ v. LinkedIn, GDPR, CAN-SPAM and CCPA actually require.
Frequently asked questions
Free lists are usually old, scraped without care or a sample used to sell a paid file. The reliable free route is to build your own: search Google Maps for a trade in a town, take the published address from each business website and verify it. Free tools, including LeadOutreach's free plan, cover the first few dozen businesses.
In many countries business-to-business email about something relevant to the business is allowed if you identify yourself, include a postal address and an opt-out, and honour it. Sole traders are often treated as individuals with stricter rules. This is not legal advice; check the rules for each country you send to.
Enough to fill your sending capacity for a month, not more. A few hundred verified, personalised rows in one trade and area will produce more replies than ten thousand generic ones, and it is small enough to keep clean.
Remove hard bounces and opt-outs the same day they happen. Re-verify addresses that have not been checked in about three months, and re-run the source search monthly to catch new and closed businesses.
No. It searches Google Maps for the businesses you ask for, finds the email addresses and social links each one publishes on its website, runs basic email checks and lets you export the result. It never sends email or messages on your behalf, and the list belongs to you.