LinkedIn Profile Scraper & Email Finder — No Login Required

Scrape public LinkedIn profiles in bulk — name, headline, location, about, current company, photo, work history and education — and optionally find a confirmed work email at a company domain you supply. No login, no cookies, no account at risk.

What does LinkedIn Profile Scraper do?

Paste LinkedIn profile URLs or slugs and the Actor reads each profile's public page — the version LinkedIn shows to logged-out visitors — and turns it into a structured record. If you also give it a company domain, it builds the usual work-address formats from the person's name (first.last@, first@, flast@ …) and checks them against the company's mail server, returning an address only when that exact mailbox is confirmed.

It only reads what a profile publicly shows. Profiles that LinkedIn hides behind a login wall come back with an error and are not charged.

What you get per profile

Field	Description
profile_url	Canonical linkedin.com/in/… URL
name	Full name
headline	The profile's public job titles, joined
location	Location as shown on the profile
about	The public "About" summary
current_company	The first current employer listed
image	Profile photo URL
experience	Roles: company, title, start_date, end_date, url. Current roles carry their title; past roles LinkedIn shows publicly usually list the company and dates only
education	Schools: school, degree, start_date, end_date, url (degree is often not public)
social_links	Other websites the profile links to, when it lists any
email / email_score	A work email at your company domain whose mailbox was confirmed, and its 0–100 deliverability score. null when no mailbox could be confirmed
error	Present only when a profile could not be read (e.g. login wall); such rows are not charged

Dates are as precise as LinkedIn shows them: a year (2018) or year and month (2014-02).

Use cases

• Recruiting — enrich candidate lists with current role, work history and education.
• Sales prospecting — turn a list of decision-maker profiles into records with work emails.
• Lead enrichment — convert profile URLs into CRM-ready rows.
• Market research — compare roles, tenure and career paths across a team or industry.
• AI agents — structured profile data for outreach pipelines and MCP tools.

How to use

1. Paste LinkedIn profiles — full URLs or just the slug (satyanadella), up to 200 per run.
2. To look up emails, enter the Company domain the people work at (e.g. microsoft.com). It is applied to every profile in the run, so group profiles by company.
3. Leave Find work emails on, or turn it off to scrape profiles only.
4. Click Start, then export JSON, CSV or Excel, or pull the dataset via the Apify API.

Example input

{
  "profiles": ["satyanadella", "https://www.linkedin.com/in/williamhgates"],
  "includeEmail": true,
  "companyDomain": "microsoft.com"
}

Input configuration

Field	Type	Default	Description
profiles	array of strings	— (required)	Profile URLs or slugs, 1–200 per run. Duplicates are removed.
includeEmail	boolean	true	Look up a work email for each profile. Only runs when companyDomain is set.
companyDomain	string	—	The company's own domain to find emails at, e.g. microsoft.com (public providers such as gmail.com are rejected). Leave blank to skip email finding.

Example output

A real row for a public profile:

{
  "profile_url": "https://www.linkedin.com/in/satyanadella",
  "name": "Satya Nadella",
  "headline": "Chairman and CEO, Member Board Of Trustees",
  "location": "Redmond, Washington, United States",
  "about": "As chairman and CEO of Microsoft, I define my mission and that of my company as empowering every person and every organization on the planet to achieve more.",
  "current_company": "Microsoft",
  "image": "https://media.licdn.com/dms/image/v2/C5603AQHHUuOSlRVA1w/profile-displayphoto-shrink_200_200/...",
  "social_links": [],
  "experience": [
    { "company": "Microsoft", "title": "Chairman and CEO", "start_date": "2014-02", "end_date": null, "url": "https://www.linkedin.com/company/microsoft" },
    { "company": "University of Chicago", "title": "Member Board Of Trustees", "start_date": "2018", "end_date": null, "url": "https://www.linkedin.com/school/uchicago/" },
    { "company": "Starbucks", "title": null, "start_date": "2017", "end_date": "2024", "url": "https://www.linkedin.com/company/starbucks" }
  ],
  "education": [
    { "school": "The University of Chicago Booth School of Business", "degree": null, "start_date": "1994", "end_date": "1996", "url": "https://www.linkedin.com/school/universityofchicagoboothschoolofbusiness/" }
  ],
  "email": null,
  "email_score": null
}

email and email_score are filled only when a work email's mailbox is confirmed at your company domain; otherwise they are null and you are not charged for an email.

How much does it cost to scrape LinkedIn profiles?

Pay per event. No subscription.

Event	Price	When it is charged
Actor start	$0.001	Once per run in which at least one profile could be read
Profile result	$0.02	Per profile scraped successfully (rows with an error are free)
Email found	$0.06	Only when a work email's mailbox is confirmed

• 100 profiles, no email lookup: $0.001 + 100 × $0.02 = $2.001.
• 100 profiles with email lookup, 40 emails found: $2.001 + 40 × $0.06 = $4.401.

If no profile can be read at all, the run ends as failed and nothing is charged.

FAQ

Do I need to log in or provide cookies? No. The Actor only reads the public version of each profile, so there is no LinkedIn account involved and nothing to get banned.

Why is a profile returned with an error? LinkedIn sometimes shows a login wall instead of the public profile. Those rows carry an error, have no data and are not charged — re-running them later often works.

Why are some past roles missing a title, or education missing a degree? LinkedIn's public profile view only exposes part of the data. The Actor returns everything that view contains and leaves the rest null rather than guessing.

How are emails found? From the person's first and last name plus the company domain you provide. Up to six common address formats (first.last@, first@, flast@, firstlast@, first_last@, f.last@) are checked one at a time against the company's mail server, stopping at the first confirmed mailbox. No email is ever sent. Names are normalised first (accents removed, titles such as Dr. and post-nominals such as PhD dropped); profiles without a usable first and last name are skipped.

Why is email null for everyone at some companies? Some mail servers accept every address ("catch-all"), so no individual mailbox can be confirmed there. The Actor does not guess in that case: email stays null, no email is charged, and the run's status message names the domain. If email checking is unavailable, the run log says so, profiles are still returned, and no email is charged.

Is this legal? It collects only data that profiles publish publicly. You are responsible for using it in line with LinkedIn's terms and the privacy laws that apply to you (for example GDPR) — have a legitimate purpose, and do not use it to build spam lists.

---

Tags: linkedin scraper, linkedin profile scraper, email finder, work email, lead generation, sales prospecting, recruiting, b2b leads, linkedin email.