How to Find a Candidate's Phone Number: Legal Methods for Recruiters in 2026
Conclusion Finding a candidate's phone number legally comes down to three things: starting with what the candidate has made public, using enrichment tools that can document their data practices, and building a process that respects opt-outs and data retention requirements. Manual methods work at low volume. At scale, an integrated sourcing platform that combines profile discovery, contact enrichment, and multi-channel outreach in a single workflow is the more practical answer. If you're spending significant time on contact research for every candidate, that time is worth examining. The tools available in 2026 have made the manual version of this process largely optional.
- Why Phone Numbers Matter More Than Ever
- The Legal Framework: What You Need to Know Before You Search
- Method 1: The Candidate's Own Public Profiles
- Method 2: Professional Networking and Referrals
- Method 3: Contact Data Enrichment Tools
- Method 4: LinkedIn Recruiter and Sales Navigator
- Method 5: Job Application Data
- Method 6: Event and Community Sources
- What to Avoid
- How AI-Powered Sourcing Platforms Change the Equation
- Building a Repeatable Contact Research Process
- FAQs
- Conclusion
Why Phone Numbers Matter More Than Ever
Response rates on LinkedIn InMail have been declining for years. Recruiters who rely on it exclusively are competing with dozens of other messages in the same inbox, and many passive candidates simply don't check LinkedIn notifications that often.
A well-timed SMS or phone call reaches candidates where they actually are. It feels more personal, it's harder to ignore, and it shortens the gap between first contact and a booked call. For recruiters running 5 to 20 hires per quarter without a dedicated sourcing team, that speed difference can be the margin between hitting a hiring target and missing it.
The challenge is that phone numbers aren't as publicly visible as email addresses or LinkedIn profiles. You have to know where to look — and what you're actually allowed to do with what you find.
The Legal Framework: What You Need to Know Before You Search
The legal context matters here. This isn't legal advice, but these are the principles every recruiter should understand before they start searching.
GDPR and European Candidates
If you're sourcing candidates in Europe, GDPR applies. A phone number is personal data. Collecting it, storing it, and using it to contact someone all require a lawful basis. For recruiters, the most commonly cited basis is "legitimate interests" — meaning you can contact a candidate about a relevant opportunity without prior consent, provided your interest is proportionate and you've given them a clear way to opt out.
That doesn't mean anything goes. Cold-calling someone repeatedly, contacting them about roles that have nothing to do with their background, or using data scraped in violation of a platform's terms of service all create risk. The safest approach: document your sourcing method, use the number only for recruitment purposes, and honor any opt-out request immediately.
US Candidates and TCPA
In the United States, the Telephone Consumer Protection Act governs unsolicited calls and texts. Sending automated marketing texts without prior express consent can trigger significant liability. Recruiting outreach sits in a gray area, but the practical guidance is to limit automated SMS to candidates who've already engaged with your process, and to use manual, personalized messages for cold outreach.
The short version for both regions: have a documented reason for holding the number, use it only for the stated purpose, and make opting out easy.
Method 1: The Candidate's Own Public Profiles
Start with what the candidate has already made public. Many professionals list contact information directly on their profiles or personal sites.
LinkedIn: Some candidates include a phone number in their contact info section, visible to connections or even to all LinkedIn members. If you're connected, check there before searching anywhere else.
Personal websites and portfolios: Developers, designers, consultants, and freelancers often maintain personal sites with a contact page. A quick search for the candidate's name plus their job title or company frequently surfaces these.
GitHub, Behance, Dribbble, and similar platforms: Technical and creative candidates sometimes list contact details in their profile bios or README files. These are genuinely public disclosures.
Twitter/X and other social profiles: Less common for phone numbers, but some professionals include them in bio sections or link to contact pages.
The key principle: if the candidate published the number themselves in a professional context, you have a strong basis for using it.
Method 2: Professional Networking and Referrals
If you have a mutual connection, a warm introduction almost always outperforms a cold call. Ask your contact to make an introduction or, with their permission, to pass along contact details.
This approach is slower but produces better outcomes. A candidate who receives a call after a mutual contact has vouched for the opportunity is far more likely to engage seriously.
For niche roles or senior positions, this is often the most reliable path to a phone number — and one with no legal ambiguity attached.
Method 3: Contact Data Enrichment Tools
Manual searching works for one or two candidates. It doesn't scale to 10 or 20 hires per quarter. That's where contact enrichment platforms come in.
These tools maintain large databases of professional profiles with associated contact details, including mobile numbers. You provide a name, a company, or a LinkedIn URL, and the tool returns verified contact information.
Quality varies significantly. Some tools return outdated landlines or emails that bounce. The better platforms verify contact data against multiple sources and give you an accuracy indicator per record.
When evaluating an enrichment tool, ask:
- What is the mobile number coverage rate specifically?
- How recently was the data verified?
- Does it cover your target geography, including Europe if relevant?
- How does the platform handle GDPR compliance for European data?
That last question matters more than most recruiters realize. Some tools are built primarily for the US market and their data practices for European candidates are poorly documented. If you're sourcing in France, Germany, or the UK, you need a platform that can clearly explain its legal basis for holding and sharing that data.
Method 4: LinkedIn Recruiter and Sales Navigator
LinkedIn Recruiter doesn't surface phone numbers directly, but it's still a useful starting point. Some candidates list phone numbers in their contact info, and InMail can be used to ask a candidate to share their number before a call.
It's a two-step process rather than a direct lookup, but it's fully above-board. Send a brief, personalized InMail explaining the role and asking if they'd be open to a quick call. If they respond positively, ask for their preferred number.
The limitation is obvious: you're dependent on the candidate checking and responding to InMail — which brings you back to the original problem.
Method 5: Job Application Data
If a candidate has applied for a role at your company, they likely provided a phone number in their application. Your ATS is the first place to check.
For candidates who applied in the past but weren't hired, their contact details may still be on file. Depending on your data retention policy and jurisdiction, you may be able to reach out about new opportunities — though GDPR requires that candidates were informed at the time of application that their data might be used for future roles, and that you're only retaining it for as long as necessary.
This method is underused. Many recruiters forget that their own ATS is a sourcing database.
Method 6: Event and Community Sources
Candidates who speak at industry events, contribute to professional communities, or run newsletters often make their contact details available in those contexts. Event organizers sometimes publish speaker contact information in attendee materials.
It's a niche approach, but for senior or specialized roles, it can surface direct contact details that no enrichment tool has indexed.
What to Avoid
A few methods that circulate in recruiter forums are worth skipping entirely.
Reverse phone lookup sites: These are designed to identify who owns a number you already have — not to find a number for someone you've identified. They're not useful for this purpose and often return inaccurate data.
Purchasing bulk contact lists: List vendors vary enormously in quality and legal standing. Many lists contain data collected without proper consent, particularly for European contacts. Using them creates GDPR exposure and typically produces poor results anyway.
Scraping LinkedIn in violation of their terms: Automated scraping of LinkedIn is prohibited under their terms of service and has been the subject of significant litigation. Tools that claim to scrape LinkedIn profiles should be evaluated carefully.
Guessing or generating phone numbers: Some recruiters try to infer mobile numbers from patterns. This is ineffective, and if it results in contacting the wrong person, it creates its own set of problems.
How AI-Powered Sourcing Platforms Change the Equation
The manual methods above are worth knowing, but they're slow. A recruiter spending 20 minutes per candidate on contact research isn't a recruiter who can fill 15 roles per quarter.
AI-native sourcing platforms have changed what's possible. Instead of finding a candidate and then separately enriching their contact details, modern platforms handle both steps in a single workflow.
Kalent is built around exactly this problem. You describe the candidate you're looking for in plain language, and the platform matches that description against a database of 200M+ profiles covering Europe and the United States. Each returned profile comes with enriched contact data — including approximately 80% mobile phone number and email coverage — without a separate enrichment step.
From there, Kalent's outreach agent can initiate contact across LinkedIn, email, SMS, and WhatsApp natively within the same workflow. No copying numbers into a separate tool. No managing outreach sequences in a spreadsheet. The full cycle from sourcing brief to booked interview happens in one place.
For recruiters sourcing in Europe, the geographic coverage matters. Many sourcing tools are built around US data and have thin coverage for French, German, or Southern European candidates. Kalent's database explicitly covers Europe — which is directly relevant given how much recruiting activity happens outside the US.
Building a Repeatable Contact Research Process
Whether you're using manual methods, enrichment tools, or an integrated platform, a repeatable process saves time and reduces legal risk.
Document your source for every number. Know where each contact detail came from and why you had a legitimate basis to use it. This protects you if a candidate asks how you obtained their information.
Verify before you call. A quick check that the number is still associated with the right person saves awkward conversations. Enrichment platforms with recency indicators help here.
Personalize the first contact. A cold call that references the candidate's specific background and a relevant role lands very differently from a generic pitch. The number is just the access point; the conversation is what matters.
Respect opt-outs immediately. If a candidate asks not to be contacted, remove them from your outreach and document that request. Under GDPR, this is a legal obligation, not a courtesy.
Audit your data retention. Don't hold phone numbers indefinitely. Set a policy for how long you retain contact data for candidates who don't progress, and stick to it.
FAQs
Is it legal to cold-call a candidate using a number I found through a contact enrichment tool?
In most jurisdictions, yes — provided the tool collected the data lawfully and you have a legitimate basis for the contact. Under GDPR, recruiting outreach is generally covered by legitimate interests, but you must give the candidate a clear way to opt out and honor it if they do. Always check the data practices of any enrichment tool you use, particularly for European candidates.
What's the best free method to find a candidate's phone number?
Start with the candidate's own public profiles: their LinkedIn contact info, personal website, or professional community pages. If they've made their number publicly available in a professional context, that's the cleanest source. Beyond that, free methods are slow and unreliable. For volume sourcing, an enrichment tool or integrated sourcing platform is more practical.
How accurate are contact enrichment tools for mobile numbers?
It varies by tool and geography. Better platforms achieve roughly 70 to 85% coverage for mobile numbers on professional profiles, though this depends heavily on the region and how recently the data was verified. Always check whether a tool reports a confidence score per record.
Can I use a candidate's phone number to send them an automated text?
In the US, the TCPA restricts automated texts sent without prior consent. For recruiting outreach, personalized manual texts are generally lower risk than automated sequences sent to cold contacts. In Europe, GDPR applies to any processing of personal data, including phone numbers. Check the regulations for your specific jurisdiction and document your lawful basis.
What should I do if a candidate asks how I got their phone number?
Be transparent. Tell them the source — whether it was a public profile, a mutual contact, or a contact enrichment platform. Candidates have a right under GDPR to know how their data was obtained. A clear, honest answer builds trust; evasiveness does the opposite.
Does LinkedIn Recruiter provide candidate phone numbers?
Not directly. LinkedIn Recruiter surfaces profile information and enables InMail outreach. Some candidates include phone numbers in their contact info section, visible depending on their privacy settings. But it's not a reliable source of phone numbers at scale.
How do I handle an outdated phone number?
Outdated numbers are common, especially in databases that aren't refreshed frequently. If a call or text doesn't reach the right person, update your records and move to another contact method. Platforms that provide recency indicators or verify numbers against multiple sources reduce this problem significantly.
