Most guides on this topic are written for someone trying to track down an old friend. This one is written for salespeople, because that is who searches for this at nine on a Tuesday morning: you have a decision-maker, you have a reason to call, and you have an email address that has not been opened in two weeks.
The honest summary is that no single method returns mobile numbers reliably. The ones that work are the ones you stack, and the difference between a good list and a bad one is rarely the tool. It is whether you verified the number before you dialled it.
A note on numbers in this article. You will find claims elsewhere that phone converts ten or fifteen times better than email, alongside case studies with suspiciously round results. We have left all of that out. The figures below are ranges we can stand behind, and where something depends on your market we say so instead of inventing a multiplier.
The eleven methods at a glance
| Method | Typical hit rate | Effort | Best for |
|---|---|---|---|
| Waterfall enrichment | High | Low | Any B2B list at volume |
| Single data provider | Medium | Low | Occasional one-off lookups |
| Signature blocks and inbox history | High when it applies | Very low | Anyone who has emailed you |
| Company website and PDFs on the domain | Medium | Medium | SMBs and owner-managed firms |
| Conference and association directories | Medium | Medium | Industrial and trade sectors |
| Public filings and registries | Low but authoritative | High | Directors and company officers |
| LinkedIn contact card | Low | Very low | First-degree connections |
| Asking on a channel that already works | Very high | Medium | Warm or replying prospects |
| Referral from a colleague | Very high | Medium | Enterprise accounts |
| Switchboard and reception | Medium | High | Large companies with a PBX |
| Consumer people-search sites | Low for B2B | Low | Not recommended for sales |
1. Waterfall enrichment, the only method that scales
A single data vendor finds somewhere between a third and two thirds of the mobile numbers on a normal B2B list, depending on country and seniority. The gaps are not random. Each provider has its own sourcing, so a number missing from one is often sitting in another.
Waterfall enrichment queries providers in sequence. The first one gets the lookup, and only if it returns nothing does the request fall through to the second, then the third. You pay once per contact found rather than once per provider asked, and your coverage becomes the union of every source instead of the ceiling of the best single one.
This is the only method here that gets better as your list grows, which is why it belongs at the top for anyone doing outbound seriously. It is also the part most teams assemble by hand, buying credits from three vendors and reconciling the results in a spreadsheet, which works right up until somebody leaves and takes the spreadsheet with them.
2. A single data provider
If you look up ten contacts a month, one provider with a browser extension is enough and you should not over-engineer this. Pick one, test its coverage in your market rather than globally, and accept that a good share of lookups will come back empty.
Coverage varies enormously by geography and company type. A provider that is excellent for North American tech can be thin across continental Europe, weak in Africa and the Middle East, and close to useless for owner-managed businesses anywhere. Before signing an annual contract, hand the vendor fifty real target companies from your pipeline and ask them to run those. Never evaluate on their sample data, which is curated precisely to look good.
3. Signature blocks and your own inbox
Before paying for anything, search what you already own. Sales teams skip this constantly and it is free.
If the person, or anyone at their company, has ever emailed you or a colleague, the mobile number is often sitting in the footer of that thread. Most CRMs and mail clients let you search across the whole team's history. The same applies to shared drives: proposals, tender responses and signed quotes carry direct lines.
4. The company website, including the parts nobody checks
- Team and about pages, particularly at agencies, consultancies, brokerages and law firms, where a direct line is a selling point.
- Press and media pages. Press contacts publish mobile numbers because being called is their job.
- PDFs on the domain. Brochures, price lists, tender documents and case studies frequently carry a direct number. Search the domain restricted to PDF files and you will find documents the site navigation no longer links to.
- Job postings, where smaller companies often list a hiring manager's line.
- Archived versions of the site. Contact details removed in a redesign frequently survive in web archives.
Search operators do the heavy lifting here. Restricting a search to one domain and adding terms like mobile, cell or direct line will surface pages faster than clicking through the navigation.
5. Conference listings and trade associations
Speaker profiles, exhibitor directories, chambers of commerce and professional association member lists are an underrated source, especially in manufacturing, logistics, construction and other sectors where the buyer is not on LinkedIn all day. People list a number there because they want suppliers to call them, which also makes it the friendliest kind of number to use.
6. Public filings and registries
For directors and officers, corporate registries are legitimate and authoritative. The specifics differ by jurisdiction: Companies House in the UK, the CIPC in South Africa, commercial registers across the EU, state-level filings in the US.
Be realistic about the return. What is usually published is a registered address and officer names rather than a personal mobile. This is a slow method, but it is the standard route to the owner of a private company with no digital footprint, and it is beyond reproach when somebody asks where you got their details.
7. The LinkedIn contact card
If you are connected, check the contact card before anything else. A meaningful minority of professionals publish a mobile there, and it is the number they chose to publish, which makes it the most consent-friendly number you will ever dial.
Beyond first-degree connections this stops working, and no browser extension changes that. What LinkedIn is genuinely excellent at is the trigger. Knowing that your contact started a new role six weeks ago is worth more than the number itself, because it tells you what to say. If you want the full motion around that, we set it out in our guide to what prospecting is and how it actually works.
8. Ask, on a channel that already works
The highest-converting way to get a mobile number is to ask for it. This sounds too obvious to list, and it outperforms most tools, because a number given voluntarily belongs to a person who expects your call.
The practical version: when a prospect replies to an email or accepts a connection, propose a short call and ask for the best number. If you are already exchanging times, use a scheduling link that requests a phone number at booking.
9. A referral from a colleague inside the account
Somebody at the target company will hand over a colleague's direct line if your reason is good and the request is easy to say yes to. This works best in enterprise accounts where you have already spoken to someone in an adjacent team, and it produces the highest answer rate of anything here, because you can open with the name of the person who pointed you there.
10. The switchboard
Large companies still run a reception desk. Reception will rarely give out a personal mobile, but they will often transfer you, and a transferred call beats a cold mobile dial on both answer rate and goodwill. This method costs time and pays in proportion to how good your reason for calling is.
11. Consumer people-search sites, and why they are the wrong tool
Consumer people-search services aggregate public records, marketing data and social profiles to return home addresses and personal numbers. For B2B sales they are wrong on three counts: the data skews consumer and heavily US, accuracy on business roles is poor, and the personal nature of the records raises exactly the compliance questions you do not want attached to your pipeline.
If your goal is to reach a decision-maker in a professional capacity, use business data sourced for that purpose.
The tools people actually use
No single tool wins. What follows is what each is genuinely good at, so you can stop reading listicles that rank them by affiliate payout.
| Tool | Strongest at | Watch out for |
|---|---|---|
| HappySales | Prospecting, waterfall enrichment and outreach in one platform, priced per organization | Not a CRM, and not built for consumer contacts |
| ZoomInfo | Depth on large North American companies | Enterprise pricing and contract length |
| Apollo.io | Database plus sequencing on one bill | Coverage thins in mid-market outside the US |
| Cognism | Phone-verified mobiles, compliance-led in Europe | The most expensive way to solve a narrow problem |
| Lusha | Fast one-off lookups from the browser | A lookup tool, not a system |
| RocketReach | Senior contacts at mid and large companies | Verification quality varies by record |
| ContactOut | Coverage of tech profiles | Narrow sector focus |
| LeadIQ | Capturing contacts while you browse, into the CRM | Depends on the source page being right |
| Clearbit | Enrichment by API, inside your own systems | Engineering work required |
| TrueCaller | Crowdsourced caller identification, strong internationally | Consumer directory, unsuitable as a B2B sourcing basis |
The honest way to choose between them is a bake-off. Take one hundred contacts you actually want to reach, run them through each tool's trial, and compare three things: how many numbers came back, how many were mobile rather than switchboard, and how many connected when dialled. That last column is the only one that matters, and it is the one no vendor publishes.
Verify before you dial
A wrong number is worse than no number. It burns time, it annoys a stranger, and in aggregate it makes your connect-rate metrics meaningless. Three checks catch most bad records.
- Format and country code. Validate against the country's numbering plan. A South African mobile starts 06, 07 or 08 domestically and is written +27 without the leading zero. A UK mobile is +44 7. Malformed numbers are the single largest category of enrichment error, and they are free to detect.
- Line type. Mobile, landline and VoIP behave differently, and in some jurisdictions the rules for calling them differ too. Good enrichment returns line type. If yours does not, a lookup service will tell you.
- Recency. Ask when the record was last seen or re-verified. A number verified this quarter is a different asset from one scraped three years ago, even though they look identical in a spreadsheet.
What to do once you have the number
Before you dial. Spend two minutes, not twenty. You need their role, the company's situation, and one specific reason this call is for them rather than for anyone with the same job title. If you cannot articulate that reason, the number is not your problem.
The first eight seconds. Say who you are, say why you are calling this person specifically, and ask whether you have caught them at a bad time. Asking permission is not weakness, it is the fastest way to find out whether this is a conversation or an interruption.
Voicemail. Thirty seconds, one reason to call back, your number said twice and slowly. Long rambling voicemails are worse than none, because they tell the listener exactly how the call would have gone.
Cadence. One dial is not an attempt. Build a sequence of three to five call attempts spread across two to three weeks, varied by time of day, and combine it with email and LinkedIn touches rather than dialling the same number at the same hour. Somewhere between the fifth and the tenth touch across all channels is where most replies to cold outbound actually arrive, and almost every team stops before that.
Log everything. Attempt, outcome, and what was said. Without it you cannot tell the difference between a bad list, a bad time of day and a bad pitch, and those three problems have completely different fixes.
Common mistakes
- Calling without a reason. Random dialling of anyone whose number you could find is the fastest way to sound like a robot and burn a market.
- Treating the mobile as the first touch. A cell phone is more intrusive than an inbox. Earn it, or at least have a trigger worth interrupting for.
- Pushing after a clear no. Objection handling is for hesitation, not for refusal. The difference is obvious in the moment and expensive to ignore.
- Ignoring where the prospect is. The rules that apply are the ones where the person you are calling sits, not the ones where your office is.
- Never re-verifying. People change roles constantly. A list you enriched last year is a list of people who used to work there.
Where the legal line sits
This is not legal advice, and the rules depend on where you and the person you are calling are located. What follows is the shape of the thing.
- United States. The TCPA governs calls to mobile numbers, with much tighter rules for automated dialing and prerecorded messages than for a human dialling manually. The National Do Not Call Registry primarily protects consumers, and many states run their own registries. Penalties are assessed per call, which is why the arithmetic gets frightening at volume.
- European Union and the UK. GDPR treats a work mobile as personal data. Legitimate interest can be a lawful basis for B2B outreach, but it requires a balancing test you can produce on request, transparency about your source, and an easy way to object. Several member states add their own rules on unsolicited calls.
- Canada. CASL is strict on commercial electronic messages, which matters the moment you follow a call with a text.
- South Africa. POPIA treats work contact details as personal information, and its direct marketing provisions constrain unsolicited electronic communication. Record your source, honour opt-outs immediately, and do not assume a business context is an exemption.
Three habits keep you safe almost anywhere: know and store where every number came from, suppress anyone who asks to be left alone across every channel at once, and never blend consumer data into a B2B campaign.
Frequently asked questions
Is it legal to find someone's cell phone number? Finding a number that is lawfully published or lawfully sourced is generally legal. What is regulated is what you do next. Manual calls to a business contact about a relevant business matter sit on firmer ground than automated dialing, prerecorded messages or texts, which carry stricter rules in most markets.
Can you find a cell phone number for free? Sometimes. Signature blocks, company sites, PDFs on the domain, conference listings and LinkedIn contact cards are free and cover a real slice of any list. What is not free is the time, which is why teams calling at volume pay for enrichment instead.
What is a realistic hit rate? For a normal B2B list, a single provider finds mobiles for roughly a third to two thirds of contacts depending on market and seniority. Stacking providers in a waterfall raises that materially. Any vendor quoting a single global figure without asking about your market is selling rather than measuring.
What is the most accurate method? Asking the person, or being given the number by a colleague of theirs. Neither scales, which is why waterfall enrichment is the practical answer for volume and those two are the answer for your twenty most important accounts.
How do I know a number is still current? Check when the provider last verified it, confirm the line type, and re-verify before each campaign rather than annually. Treat verification as a step in launching a campaign, not as a periodic chore.
What do I say when someone asks how I got their number? Tell them, plainly and immediately. "Your details came from a business data provider, and I can remove you right now" is a complete answer. Any hesitation here is a sign your sourcing needs fixing, not your script.
How many attempts before giving up? Three to five calls across two or three weeks, varied by time of day and mixed with other channels. Fewer is quitting early, more is harassment.
Should I text a prospect? Rarely, and almost never as a first touch. Texting a business mobile is regulated more tightly than calling it in several markets, including Canada and the US, and it feels personal in a way that costs you goodwill if the relationship has not started.
The shortcut
At any volume the sequence is always the same: build a list that matches your ideal customer, enrich it against several providers rather than one, verify format and line type, then call with a reason and follow up across channels. That is exactly what HappySales automates end to end, from finding the profiles to running the follow-ups after the call, on one bill instead of three.
If what you need is specifically a list of decision makers, we walk through it step by step in how to build a list of company CEOs.