Recruiting Published 6 November 2026 21 min read

How to Find a Passive Candidate's Phone Number, and Qualify It Before You Call

Passive candidates rarely answer InMails, so recruiters go looking for a mobile number. Where those numbers come from, which recruiter tools find them (prices checked on November 6, 2026), what GDPR and the TCPA allow, and how to qualify a number before you dial.

Share

A passive candidate is, by definition, someone who is not looking. They do not read job boards, they ignore most InMails, and their inbox is full of offers that look like yours. A phone call still gets their attention, provided you have the right number: their own mobile, not their employer’s switchboard, not a number that went dead two years ago. This guide covers only the data side of that call: where a candidate’s number comes from, which tools recruiters use to find it, what you are allowed to do with it, and how to check it before you dial. For what to say once they pick up, our guide to cold calling for recruiters takes over.

Why a passive candidate’s mobile is the channel that works

Recruiters do not chase mobile numbers out of habit. Each of the other channels has a weakness that the phone does not share.

A
InMail and email are crowded. A senior engineer or a sales director in demand receives several recruiter messages a week. A written message competes with all of them; a call competes with none.
B
Timing is everything. A passive candidate becomes active for a few weeks: after a reorganization, a missed promotion, a new manager. A two-minute call at the right moment beats a sequence of five emails.
C
A voice builds trust faster. Candidates want to know who they are dealing with. Hearing a recruiter explain the role, the range and the client in a minute answers questions an email cannot.

There is a condition attached: the call must reach the candidate directly, discreetly, at a moment they can talk. That rules out the employer’s switchboard and, most of the time, the desk phone. It leaves the personal mobile, which is exactly the number that is hardest to find.

Where a candidate’s number can come from

Before opening a paid tool, go through the sources you already have. They are cheaper, the numbers are usually fresher, and the candidate is less surprised to hear from you.

  1. 01

    Your ATS and CRM:

    candidates you placed, shortlisted or interviewed in the past often left a mobile on a CV or an application form. Search by name and by email before anything else, and check the date: a number from 2019 deserves a check before you dial it.
  2. 02

    Referrals:

    a placed candidate or a hiring manager who suggests a name can usually ask the person whether they are open to a call, and pass on the number with their agreement. It is the warmest number you will ever get.
  3. 03

    The candidate's own public profiles:

    some professionals publish a contact number on a personal site, a portfolio, a conference speaker page or the contact section of their LinkedIn profile. A number the person published themselves is the easiest to justify.
  4. 04

    A short written message asking for a slot:

    for a strategic profile, a two-line message that asks for ten minutes and a number is slower but leaves the candidate in control. Many will answer with their mobile.
  5. 05

    A phone finder:

    tools that start from a LinkedIn profile URL, or from a name and a company, and return the numbers their database holds for that person. This is where most recruiting teams get volume, and where the choice of tool matters.

Our general guide on how to find someone’s cell phone number by name details twelve methods for B2B contacts. Most of them apply to candidates too; the main difference is that a candidate must never be reached through their workplace.

The best candidate number is the one the candidate gave you. Every other number has to be justified, checked and dated.

Phone finders that recruiters use, compared

Two business models coexist. Unlimited plans let you reveal as many contacts as you like, under a fair-use policy whose thresholds the vendor does not publish. Credit plans charge a number of credits per mobile revealed, usually nothing when no number is found. For recruiters who look up a few hundred profiles a month, the first model is predictable; for teams that look up a few dozen, credits are often cheaper.

Swordfish

Built for
Recruiters and sales teams that need mobiles
Price checked
Solo $99 a month, sold as unlimited reveals under a fair-use policy
How it works
Chrome extension on LinkedIn and other sites
Watch out
Fair-use thresholds are not published; reviewers report roughly 150 to 200 contacts a day

ContactOut

Built for
Recruiters sourcing from LinkedIn
Free plan
5 emails, 5 phones and 5 exports a day, one user (third-party reviews)
Paid
Email + Phone around $99 a month billed annually; a cheaper plan excludes US and UK data (third-party)
Watch out
Paid plans say unlimited, with fair-use and export caps

Lusha

Built for
Sales teams, widely used by recruiters
Price checked
Pro $69.90 a month for 600 credits (vendor page)
Per mobile
5 credits, nothing charged when no number is found
Watch out
Free plan: 40 credits a month, so up to 8 phones

Kaspr

Built for
LinkedIn prospecting, strong in Europe
Price checked
Starter $49 a month billed annually, $65 monthly, 100 phone credits (vendor page)
LinkedIn Recruiter Lite
Supported on the Business plan, according to Kaspr's plan details reported by reviewers
Watch out
Phone credits are a separate pool from email credits

Datagma

Built for
European mobiles and enrichment by API
Price checked
Regular $49 a month for 3,000 credits (vendor page)
Per mobile
30 credits, so about 100 mobiles a month; charged only on success
Watch out
No recruiter-specific workflow found; works from the extension or the API

Apollo.io

Built for
Sales prospecting, with a large US database
Price checked
Basic $49 per seat a month billed annually (vendor page)
Per mobile
8 credits, nothing charged without a result
Watch out
Credits do not roll over; coverage weaker outside North America

The same comparison in one table:

ToolPricing modelEntry price checkedFree optionBest fit
SwordfishUnlimited, fair use$99 a month (Solo)TrialHeavy daily sourcing of mobiles
ContactOutUnlimited, fair use and export capsAbout $99 a month, annual (third-party)5 phones a dayLinkedIn-first sourcing
Credits, 5 per phone$69.90 a month, 600 credits8 phones a monthMixed sales and recruiting teams
Phone credits$49 a month, annual5 phone credits a monthEuropean candidates, LinkedIn workflows
DatagmaCredits, 30 per mobile$49 a month, 3,000 credits3 mobiles a monthEuropean mobiles, API
Credits, 8 per mobile$49 per seat a month, annualLimited free planUS candidates, teams already on Apollo

When an unlimited plan pays off

  • High daily volume: a sourcer who reveals 100 profiles a day reaches the price of a credit plan in a few days.
  • Predictable budget: one line per recruiter, no credit top-ups mid-month.
  • Exploration: you can reveal a profile just to check it, without counting.

What unlimited does not mean

  • Unpublished thresholds: fair-use limits exist and vary; heavy users report being slowed down.
  • Same coverage problem: unlimited reveals of a database that misses your market still miss.
  • Export caps: some plans limit how many contacts leave the tool each month.

Coverage is the real criterion. Clay publishes regular tests of mobile phone providers. In its most recent public results, the best providers reached about 92% accuracy on the numbers they returned (Forager 92.5%, Prospeo 92%), but no single provider found a mobile for more than about 45% of the people tested. Recruiting teams that need high coverage therefore combine two tools, or use a waterfall that queries several databases in a row. Our waterfall enrichment merger combines exports from several providers and keeps the best number per person, and the coverage map by country shows what each provider publishes for your markets.

Test before you buy: take 50 candidates you are actively sourcing, run them through two tools on their free plans or trials, and count three things: numbers found, mobiles among them, and numbers that turn out to belong to someone else.

Our comparison of phone number finder Chrome extensions covers ten of these tools in more detail, including how each behaves on LinkedIn.

Personal mobile or work number: what you are really looking for

Phone finders return whatever their database holds for a person: a personal mobile, a company-issued mobile, a direct desk line, sometimes the company’s main number. For a sales call, a desk line can be acceptable. For a recruiting call, the type of number changes everything.

1
Personal mobile. The number to look for. The candidate decides whether to talk now or later, in private. It also survives job changes, which makes it valuable for a long-term talent pool.
2
Company-issued mobile. Technically a mobile, but paid and sometimes monitored by the employer. Use it for a short, neutral first contact at most, and ask for a better number.
3
Direct desk line. Discreet in theory, but colleagues are around and calls can be logged. Avoid it for a first approach.
4
Switchboard. Off-limits for candidate calls, for the reasons above.

Most tools label the number type, and the labels are not always right. Our direct dial checker sorts a list into mobile, direct line and switchboard using the numbering plan of each country and the patterns of shared numbers, and our article on direct dial, mobile or switchboard explains how to read those labels.

Recruiting calls are not exempt from data protection rules. The rules below are the ones most recruiters meet; they are a starting point, not a substitute for advice on your own situation.

European Union and UK (GDPR). Most agencies rely on legitimate interest (Article 6(1)(f)) to contact a professional about a role that matches their profile. Three obligations follow:

  1. 01

    Balance the interests:

    a call about a role in the candidate’s field is easy to justify; a call about an unrelated job or to a number the person kept private is much harder.
  2. 02

    Inform the candidate:

    when data was not collected from the person, Article 14 requires telling them who you are, why you hold their data and where it came from, within a month and at the latest at the first contact. Say it in the call and confirm it in writing.
  3. 03

    Limit retention:

    keep a source and a date for every number, delete it when it no longer serves, and honor objections immediately. In France, the CNIL’s recruitment guidance is commonly read as two years after the last contact for an unsuccessful candidate who has been informed.

United States. Manual calls to a candidate’s cell phone are generally allowed. The Telephone Consumer Protection Act restricts calls made with an autodialer or a prerecorded or artificial voice to cell phones without prior express consent, and several states add their own rules and calling hours. Our guide to cold calling cell phones covers the TCPA in detail.

United Kingdom. UK GDPR applies like the EU text for the data itself. If a call markets your agency’s services rather than a specific role, screen the number against the TPS and keep your own do-not-call list.

Qualify the number before you dial

A number found is not a number worth calling. A few minutes of checks per batch saves the most expensive mistakes: calling the wrong person, calling a dead line, or calling an employer by accident.

  1. 01

    Format and validate:

    run the list through our phone number validator to normalize every number to the international format and flag those that cannot exist. Excel exports often damage numbers on the way.
  2. 02

    Sort by type:

    keep personal mobiles first, set aside company numbers, drop switchboards. The direct dial checker does this in one pass.
  3. 03

    Deduplicate against your ATS:

    a candidate who is already in process with a colleague, or who asked not to be contacted, must not receive a cold call. Check before you dial, not after.
  4. 04

    Pick the slot:

    a candidate takes a recruiter’s call during a commute, at lunch or in the early evening, not in the middle of a meeting. Our when to call tool shows each candidate’s local time.
  5. 05

    Record the source:

    note where each number came from and when. It is what you will say when the candidate asks how you got it, and what your data protection officer will ask for.

Numbers also age. A candidate who changes employer keeps their mobile far more often than their desk line, which is one more reason to prefer mobiles for a talent pool; our B2B data decay calculator estimates how much of an older list is likely dead.

Build a candidate call list that stays clean

One lookup at a time works for a strategic search. Most recruiting desks, though, source in batches: a LinkedIn Recruiter project, a list of past applicants, a target list of companies whose engineers you want to approach. The way you assemble that batch decides how much cleaning you will do later.

The rule is simple: every number that enters your list carries its context with it. A bare column of phone numbers is useless the day a candidate asks how you got theirs, or the day you need to know which numbers are three years old. Keep at least the following fields, whatever tool you use.

FieldWhy you need itExample
Number in international formatDialers and validators need one format+44 7700 900123
Number typeMobiles first, switchboards outMobile, direct line, company
SourceGDPR information duty and data qualityATS 2024, Lusha, referral
Date foundRetention rules and refresh planning2026-11-06
Search or roleLegitimate interest is tied to a purposeSenior backend, Lyon
StatusAvoid calling the same person twiceNew, contacted, opted out
  1. 01

    Export the profiles, not the numbers:

    start from your sourcing project or ATS search and export names, current company, LinkedIn URL and location.
  2. 02

    Enrich in one place:

    run the export through one phone finder, or two in sequence for better coverage, and keep the provider’s own number-type label as a column.
  3. 03

    Clean and sort:

    our contact CSV cleaner repairs broken files, then validate and sort by type as described above.
  4. 04

    Load the dialer with the context:

    import the source, date and role along with the number, so each call opens with the right information on screen.

If you combine exports from several tools, the same candidate often comes back with two or three different numbers. Merging them by hand is slow and error-prone; the waterfall enrichment merger matches people across files by LinkedIn URL, email or name and company, and keeps the most useful number for each.

When the candidate is in another country

Cross-border searches are common in tech, finance and engineering, and they add three questions.

Is the number in the right format? A UK mobile starts with 07 nationally and +44 7 internationally, a German mobile with 015, 016 or 017, a French one with 06 or 07. Numbers copied from profiles often lose their country code, which makes them look valid in one country and wrong in another. Validate with the candidate’s country set, not yours.

What time is it for them? A call at 6 p.m. from Paris lands at 9 a.m. in San Francisco and at 1 a.m. in Singapore. Plan sessions by the candidate’s time zone, not by your own calendar.

Which caller ID will they see? Candidates answer local numbers more readily than unknown foreign ones. Getting a local number in another country usually requires documents about your company and an address; our tool on business phone number requirements by country lists them, and our calling rules checker summarizes calling hours and consent rules country by country.

Protect your caller ID

Recruiters call a lot of people who do not know them. That is exactly the pattern carriers and phone apps watch for when they label a number “Spam likely”. A flagged number loses most of its pickups, on candidates and on clients alike.

Three habits keep a number healthy. Spread volume across several numbers rather than pushing hundreds of calls through one; our phone number rotation calculator estimates how many you need for your volume. Register your numbers with the free caller ID services where they exist, and display your agency’s name when the carrier allows it. And watch the share of very short calls, which is the first signal carriers use. If a number is already flagged, our guide on caller ID marked as spam lists the fixes.

The first 20 seconds belong to another guide

Finding the right number gets you a pickup. What you say next decides whether the candidate stays on the line, and that deserves its own method: the opening, the reason for the call, the permission to continue. Our guide to cold calling for recruiters covers scripts and cadence for passive candidates, our guide to cold calling for staffing agencies covers both client and candidate calls, and our list of recruiting cold call objections prepares the answers to “how did you get my number?” and “I’m not looking”. On the agency side, our map of the staffing agency sales stack shows where calling fits among ATS, CRM and job board tools, and the recruiting track of our academy turns all of this into practice. Our pages on Skipcall for recruitment firms and for recruiters show how the dialer fits a recruiter’s day.

When a candidate asks how you got their number, the honest answer is part of the pitch: name the source, explain why you called, and offer to delete it.

Mistakes that cost candidates

1
Calling the first number a tool returns. Without checking the type, you end up calling desk lines and switchboards, with the risks described above.
2
Buying one tool for every market. A provider strong in the US can miss most of your candidates in Germany or France. Test on your own profiles.
3
Forgetting the source. If you cannot tell a candidate where their number came from, you cannot meet the GDPR information duty, and the call starts on defense.
4
Keeping numbers forever. A talent pool needs a retention rule and a refresh date, not an archive of numbers nobody has checked in years.
5
Burning one caller ID. Hundreds of daily calls from one number get it flagged, and every candidate then sees “Spam likely”.
6
Ignoring opt-outs. A candidate who says “do not call me again” goes on your do-not-call list the same day, in every tool your team uses.

Skipcall is a business phone and outbound calling platform, not a candidate database: it does not sell lists. You import the candidates you sourced by CSV, or sync them from HubSpot, Pipedrive, Salesforce or Attio, then call them with a power dialer or a parallel dialer on up to four lines, with recording, transcription and AI call summaries when recording is on. If some candidates in your file still lack a number, Skipcall’s built-in enrichment can complete the contacts you already have, on credits; it does not create new ones.

Charles Baldet

Author

CEO & Co-Founder, Skipcall

Charles is the CEO and co-founder of Skipcall. A sales commando with over 10 years of experience in B2B SaaS and complex strategic accounts, he has closed major deals with Stellantis, SNCF, RATP and Natixis. A specialist in the PUCCKA and MEDDIC methodologies, Charles regularly teaches sales at HEC's incubator and the Sorbonne. He was ranked among Les Echos' top 10 business angels under 35 in 2020. He also co-founded Getalead (B2B sales agency) and Getlab (SalesTech studio).

See all their articles

FAQ

Frequently asked questions

In order of cost: their own ATS and past applications, the candidate's public profiles and personal site, a mutual referral, then a phone finder that works from a LinkedIn profile URL or a name and company (Swordfish, ContactOut, Lusha, Kaspr, Datagma, Apollo and others). Whatever the source, check that the number is a mobile and not the current employer's switchboard before calling.
It depends on the country and the role. ContactOut and Swordfish are built and priced for recruiters, Lusha, Kaspr and Apollo are sales tools that recruiters also use, and Datagma is strong on European mobiles. Clay's own tests show that no single provider covers more than about 45% of mobiles, so test two tools on 50 of your own candidates before you commit.
In the EU and UK, recruiters usually rely on legitimate interest under GDPR Article 6, and must tell the candidate where their data came from at the latest at the first contact (Article 14). In the US, manual calls are generally allowed, while the TCPA restricts autodialed or prerecorded calls to cell phones without prior consent. This is general information, not legal advice.
No. Calling the employer's switchboard exposes the candidate to colleagues and managers, it rarely gets you through, and it burns the relationship before it starts. Use a personal mobile, and if you only have a company number, send a short written message first.
In France, the CNIL's recruitment guidance is commonly read as two years after the last contact for an unsuccessful candidate who has been informed, longer only with consent. Other countries set their own limits. Record the source and the date of every number so you can delete or refresh it on time.
Your own data. Candidates you placed, interviewed or who applied in the past often left a mobile in your ATS. After that, free plans such as ContactOut's daily allowance or Lusha's monthly credits cover a handful of key profiles, and paid tools become cheaper than manual searching after a few dozen numbers a month.

A calendar full of meetings starts with a call.

No commitment · Number live in 2 minutes

Ready to multiply your productivity?

Join the sales teams that have transformed their prospecting.

Personalized demo • No commitment