Nonprofit leads are the decision-makers at charities, foundations, associations and NGOs, executive directors, development and operations leads, IT and finance, as prospects for software, fundraising services, consulting and suppliers. The sector lives on .org, and .org behaves unlike commercial domains: in the BounceZero corpus, .org addresses ran 24.6% invalid, 12.4% catch-all and 25% unconfirmed, leaving 36.2% confirmed valid, which is why a nonprofit list has to be verified with catch-all labelled before anyone sends to it.
Charity regulators publish more account-level data than any commercial sector does, so qualifying the organisation is easy and finding a working address for a named person is the hard part.
| Source | Coverage | What it gives you | Address quality |
|---|---|---|---|
| Charity registers (Charity Commission, OSCR, IRS Form 990 data, Canada CRA) | Every registered charity | Income, activities, trustees, year end, sometimes a contact address | Role addresses; trustees without emails |
| Grant and funder data (Candid, 360Giving, Foundation Directory) | Funded organisations | Who funds whom, programme areas, budgets | Account-level only |
| Sector directories and associations (NCVO, Council of Nonprofits, state associations) | Members | Organisations by cause and region | Role addresses |
| LinkedIn plus a finder | Staff at mid-size and large nonprofits | Named directors and managers | 65 to 85% finder accuracy; catch-all defeats inference on .org |
| Databases (Apollo, ZoomInfo, specialist nonprofit lists) | Larger organisations | Named contacts with titles | 10 to 25% invalid at export; verify |
| Conferences and sector events | Attendees by role | Decision-makers in one place | Mixed role and personal |
Finder mechanics: Email finder guide. Buying guide if you consider a list: email lists to buy.
Not every nonprofit is on .org. UK charities often use .org.uk or .co.uk; small groups use freemail; government-funded bodies use .gov. The rows are whole domain segments from the BounceZero corpus, April to October 2026, not nonprofit-only subsets.
| Domain type | Corpus segment | Invalid | Catch-all | Unknown | Confirmed valid |
|---|---|---|---|---|---|
| All .org addresses | .org | 24.6% | 12.4% | 25.0% | 36.2% |
| All .uk addresses (not limited to charities) | .uk | 17.0% | 3.7% | 10.6% | 65.0% |
| All .gov addresses (US government) | .gov | 24.7% | 18.0% | 22.1% | 34.7% |
| All .edu addresses (US higher education) | .edu | 32.8% | 8.3% | 18.5% | 38.2% |
| Small groups on freemail | Freemail | 17.6% | 1.1% | 2.1% | 74.0% |
| Commercial comparison | Business | 14.5% | 2.3% | 27.0% | 32.6% |
Catch-all at 12.4% is five times the business rate. One in eight .org addresses in the corpus sat on a catch-all domain that accepts anything, so a finder's "verified" badge on a .org address needs a verifier that reports catch-all separately. Full cuts: Lead List Quality Benchmarks 2026.
Many .org domains were set up years ago by a volunteer and never maintained. Catch-all is often left switched on by whoever set the domain up, and nobody turned it off. The address accepts, the mail goes to a forgotten mailbox or nowhere.
Development and programme staff move often, and part-time staff share addresses. A named address from last year has a good chance of being dead, and the catch-all hides it.
info@, admin@, donations@ and office@ are how small nonprofits work. They are read by someone, but they are not a decision-maker. BounceZero reports role addresses on business domains, .org included, as invalid by policy, so they drop out of a verified list; use them only to ask for a named contact.
Big NGOs and foundations run corporate-grade gateways that refuse probes, which is where the 25% unconfirmed comes from. Those contacts need phone or LinkedIn.
A charity is an organisation, and its staff at a work address are business contacts. In the UK, and in some EU states, emailing them about a relevant product or service can rest on legitimate interest, with the source named, an opt-out offered and nothing stored beyond what the outreach needs. Germany, Austria and the Netherlands require prior consent even for business-to-business email. In the UK the distinction that matters under PECR is incorporated versus unincorporated: an incorporated charity is a corporate subscriber, while an unincorporated association or trust may count as an individual subscriber, where consent rules apply. The Data (Use and Access) Act 2025 also changes PECR for charities, including a soft opt-in for charitable purposes and higher maximum penalties; check the commencement status before relying on it. Trustees listed on a register are public, but using a trustee's personal address for marketing moves them into the individual category and needs more care.
In the US, CAN-SPAM applies to commercial email to nonprofits as to any organisation. Form 990 data is public and can be used for qualification; it does not include staff emails, and scraped staff lists carry the usual provenance risks.
One sector-specific courtesy matters more than the law: nonprofits are flooded with vendor pitches and have small teams. Relevance in the first line and a single follow-up protect the sender's reputation in a sector that talks to itself.
Income band, cause area, region, year-end. The register gives you a tight account list of organisations that can actually buy.
Executive director or the function head, through LinkedIn and a finder. Keep the register ID in the row; it is how you re-find the organisation when the person moves.
A bulk job on the whole list. Expect the .org rows to split roughly a third confirmed, a quarter unconfirmed, an eighth catch-all, a quarter invalid.
Confirmed to a low-volume, relevance-first sequence. Catch-all and unknown to phone or LinkedIn. Role addresses used to ask for the right person, not to pitch.
Turnover in the sector is high. A re-check before every send keeps bounces under the 2% working limit on your sending domain.
Sources ranked by data quality
Domain patterns, role addresses and catch-all
The sample test before buying any sector list
The .org, .gov and .edu rows in full
What each result means and how a job runs
Keeping a sector database usable over time
Qualify organisations from charity registers and grant data, which are public and detailed, then find named staff through LinkedIn and a finder or a database. Sector associations and conferences add contacts by role. Whatever the source, verify the list with catch-all labelled before sending, because .org domains hide dead addresses.
In the 2026 corpus .org addresses ran 24.6% invalid and 12.4% catch-all, with a quarter unconfirmed. Volunteer-maintained domains with catch-all switched on, high staff turnover and shared role inboxes explain most of it. Verification that labels catch-all and role separately is the only way to see which rows are real.
Staff at a charity's work address are business contacts, so legitimate-interest B2B email with a named source and an opt-out applies in the UK and in some EU states, while Germany, Austria and the Netherlands require prior consent; CAN-SPAM applies in the US. Trustees' personal addresses and volunteers are individuals and need more care. This is a working summary, not legal advice.
Lists exist, mostly compiled from registers and websites, so they are heavy with role addresses and catch-all domains. If you buy, verify a random 200-row sample first and price the list on confirmed-valid rows. Expect to discard a large share of .org rows.
The organisation's mail server accepts any address at the domain, so a verifier cannot confirm that the specific mailbox exists. One in eight .org addresses behaved this way in the corpus. Treat catch-all rows as unconfirmed: send to them only in a warm, low-volume sequence or reach them by phone.
Upload the nonprofit list, get valid, invalid, catch-all, unknown and role per row, and email only the confirmed. 100 free checks a month, unknowns refunded.
Ayoub built BounceZero's 5-stage validation pipeline, its dedicated BGP-announced IP infrastructure, and the Patroni HA PostgreSQL cluster behind every verification. Previously built high-volume email delivery infrastructure. Trained at 1337 Benguerir (École 42 network, 2019). Open-source: bgp_analyzer.
Where leads come from in each vertical, with the corpus rates for its domains
B2B manufacturing lead generation explained
Healthcare lead generation for B2B sellers
Construction lead generation for B2B sellers
School email lists for edtech and suppliers
Accountants email lists for software and service sellers
Law firm lead generation for legal-tech and service sellers
Continue through related topics