Where to find relevant communities:

• Slack communities — Search “[industry] Slack community” or “[role] Slack group.” Most are free to join. Relevant examples: OnDeck, Pavilion (for sales/revenue roles), ProductLed, Indie Hackers.
• Reddit — Subreddits like r/entrepreneur, r/smallbusiness, r/SaaS, r/marketing surface people publicly discussing specific problems. People who post questions are demonstrating active need.
• Facebook Groups — Still active for many B2B niches, especially in e-commerce, real estate, and local services
• Discord servers — Growing for tech, crypto, creator economy, and developer communities
• Indie Hackers — Founders building bootstrapped businesses. Extremely high engagement with specific business problems.

How to use this ethically:

Don’t scrape and spam community members. That’s the fastest way to get banned and damage your reputation in the exact community where your prospects live.

Instead: join, contribute, build genuine presence over 2–4 weeks, then reach out individually to people who have posted about a specific problem. The outreach message writes itself: “I saw your post in [community] about [specific problem] — we’ve helped a few founders with exactly that. Would it be worth a quick chat?”

The conversion rate on community-based outreach, when done this way, is dramatically higher than cold database outreach because there’s a pre-existing touchpoint that isn’t an ad or a pitch.

---

Method 4: The Competitor Customer Method

Your competitors’ customers are people who have already decided they need a solution in your category. They’re not prospects who need to be educated about the problem — they’re already paying for a solution, which means the only question is whether your solution is better for their situation.

How to find competitor customers:

• G2, Capterra, and Trustpilot reviews — People who leave reviews on software comparison sites often include their name, company, and role. These are verified buyers in the category.
• Case studies on competitor websites — Companies that feature in a competitor’s case study are confirmed buyers. The decision-maker who agreed to the case study is usually named.
• LinkedIn company followers — People who follow your competitor’s LinkedIn page have self-identified as category-aware.
• Twitter/X mentions — Search your competitor’s product name on X. People who tweet about using a product often include enough information to identify and reach them.

The outreach angle for competitor customers:

Don’t lead with “switch from [competitor] to us.” That’s an immediate objection trigger. Lead with a specific gap or limitation that your solution addresses that their current provider doesn’t — framed as a question, not a claim.

“I noticed you’ve been using [Competitor] for [function] — curious whether [specific limitation] has been an issue for you. We’ve built something that addresses that specifically.”

---

Method 5: Content Engagement Scraping

People who engage with content about a specific topic are warm prospects. When someone likes, comments on, or shares a post about a problem you solve, they’re telling you their priorities.

The manual approach:

Find 5–10 pieces of content (LinkedIn posts, YouTube videos, Twitter threads, blog articles) about the specific problem your offer addresses. Review the engagement — likes, comments, shares. The people engaging with that content are your prospects.

For LinkedIn specifically: click “reactions” on any post to see who liked it. Click “comments” to see who engaged with it. Build a list of commenters whose profiles match your ICP.

The semi-automated approach:

Tools like Phantombuster can scrape LinkedIn post engagement automatically — extracting the list of people who engaged with a specific post. This gives you a structured list with names, titles, and profile URLs that you can then enrich and sequence.

Use this carefully — LinkedIn’s terms of service prohibit scraping, and automated tools that operate too aggressively can trigger account restrictions. The same safety guidelines from the LinkedIn outreach sequences article apply here.

---

Enriching Your List: Finding Contact Information

Once you have a list of prospects identified through the methods above, you need their contact information. Here’s the enrichment stack that works without a paid database subscription:

Tool	What It Does	Cost
Hunter.io	Finds email addresses by name and domain	Free tier: 25/month
Snov.io	Email finder + verification	Free tier available
RocketReach	Email and phone by name/company	Limited free tier
LinkedIn (directly)	Many profiles show email in contact info	Free
Company website	About/team pages often list emails	Free
WHOIS lookup	Domain registration sometimes lists owner email	Free

For most outreach campaigns, Hunter.io and Snov.io on free tiers are sufficient to get started. Once you’re running at volume and the list-building is validated, upgrading to a paid plan or adding Apollo for enrichment makes sense.

Verification before sending:

Always run your final list through a verification tool (ZeroBounce, NeverBounce, or Millionverifier) before sending a single email. Invalid addresses create bounces, bounces damage sender reputation, and damaged sender reputation means your emails stop reaching anyone’s inbox. This step is non-negotiable.

---

Putting It Together: The 48-Hour List Build

Here’s a practical workflow for building a list of 50–100 qualified prospects in 48 hours without spending anything on data:

Hour 1–2: Define your ICP precisely. Industry, company size, role, one or two specific pain points. Write it down — vague ICPs produce vague lists.

Hour 3–6: LinkedIn Boolean search + post engagement method. Identify 30–40 prospects. Save profile URLs in a spreadsheet.

Hour 7–10: Job posting scan on LinkedIn Jobs and Wellfound. Add 20–30 companies actively hiring in a way that signals your ICP problem. Identify the relevant decision-maker at each.

Hour 11–16: Community and content engagement review. Identify 15–20 people who have publicly discussed the specific problem. Add to the list.

Hour 17–24: Enrichment. Run the full list through Hunter.io or Snov.io to find email addresses. Verify with a free verification pass.

Hour 25–48: Qualify and prioritize. Review the full list and rank by signal strength — job posting + LinkedIn activity + community engagement is a higher-intent prospect than LinkedIn search alone. Start your sequence with the highest-signal 20–30 names.

The result: a list of 50–100 prospects that is more targeted, more timely, and higher-converting than anything you’d get from a purchased export — built in two days with minimal cost.

If you want the full outreach infrastructure built around this list — sequences, automation, follow-up cadence — the free strategy session at GalaxyBuilt covers exactly that.

---

Summary

Building a B2B lead list without buying data means using intent signals instead of demographic filters. LinkedIn Boolean search and post engagement mining surface people who are actively discussing the problem you solve. Job posting intelligence identifies companies with active gaps your offer fills. Community participation exposes high-intent prospects who have self-selected into problem-aware conversations. Competitor customer research finds people already committed to the category. Content engagement scraping identifies warm prospects from their own behavior. Enrich found prospects with Hunter.io or Snov.io, verify before sending, and prioritize by signal strength. The list you build this way will outperform a purchased export on reply rate — because relevance and timing beat volume every time.

---

Get the weekly intel — join the free newsletter

---

References

[1] Hunter.io — “Email Finder Features and Free Tier” — hunter.io — 2024 [2] G2 — “B2B Software Reviews and Buyer Intent Data” — g2.com — 2024 [3] Phantombuster — “LinkedIn Post Engagement Scraper” — phantombuster.com — 2024 [4] Wellfound — “Startup Job Listings and Company Data” — wellfound.com — 2024 [5] ZeroBounce — “Email Verification and Deliverability Guide” — zerobounce.net — 2024