A bank statement carries more than your balance. Most of what makes it dangerous is not the number people are looking at.
What is actually on the page
People think of a statement as a list of transactions. It is closer to an identity dossier.
- Account number and sort code or routing number — in many countries enough to set up a direct debit.
- Full legal name and registered address — the two fields most identity checks key on.
- Complete transaction history — where you shop, where you travel, your employer, your rent, your subscriptions, any medical or legal payments, political or religious donations.
- Balances — which affect negotiating position in ways you may not want.
- Card numbers, often partially masked — combined with other leaks, partial numbers narrow a search considerably.
The transaction history is the part people underestimate. A year of statements reveals health conditions, relationship changes, job changes and habits that no one asked for and no one needs.
Who legitimately needs one
| Who | Legitimate? | What they actually need |
|---|---|---|
| Mortgage lender | Yes | Usually 3–6 months, full detail |
| Landlord or letting agent | Often | Proof of income, not full history |
| Accountant | Yes | Business account, not personal |
| Visa application | Yes | Balance and a stated period |
| Employer | Rarely | Almost never needs a statement |
| Anyone by email out of the blue | No | This is the standard phishing script |
For a landlord asking to verify income, an employer letter or a payslip usually satisfies the same requirement while disclosing far less. It is reasonable to offer the narrower document first.
Black rectangles are not redaction
This is the single most consequential mistake in this whole subject, and it has embarrassed law firms and government departments repeatedly.
Drawing a filled rectangle over text in a PDF adds a shape on top. The text underneath is untouched. Anyone can select it, copy it, and paste it out — or simply delete the rectangle. The same applies to a highlighter set to black, to a drawn box in a PDF annotator, and to anything described as "mark-up".
True redaction removes the underlying content from the file. If your tool does not explicitly say it removes rather than covers, assume it covers.
How to redact so it actually holds
Without a dedicated redaction tool, the reliable method is to destroy the text layer entirely.
- Convert the pages to images with PDF to JPG at 200 DPI. This flattens everything — there is no longer a text layer to recover.
- Black out the sensitive areas in any image editor. You are painting pixels now, so what you cover is genuinely gone.
- Rebuild the PDF with JPG to PDF.
- Verify by trying to select text in the result. If nothing selects, the text layer is gone. Then check the file size dropped as expected — a suspiciously similar size can mean the original pages survived.
The cost is that the document is no longer searchable and the file is larger. For a statement being sent once to one recipient, that is a trade worth making. Do this to a copy — you want the original intact.
Metadata outlives the visible page
A PDF carries fields nobody looks at: author name, the software that produced it, creation and modification timestamps, and sometimes the full local file path of the original.
That path is the one that surprises people. C:\Users\firstname.lastname\Documents\Divorce\statements.pdf discloses a name and a context that were nowhere on the page.
Rendering to images and rebuilding, as above, discards all of it as a side effect. If you are sending the original PDF unmodified, check the document properties in any reader before it goes.
Sending it
The transfer matters as much as the redaction.
Email is not private. It hops between servers, sits in two mailboxes indefinitely, and is included in whatever backups both parties run. A statement emailed in 2026 is still in that mailbox in 2032.
- Use the recipient's own upload portal when they have one. Lenders and agencies almost always do, and it keeps the document out of email.
- If you must email, encrypt the PDF and send the password by a different channel — see how to password protect a PDF.
- Send the narrowest range that satisfies the request. Three months, not three years. Split PDF extracts exactly the pages needed.
- Ask what happens to it afterwards. A legitimate organisation can tell you their retention period.
And for the processing itself — the splitting, compressing, converting — a browser-based tool means the statement is never uploaded to a third party at all. That is the whole reason these tools run the way they do.
Frequently asked questions
What should I redact from a bank statement?
Anything the recipient does not need. Usually that means the account number, sort code or routing number, card numbers, and transactions unrelated to their purpose. A landlord verifying income does not need to see your medical payments or your political donations.
Why is drawing a black box over text not enough?
Because the rectangle is a shape drawn on top and the text underneath is untouched. Anyone can select and copy it, or delete the box. This has caused real disclosure incidents at law firms and government departments. True redaction removes the content.
How do I redact a PDF properly for free?
Convert the pages to images at about 200 DPI, black out the sensitive areas in an image editor, then rebuild the PDF from the images. That destroys the text layer entirely. Verify by trying to select text in the result — nothing should select.
Is emailing a bank statement safe?
Not especially. Email hops between servers and sits in two mailboxes indefinitely, plus whatever backups both sides run. Use the recipient's upload portal if they have one, or encrypt the PDF and send the password through a different channel.
Can a landlord legally ask for my bank statements?
In most jurisdictions they can ask, and you can offer an alternative. An employer letter or payslips usually prove income just as well while disclosing far less. It is reasonable to offer the narrower document first.
Does a PDF contain hidden information?
Yes. Author name, producing software, timestamps and sometimes the full local file path of the original are all stored as metadata. That path can disclose a name and a context that appeared nowhere on the visible page.