How to Redact a Bank Statement Before Sharing It

By the SladdPDF team · Published August 23, 2026 · Updated August 23, 2026

To redact a bank statement, black out the full account number, the sort code or routing number, any card numbers and the transactions that have nothing to do with the check being made — then keep your name, the bank's name, the statement period, the income deposits and the balances, because those are the evidence the recipient actually asked for. Use a tool that destroys the underlying text rather than one that simply draws a rectangle over it. And check the rules before you start: a landlord will usually accept a redacted bank statement, while a mortgage underwriter almost never will.

Why does anyone need your bank statement?

Almost every request for a bank statement is really a request for one narrow fact: that money reliably arrives in your account. Landlords and letting agents want to see that the rent is affordable. Mortgage and loan underwriters want to verify income, savings and where a deposit came from. Visa and immigration caseworkers want proof that you can support yourself. Benefit and grant assessors want proof that you cannot.

That is the tension at the heart of this page. The recipient needs a small number of facts, but a bank statement is one of the most revealing documents you own. Alongside your salary it lists your address, your account and sort code, your card payments and — line by line — where you shop, who you pay, which pharmacy you use, which clinic billed you, which lawyer you retained, which place of worship takes your standing order, and whether you gamble. Handing over an unedited statement to prove one thing exposes all of it.

The two-part risk is worth naming plainly. First, fraud: your account number and sort code or routing number are the coordinates used to pull money out of an account by direct debit or ACH, and U.S. Regulation E gives consumers a limited window — 60 days from the statement on which an unauthorized transfer appears — to report it before liability for later transfers can attach. Second, impersonation: someone who has read your statement knows your bank, your balance and your last few transactions, which is exactly the material that makes the scam call the FTC warns about — a stranger claiming to be your bank's fraud department — sound convincing.

What should you redact on a bank statement — and what should you keep?

Redact anything that could be used to move money or to profile you, and keep everything that proves the document is genuine and says what you claim it says. The table below is the default set of calls for a consumer sharing a statement as proof of income or funds.

Two habits make the difference between a tidy redaction and an embarrassing one. Work top to bottom on every page rather than only the first — banks repeat the account number and your address in the header or footer of each page. And redact one category at a time (all account numbers, then all card numbers, then transactions), so you do not lose your place halfway through a six-page document.

Ask before you redact: when a full statement is required

Redacting a statement that the recipient is required to receive intact will simply get it sent back, so establish the rules before you open a redaction tool. Consumer-to-consumer and consumer-to-landlord requests are usually negotiable. Regulated financial and immigration processes are usually not.

Mortgage underwriting is the clearest example. Fannie Mae's selling guide, which shapes a large share of U.S. lending practice, asks for two consecutive monthly bank statements — 60 days of account activity — for purchase transactions, or one monthly statement for limited cash-out and cash-out refinance transactions. Monthly statements must be dated within 45 days of the initial loan application, and when copies are sent electronically all text must remain legible with the financial institution's name clearly visible. Individual lender guidelines go further and require every page of the statement, even a blank final page, precisely because a missing page looks like an altered document.

Visa, immigration and benefit applications tend to be similar: the caseworker is assessing a financial threshold and will usually specify the exact period and format required. Read the checklist on the official page for your application before you touch the file.

A landlord is a different situation. The check is affordability, not audit, and a statement showing your name, the bank, the period and the incoming salary answers it. If a letting agent insists on the complete file, it is reasonable to ask what they intend to do with it, how long they will keep it, and whether payslips or an employer letter would do instead. Many will accept the alternative; some referencing services will not.

Why a black box over an account number is not redaction

Drawing a black rectangle over an account number in a PDF viewer does not remove the number — it covers it, and the digits remain in the file underneath. This is the single most common redaction failure, and the guidance published by U.S. federal courts for people filing documents says so bluntly.

The same applies to the workarounds people improvise. Highlighting text in black, drawing a filled shape over it, setting the font colour to white, or placing an image on top all leave the original characters in the document's text layer, retrievable with select-all-and-copy or a text-extraction tool. We take the failure apart in detail in why a black box is not redaction.

Real redaction does one of two things: it deletes the underlying text objects, or it flattens the page to an image so there is no text layer left to recover. Court guidance describes the second route — drawing the redaction boxes and then flattening the page to an image — as the most secure method, because 100% of the information is removed in that conversion. That is exactly what SladdPDF's Secure mode does: after your boxes are placed, each page is rasterized to a flat image and the text, layers and hidden objects underneath are destroyed. The tool's Fast mode draws vector overlays instead and warns you that underlying text may in some cases still be extractable — for a bank statement, use Secure mode.

Does printing and rescanning work?

Yes — printing the statement, blacking out the numbers with a marker and scanning the paper back to PDF is a genuine redaction, and U.S. court guidance names it as the simplest method for a photocopied or scanned document. The advice you sometimes see that it is the only trustworthy method is where the myth starts.

The paper route has real costs. It needs a printer and a scanner. It takes minutes per page instead of seconds, which matters when a lender asks for three months of six-page statements. Quality drops with every pass, and a rescanned statement is an image, so figures can end up too faint or too skewed for a recipient who requires all text to remain legible. It also creates a paper original that now has to be shredded rather than binned. And done carelessly — a single pass of a thin marker over a light-toned page — the digits can still be readable when the page is held to the light or scanned at high contrast.

Digital redaction done properly is equivalent, because it ends in the same place: a page with no recoverable text underneath. The court guidance that endorses the marker method describes flattening to an image as the most secure approach in the same breath. The practical difference is that flattening takes one click, keeps the original resolution, and leaves no paper copy behind.

How to redact a bank statement, step by step

A bank statement is the last file you should upload to an unknown "free online redaction" server: the point of the exercise is fewer copies of your financial data in circulation, not more. SladdPDF runs entirely in your browser — the PDF is processed locally with JavaScript and WebAssembly, nothing is ever uploaded, and the page keeps working offline once it has loaded. If you want the reasoning behind that architecture, see our piece on why local processing is safer than uploading.

1. Download the statement as a PDF. Take the official PDF from your bank rather than photographing the screen. A clean PDF keeps every figure legible, which is what recipients such as lenders require.
2. Open the file in your browser. Go to the SladdPDF redaction tool in any modern browser on Windows, macOS, Linux or ChromeOS and load the statement. No account, no registration, no upload.
3. Mark the account and card numbers. Draw redaction boxes over the full account number, IBAN, sort code or routing number, and any card number — leaving the last four digits visible if the recipient needs to match the statement to a named account. Zoom in for small print; Ctrl+Z undoes a box.
4. Mark the transactions you agreed to remove. Cover the lines that have nothing to do with the check being made, plus other people's names and account details on a joint account.
5. Check every page. Use the page thumbnails to review the whole document. Account numbers, sort codes and your address usually repeat on every page.
6. Export in Secure mode. Secure mode rasterizes each page to a flat image, so the text, layers and hidden objects under your boxes are destroyed and unrecoverable. Adjust the DPI if the recipient needs a crisp file.
7. Remove the metadata. Enable metadata removal on export to clear the title, author, creation tool and hidden tags, then rename the file to something neutral before you send it.
8. Verify before you send. Open the exported PDF, try to select and copy text over the redacted areas, and search the document for the last digits of your account number. Nothing selectable and no search hits means the redaction held.

Being straight about the limit: SladdPDF's free version redacts documents with no page limit, so a full multi-month statement set — often two or three months of pages at once — is covered for free. What Pro (a paid licence key) unlocks is high-resolution 300 DPI export; free export is standard resolution, which is fine for a landlord, a lender or an email attachment. Either way, the principle stands: redact before the file leaves your device. Our general walkthrough on how to redact a PDF for free compares the options.

Sending it: email is the weakest link

A carefully redacted statement can still end up somewhere you never intended, because email is a copying machine. The file lands in the recipient's inbox and stays there; it sits in your Sent folder indefinitely; it is forwarded to a colleague, a referencing agency or a guarantor with one click; and if either mailbox is breached months later, everything ever sent through it is exposed at once. Estate agents and small landlords are not usually running enterprise-grade mail security.

Four habits reduce the exposure. Use the recipient's secure upload portal when one exists, rather than attaching the file to a reply. Send only the pages that answer the question. Ask how long the document will be kept and request deletion afterwards. And be suspicious of any message that asks you to resend a statement to a slightly different address — a redirected document request is a standard opening move in payment fraud.

The same logic applies to the redaction step itself. Uploading your statement to a web service so it can draw boxes on it puts an unredacted copy on someone else's server, which is precisely the risk you are trying to reduce. Redacting locally in the browser keeps the original where it belongs: on your device.

This article is general guidance, not legal advice.