Home › Blog › Redact a Utility Bill

How to Redact a Utility Bill Before You Share It as Proof of Address

A utility bill gets asked for constantly, and rarely for the reason its own paperwork exists: nobody actually cares how many kilowatt-hours you used last month. A bank, a landlord, a rideshare platform or a county election office wants it purely as proof that you live where you say you live. That mismatch is exactly why over-sharing is so easy — the document is designed to itemize usage and billing, not to be handed to a stranger, so it carries an account number, a balance history and sometimes far more than the one fact anyone asked to see. This guide covers what's actually on a utility bill, why the account number is worth protecting on its own, and how to redact a copy before it goes anywhere.

Key takeaways

  • Whoever asked for proof of address almost always needs your name and the service address — not the account number, balance, payment history or usage graph on the same page.
  • The FTC's Red Flags Rule specifically names utility companies among the "creditors" required to run an identity-theft prevention program (16 CFR § 681.2(b)(5)), because a utility account is routinely opened on deferred payment and is a real fraud target.
  • The FTC's Consumer Sentinel Network logged roughly 28,000 reports in 2024 of stolen identities used to open new utility accounts, plus another 2,000 tied to accounts that already existed.
  • If your provider prints a usage graph, it can expose a daily activity pattern — when a home is occupied and when it isn't — a privacy risk NIST's own smart-grid guidance calls out directly.
  • A rectangle drawn over a PDF or a screenshot only hides the pixels; the text underneath, and any metadata attached to the file, commonly survive.

Why a utility bill became a standard identity document

A utility bill ends up on nearly every proof-of-address checklist for a boring but reliable reason: it's issued by an account you can't easily fake owning, addressed to a specific residence, and reissued monthly, so it's rarely more than a few weeks stale. Banks opening an account, landlords screening an application, gig and delivery platforms verifying a driver, and county offices confirming a voter's residence all lean on it for the same narrow fact — that a named person is associated with a specific address right now.

None of those requesters is asking how much electricity you used, what you paid last quarter, or which account number your provider assigned you. That's the gap this guide is about: the document proves one thing, but the page it's printed on carries several more.

What's on the page, and what to redact

Field on the billNeeded for proof of address?Redact it?
Your nameYesKeep
Service addressYesKeep
Statement dateUsually, to show recencyKeep
Account or customer numberNoRedact
Meter number / serial numberNoRedact
Balance, payment history, autopay bank/card detailsNoRedact
Barcode or QR code (often encodes the account number)NoRedact
Usage graph or daily usage tableNoRedact — see below
Social Security number (on some older or reissued bills)NoRedact

Older bills and reissued duplicates are the ones to check most carefully. It's not unusual for a copy pulled from a customer portal or reprinted by a call-center agent to carry a partially printed SSN or a full account number in a footer that a redesigned bill no longer includes — don't assume this month's template matches the one you're about to send.

Why the account number matters on its own

A utility account number isn't just an internal reference — it's frequently enough, paired with a name and address, to move or open service in that account's name, or to answer a call-center's identity check over the phone. That's part of why the FTC's Red Flags Rule treats utilities as creditors in the first place: the rule requires "financial institutions and creditors" that offer accounts with deferred payment to maintain a written program to detect, prevent and mitigate identity theft, and its definitions specifically list utility companies among the creditors covered (16 CFR § 681.2(b)(5)).

The FTC's Red Flags Rule names utility companies among the "creditors" required to maintain an identity-theft prevention program, because utility service is routinely extended on deferred payment — the same structural reason a stolen account number is worth something to a fraudster (16 CFR § 681.2(b)(5)).

That isn't a hypothetical risk. The FTC's Consumer Sentinel Network — the database behind its annual fraud and identity-theft reporting — logged approximately 28,000 reports in 2024 of a stolen identity being used to open a new utility account, plus roughly 2,000 more reports involving an account that already existed. Utilities themselves aren't required to report every fraud incident they catch, so those figures almost certainly understate the total; they're what got reported by consumers, not everything utilities saw.

None of that requires you to hand the number over just because it's printed on the same page as your address. Cover it before the file leaves your device.

Who's asking, and what they actually need

RequesterWhy they want a utility billWhat they actually need from it
Bank or credit union opening an accountFederal rules require verifying a customer's identity, including their address, before opening an account (31 CFR § 1020.220)Name and current service address
Landlord or property managerConfirming where an applicant currently lives, separate from credit and background checksName and address
Gig, delivery or rideshare platformAddress verification during driver or courier onboardingName and address
County clerk or election officeSome states accept a current utility bill as proof of residence for voter registrationName and address
Employer or immigration paperworkConfirming a residential address on fileName and address

The rule that actually applies to a bank — the Customer Identification Program requirement in 31 CFR § 1020.220 — obligates the institution to verify your address; it doesn't specify which document you use to do it, and it certainly doesn't require your account number or balance along with it. The same logic carries over to every other requester on this list: the address is the point, everything else on the page is yours to keep to yourself.

The column people forget: the usage graph

Many providers now print a bar chart of daily or hourly usage directly on the bill, especially with a smart meter behind it. It looks like the least sensitive thing on the page — just numbers about electricity — but a fine-grained usage pattern can reveal exactly when a home is occupied and when it's empty. NIST's own guidance on smart-grid privacy describes this directly: high-frequency energy-usage data can be used to infer occupancy and activity patterns inside a residence, which is why the report treats granular usage data as information that needs its own privacy handling, not just billing detail.

A daily or hourly usage graph on a smart-meter bill can show exactly when a home is occupied — NIST's smart-grid privacy guidance treats that kind of granular usage data as a genuine privacy exposure, not incidental billing detail.

Nobody asking for proof of address needs your usage graph. If your bill includes one, redact it along with the account number rather than treating it as harmless clutter.

Why a black box isn't enough

Utility bills reach people in two common forms, and both defeat a rectangle drawn on top of the page differently. A bill downloaded as a PDF from a provider's customer portal typically keeps its full text layer — the account number is still selectable and searchable underneath a black box drawn over it. A screenshot or photo of a bill flattens the visible pixels, but if that image is then placed into a new PDF or run through OCR by whatever tool receives it, the same text can resurface. A black box is not redaction in either case — it changes what the file looks like, not what data it still contains.

The file's metadata is the other leak specific to a bill pulled from an online account: PDFs generated by billing portals often carry a title or account reference in hidden metadata fields that no page displays. Removing metadata from the PDF on export closes that gap alongside the visible redaction.

A practical redaction workflow

  1. Get the bill in PDF form. Download it directly from the provider's portal rather than photographing a printed copy — a clean digital original makes every later step easier.
  2. Load it in your browser at sladdpdf.com. The file stays on your device from start to finish; nothing is uploaded to a server.
  3. Draw boxes over the account number, meter number, balance, payment details and any barcode or QR code. Check every page — some providers repeat the account number in a footer on later pages.
  4. Redact the usage graph or usage table if the bill includes one, along with any partial SSN on an older or reissued statement.
  5. Leave your name, service address and statement date visible — that's the entire reason the document was requested.
  6. Export in Secure mode and enable metadata removal in the same step, so the underlying text and hidden fields are destroyed, not just covered.
  7. Verify the result. Open the exported file, select all, copy, and paste into a plain text editor — if the account number or balance appears, redo that page.

You can run this entire workflow in SladdPDF, a free browser-based redaction tool. It processes files locally with JavaScript and WebAssembly, so a utility bill never leaves your device, and it keeps working offline once the page has loaded. Secure mode rasterizes each page on export, destroying the text layer and any hidden data beneath the redactions. The free version has no page limit; Pro unlocks high-resolution 300 DPI export.

Redact a utility bill without uploading it anywhere

SladdPDF runs entirely in your browser — files are never sent to a server. Free with no page limit; Pro unlocks high-resolution 300 DPI export.

Redact a PDF now

Frequently asked questions

What should I black out on a utility bill before sending it as proof of address?

Redact the account or customer number, the meter or serial number, the balance and payment history, any barcode or QR code, and the usage graph if the bill includes one. Keep your name, service address and statement date visible — that's what proof of address actually requires.

Is it safe to send my utility bill account number to a landlord or bank?

There's no reason to. Whoever is asking for proof of address needs your name and address, not the account number. The FTC's Red Flags Rule treats utility accounts as a real identity-theft target — it specifically lists utility companies among the "creditors" required to run an identity-theft prevention program (16 CFR § 681.2(b)(5)) — so limiting who sees that number is a reasonable precaution, not an overreaction.

Why would a usage graph on my bill matter for privacy?

A fine-grained, daily or hourly usage graph from a smart meter can reveal when a home is occupied and when it's empty. NIST's smart-grid cybersecurity guidance identifies this kind of granular usage data as a genuine privacy exposure, separate from ordinary billing information.

Is drawing a black box over the account number on a PDF bill enough?

No. A bill downloaded from a provider's portal usually keeps its full text layer, so a number covered by a drawn rectangle can often still be selected, copied or searched underneath it. Proper redaction removes the underlying text — for example by rasterizing the page to a flat image — rather than covering it visually.

Do I need to redact anything if I'm just registering to vote?

Some states accept a current utility bill as proof of residence for voter registration, and an election office needs your name and address for that, nothing else on the page. Redact the account number, balance and usage details the same way you would for any other requester.

Sources
  1. Electronic Code of Federal Regulations — 16 CFR § 681.2: Definitions used in the Red Flags Rule, including "creditor" (§ 681.2(b)(5))
  2. Cornell Law School, Legal Information Institute — 31 CFR § 1020.220: Customer identification program requirements for banks
  3. Federal Trade Commission — Consumer Sentinel Network Data Book 2024
  4. NIST — NISTIR 7628 Revision 1, Guidelines for Smart Grid Cybersecurity, Vol. 2: Privacy and the Smart Grid