How to redact a bank statement before you share it

To redact a bank statement, black out your full account and routing numbers, any card numbers, and the individual transactions that are not relevant to the request, while keeping your name, the bank’s name, the statement period, and the balance or deposits being verified. Do it on your own device with a tool that destroys the hidden characters, not one that draws a box over them, and run a copy-paste test on the final file before you send it.

That is the whole method. The rest of this guide is the detail: exactly what to hide, exactly what to keep, and the two traps that catch most people, a black box that does not actually remove anything, and an “online redactor” that asks you to upload the most sensitive document you own.

What to hide

A landlord checking your income, a lender checking your deposits, or a visa officer checking your balance needs proof, not access. Hide everything that could be used to move your money or to build a picture of your life.

• Your full account number. Nobody verifying income or balance needs it. If they need to match the account to something, ask whether the last few digits are enough.
• The routing number, sort code, or full IBAN. Together with an account number, these are the keys to direct debits and transfers.
• Any card numbers that appear on the statement, in transaction lines or in the header.
• Individual transactions that have nothing to do with the request. Someone verifying your salary does not need to see your pharmacy, your subscriptions, or where you were on Friday night. Black out the lines, leave the totals.
• Other people’s names. A roommate who split the rent, a friend who paid you back. Their privacy is not yours to give away.

When in doubt, hide it. You can always send a second copy with more visible. You cannot take back what you already sent.

What to keep visible

Redact too much and the statement stops proving anything, which usually means a rejected application and a request for a cleaner copy. Keep the parts that answer the question you were asked.

• Your name, exactly as it appears on the application.
• The bank’s name and logo, so the document is recognizable as a real statement.
• The statement period, because most requests are for specific months.
• The figure being verified. For a rental application that is usually the incoming salary or the balance. For a loan, the deposits. For a visa, the balance across the period.

If you are not sure what the other side needs, ask before you redact. The rule is simple: keep what answers their question, hide everything else.

The black box trap

Here is the part most guides skip. If you open the statement PDF, draw black rectangles over the numbers, and save, the text is usually still in the file, selectable and searchable right under the boxes. Anyone you send it to can copy it out in seconds. We wrote a full explainer on why the text is usually still there and how to remove it for real.

The quick test: open the final file, select all, copy, and paste into a plain text editor. If any number you redacted shows up, you covered it, you did not remove it.

Why the statement should never leave your computer

Search for how to redact a bank statement and most of what ranks is published by online redaction tools. Their first step is always the same: upload your statement to our server. Think about what that means. The entire point of redacting is to limit who sees this document, and step one hands a complete, unredacted copy to a company you know nothing about, with a privacy policy you will never read.

A bank statement shows your income, your balance, your habits, and the numbers attached to your money. The only redaction that makes sense for a document like this happens on your own device, where the file never travels anywhere at all.

Step by step

1. Open the statement on your computer, from your banking portal or a saved copy.
2. Go through the hide list above: account and routing numbers, card numbers, irrelevant transactions, other people’s names.
3. Redact with a tool that destroys the characters instead of covering them.
4. Save the result as a fresh PDF.
5. Test that exact file: select all, copy, paste into a text editor, and search for a number you redacted. Zero hits means it is safe to send.

The tool we built for this

This exact job is why we built Blackbar. It runs in your browser, entirely on your device, with no uploads, no account, and no tracking. You black out a selection or a whole element, and it can auto-detect card numbers, IBANs, and long ID numbers such as account numbers, plus emails and phone numbers. The redacted characters are destroyed, replaced with solid blocks, so the PDF you save has no recoverable text under the marks. Then you save a clean PDF and send that.

Blackbar is a one-time purchase of $12, with no subscription and no account. The free tier cleans up and prints any page; Pro unlocks redaction and inline editing, with a 14-day Pro trial for new installs. Your statement stays on your machine the whole time, which is the entire point.