BASALT · JOURNAL

Redacting a bank statement so the account number is really gone

2026-08-07 · how to redact a bank statement

You are asked for three months of statements for a rental application, a loan file, a court filing, or an expense claim, and you would rather not hand over your account number and every transaction you made. Learning how to redact a bank statement correctly matters more than it does for most documents, because a statement PDF from a bank is generated text rather than a scan, which means every digit in it is machine-readable and extractable in one command.

What is sensitive on a statement, and where it sits

A statement looks simple and carries an unusual density of directly actionable data.

The account number. Printed in the header block of every page, sometimes again in a summary table, a payment stub, or a footer. It is rarely in one place.

The routing or sort code, IBAN, and SWIFT identifiers. Often on page one only, in small type near the bank's address block, and overlooked because the eye treats that block as branding.

Full card numbers. Card statements print the full number or a long fragment in the header, and fragments also appear inside transaction descriptions for authorizations and reversals.

Name and mailing address. In the panel designed to show through a window envelope, and repeated in the page header on later pages.

Balances. Opening, closing, available credit, and the running balance column. If your purpose is proving income you may need them. If it is proving one payment, you do not.

Transaction descriptions. The field people forget. Descriptions name counterparties: an employer, a landlord, a clinic, a lawyer, a pharmacy, a person you paid. They frequently carry a merchant reference, a partial card number, and sometimes a second person's full name.

Statement and customer reference numbers. Cycle numbers and customer identifiers are stable across statements and link documents to each other.

A bank statement is not a scan, so nothing in it is safe by default

Statements downloaded from online banking are produced by a template engine. The digits are real text objects painted by text-showing operators, not pixels, which has two consequences.

First, drawing a black rectangle over an account number changes nothing. The rectangle is one more drawing instruction on top, the character codes underneath stay in the content stream, and any extraction tool reads them back. A drawn black box is not a redaction, and it keeps being treated as one.

Second, the numbers are structured. An account number sits in a predictable position with a predictable format, so recovering it from an incompletely redacted file needs no skill and no specialist software. A statement is the worst document to be casual with and the one handled most casually, because it feels routine.

Partial masking leaks more often than people expect

The habit is to leave the last four digits visible, because that is how banks display accounts in their own interfaces. That is safe when the rest of the number was never disclosed, and unsafe inside a document that shows the rest of it somewhere else.

If page one carries the full number in the header and page four carries the masked version, masking has revealed nothing new. A payment stub, a transfer confirmation, or a check image inside the same PDF creates the same problem. The value is either removed everywhere in the file or it is disclosed.

The same logic applies across a set. Redacting January thoroughly and February loosely discloses the number, because the recipient has both files. Consistency across the set protects you, not care on a single page.

How to redact a bank statement, step by step

Decide what the recipient actually needs. A landlord verifying income needs deposits and a name, not your account number or the description of every debit. Narrowing the ask is the cheapest risk reduction available and is often accepted without argument.

Inspect the file before marking. Check what the PDF carries beyond the page: metadata, XMP, annotations, attachments, and earlier revisions. Bank exports commonly retain an original file path, and that path sometimes contains the account number.

Write down the values to remove. Account number, routing or sort code, IBAN, card numbers, customer reference, address, and each counterparty name, with formatting variants: spaced, hyphenated, and plain.

Search and redact each value across the whole document. A whole-file search catches the header on every page, the summary table, the footer, and the stub, which is exactly where a page-by-page pass fails.

Handle images separately. A scanned check image, a logo block containing an account line, or a QR code on a payment slip needs pixels destroyed and the image re-encoded, not covered.

Strip metadata and attachments, and write the file as one generation. An incremental save appends new objects and keeps the old ones, so the unredacted page can remain reachable inside a file that displays correctly.

Verify before sending. Extract the text from the finished file and search it for every value on your list. Verifying a PDF redaction lists the commands, and the general procedure is in how to redact a PDF on a Mac.

The tool you use is part of the exposure

Uploading a statement to a free web service hands your unredacted account number, balance, and transaction history to whoever operates the site, and the upload happens before any redaction is applied. The service may be careful, and you have no way to check. Cloud PDF tools and the risk they carry covers what happens to an uploaded file.