How to redact a bank statement safely

Most redacted bank statements are not redacted. A black rectangle drawn over text in a PDF editor hides the text the way a sticky note does: the characters are still in the file, selectable, searchable, and one copy-paste away from disclosure. If you share statements with landlords, lenders, solicitors, or in tribunal bundles, this guide is the difference between redacted and embarrassed.

Why the black box fails

A digital PDF stores text and graphics as separate objects. Drawing a rectangle adds a graphic on top; the text object underneath is untouched. Anyone can select the "hidden" text, search for it, or open the file in a text extractor. This exact mistake has caused real data breaches in court filings and FOI releases.

Test any redacted PDF yourself: press Ctrl+F and search for the account number you think you removed. If it is found, it was never gone.

Safe methods, in order of preference

1. True redaction tools

Adobe Acrobat Pro's Redact tool (and equivalents in some PDF suites) removes the underlying text and image data, not just covers it. Apply redactions, then use the tool's sanitise step to strip metadata, and save as a new file.

2. Flatten to image, then crop

Print the PDF to image (or screenshot pages), edit out the sensitive regions in an image editor, and rebuild a PDF from the images. Crude but genuinely destructive: pixels removed are gone. The trade-off is that the result becomes a scan, with everything that implies for later conversion.

3. Ask the bank for less

For proof of a specific payment, many banks can produce a single-transaction confirmation letter, which beats sharing a month of unrelated activity.

What usually needs redacting

Account number and sort code (except the parts a recipient genuinely needs), the account holder's address, other parties' full account details in transfer descriptions, and card numbers embedded in merchant references. Balance and transaction history are often the point of sharing, so think about what the recipient actually requires and remove the rest.

Metadata

PDF files carry creation metadata, and some editors keep an undo history inside the file. After redacting, check File, then Properties, and prefer tools with an explicit sanitise or remove-hidden-information step before sharing.

This guide is general information, not legal advice. Reviewed 15 July 2026.