A landlord, lender, or visa office asked for a bank statement as proof — not for your full account number, your routing number, or a line-by-line record of where you spend money. This guide covers exactly what to black out, and how to do it privately, without uploading the most sensitive file you own to a stranger's server.
People are asked for bank statements all the time: a landlord verifying you can cover rent, a lender or mortgage broker confirming income and reserves, a visa or immigration office checking you meet a minimum-funds threshold, a benefits or financial-aid application, or an accountant who needs a few specific figures. In almost every case the recipient needs one narrow thing — that an account exists in your name, or that a balance clears a bar — not your complete account number, your routing number, or an itemized log of every purchase you made last month.
Handing over the raw statement is a quiet security mistake. A full account and routing number is enough for someone to attempt ACH fraud or fake direct-debit setups. The transaction list is a map of your habits, health, location, and relationships. The document usually carries your home address too. Once you email or upload that file, you've lost control of where it lives and who forwards it. Redacting first means the recipient still gets their proof, and you keep everything they don't actually need.
Work top to bottom. What you keep depends on why they asked — when in doubt, ask the recipient which figures they actually need, and remove the rest.
Black out the full account number and the routing / sort / IBAN number. If the recipient needs to match the account to you, it's standard to leave only the last four digits visible and cover the rest.
The statement header usually prints your full mailing address. Unless they specifically need proof of address, cover it.
If they only need to see income or that a single figure clears a threshold, black out the running balance column and the daily balances. Leave the one number they asked for.
Each transaction line reveals habits, health, location, and who you pay. Redact lines that aren't relevant — keep only the deposits or charges that prove the point you're making.
A bank statement is the textbook example of a document you should never drop into a random online "redact PDF" tool. Most of those services upload your file to a server you don't control, process it there, and ask you to trust their retention policy. For a document that contains your account number, balance, and home address, that's a needless risk — the whole point of redacting is to stop this information from spreading.
Redact it locally instead. BlackoutPDF runs entirely in your browser — the file is opened, edited, and exported on your own machine, and nothing is ever sent anywhere. You don't have to take that on faith: open the tool, turn off your Wi-Fi, and redact the statement fully offline — it still works because there's no server in the loop. Or open your browser's DevTools Network tab and watch: no upload request fires. On the desktop, Adobe Acrobat Pro is the established local alternative if you already own it.
Drag your bank statement PDF into BlackoutPDF. It loads in the browser — nothing uploads. If you want to prove that, switch off your Wi-Fi first; the tool keeps working.
Draw a black box over the account and routing numbers, the balance column, your address, and any transactions you're not keeping. To catch every instance fast, use Auto-Redact to find and cover account-number patterns across all pages at once.
Hit export. BlackoutPDF flattens each page to pixels, so the covered numbers are destroyed rather than hidden, and metadata is stripped in the rebuild. The downloaded file is the clean copy you send.
This is the part that catches people. If you "redact" by drawing a black rectangle over your account number in Preview, a generic PDF viewer, or a word processor, the number is still in the file underneath the box — and the recipient can select-and-copy it out, delete the rectangle, or extract the text layer to read it. The redaction has to be destructive: the content itself must be removed, not merely covered. BlackoutPDF does this by rebuilding the page as flat pixels with nothing underneath; if you want the full explanation of why a black box fails and how to verify yours held, read why a black box isn't redaction.
BlackoutPDF removes the content instead of covering it: pages are re-rendered to pixels and rebuilt into a fresh PDF, so there's no text layer left under the black and metadata is stripped. It all happens in your browser — your statement never leaves your machine. Free for short files; works fully offline, so you can prove the no-upload claim yourself.
Related, while you're here: redact a PDF without uploading it explains the no-upload architecture in depth, and see all guides for more on redaction done right.
At minimum, cover your full account number and routing (or sort / IBAN) number — it's common to leave only the last four digits visible if the recipient needs to match the account to you. Also black out your home address, the running balance column if a balance isn't what they're verifying, and any individual transaction lines that aren't relevant to the proof you're providing. Keep only what the landlord, lender, or office specifically asked to see, and remove the rest. When unsure which figures they need, ask before you send.
Use a tool that runs locally instead of on a server. BlackoutPDF works entirely in your browser — the statement is opened, edited, and exported on your own machine and is never sent anywhere. You can prove it by turning off your Wi-Fi and redacting the file fully offline, or by opening your browser's DevTools Network tab and confirming no upload request fires. On the desktop, Adobe Acrobat Pro is the established local alternative. Avoid generic online "redact PDF" sites for a bank statement, since most upload the file to process it.
No — not if you just draw a black rectangle over the numbers. In Preview, a generic PDF viewer, or a word processor, the black box sits on top while the original account number, balance, and transactions stay in the file underneath. Anyone can select and copy the hidden text, delete the box, or extract the text layer to read it. The redaction has to be destructive, meaning the content itself is removed. BlackoutPDF achieves this by re-rendering each page to flat pixels and rebuilding a new PDF, so there's nothing left under the black to recover.
Often yes. Many landlords, lenders, and offices need to tie a statement to a specific account, and showing only the last four digits lets them do that while keeping the full number — which is what enables fraud — covered. Black out everything but those last four. If the recipient hasn't said they need to match the account, you can cover the entire number. The same logic applies to the balance and transactions: reveal the single figure or deposit that proves your point, and redact the rest.