Free tool
Statement redactor
Sharing a statement with an accountant, landlord or forum? Paste the text and get a copy with card numbers, account numbers, IBANs, sort codes, emails and phone numbers masked. Everything runs in your browser — nothing is uploaded.
Runs entirely in your browser — nothing you paste is uploaded.
What gets masked
Card numbers (13–19 digits, including spaced and hyphenated formats), IBANs, UK sort codes, long account numbers, email addresses and phone numbers. These are the same patterns StatementDecoder applies server-side before storing anything from an uploaded statement — here they run locally, which you can verify by going offline before pasting.
What to redact before sharing a statement
Statements get shared constantly — with landlords, lenders, visa officers, accountants, marketplaces and support teams. Before any of that, remove what the recipient doesn't need: full card numbers (PANs), account numbers and IBANs, sort codes and routing numbers when not required, and any balances or transactions unrelated to the purpose. A landlord verifying income doesn't need your card number; a support team investigating one charge doesn't need your salary.
The dangerous failure mode is redaction that doesn't actually remove data: black rectangles drawn over PDF text leave the text selectable underneath, and cropped screenshots often ship with metadata. Redaction must replace or strip the underlying characters, not paint over them.
How this redactor works — and why it's browser-only
This tool runs entirely in your browser: the statement is parsed locally, card and account patterns (PANs, IBANs, sort codes, routing numbers) are detected and masked to their last digits, and you download the cleaned file. Nothing is uploaded, which is the correct default for a document whose entire purpose is that nobody else should see the sensitive parts.
The same masking rules run server-side before storage when you use the full analyzer — numbers are redacted before anything is persisted, ever.
Sharing a statement safely for a rental, loan or dispute
What you hide depends on who's asking and why. A landlord verifying income needs your name, the statement period and the salary or income lines — not your card number, full account number, or your spending. A lender wants to see balance and regular income, so leave those and redact card numbers and unrelated transactions. A dispute or chargeback needs the one contested transaction and enough context to place it, and nothing else. The safe default is to reveal the minimum that answers the question, then ask the requester if they truly need more.
Whatever the case, always remove full card and account numbers and sort codes before a statement leaves your device. Those, plus your name, are enough to attempt fraud.
Frequently asked questions
Does my statement leave my computer?
No. The redactor runs entirely in your browser — the file is parsed and cleaned locally and never uploaded.
What patterns does it redact?
Card numbers (PANs), account numbers, IBANs (keeping the country prefix), sort codes and routing numbers — masked to their final digits so documents stay verifiable without being exploitable.
Is a black box drawn over a PDF safe?
Usually not — the text remains selectable and searchable under the rectangle. Proper redaction replaces the characters. If you've shared such a PDF, treat the numbers as exposed.
What should I leave visible for income verification?
Typically your name, the statement period, and the relevant income lines. Ask the requester exactly what they need — then share only that.
How do I redact a bank statement PDF properly?
Replace the characters, don't just cover them. A black box drawn over a PDF usually leaves the text selectable underneath — anyone can copy it out. Use a tool that removes the underlying text (this one works in your browser, so the file never uploads) or flatten the page to an image after redacting.
Is it safe to email a bank statement?
Only after redacting card numbers, full account numbers and sort codes, and only to a party who genuinely needs it. Email isn't encrypted end-to-end, so share the minimum, and prefer a secure upload portal when the requester offers one.
Free to try
See everything hiding in your bank statement
Upload a statement and get every merchant identified, subscriptions with real yearly costs, trials that quietly converted, duplicate charges and bank fees — in about thirty seconds. Free account, no card required, files deleted automatically after 24 hours.
No bank logins · card numbers redacted before storage · everything deleted after 24 hours
Related tools