# How to Redact Account Numbers on Bank Statements

- Author: AutoBankConvert (https://www.autobankconvert.com)
- Published: 2026-04-01
- Updated: 2026-04-01
- Category: Security and trust
- Canonical: https://www.autobankconvert.com/blog/redact-account-numbers-on-bank-statements

> How to redact account numbers on bank statements before sharing them, which digits to keep for matching, and why a black box in a PDF is often not enough.
To redact account numbers on bank statements, use a PDF tool's true redaction feature, which deletes the digits from the file, rather than drawing a box over them. Keep the last four digits so the statement still matches the right account, apply the redaction, remove hidden data, and test the saved copy before you send it.

## Which account number digits should stay visible after redaction?

Keep the last four digits of the account number visible and remove everything before them. Four digits are enough for you, the client and a CPA to tell which account the statement belongs to, while being far less useful to a fraudster than the full number. Many banks already print statements this way.

The account number is not the only thing worth removing. Check the whole page for the same digits in other places:

- The header, where the number usually appears in full or masked.
- A barcode or scan line printed along the bottom or side of each page.
- Check images, which show the routing number and full account number in the magnetic line at the bottom.
- Transfer descriptions such as "TRANSFER TO CHK 001234567890", which may repeat another account's number.
- Footer lines on every page, not just the first.

Leave the amounts, dates and balances alone. Those are what the bookkeeper, the lender or the CPA actually needs, and hiding any of them makes the statement useless for matching transactions. The example below shows what to keep and what to hide. The values are made up.

| Item on the statement | Example before | Example after |
| --- | --- | --- |
| Account number in header | 001234567890 | Ending 7890 |
| Routing number on check image | 012345678 | Removed |
| Transfer description | TRANSFER TO SAV 009876543210 | TRANSFER TO SAV ending 3210 |
| Daily balance | 8,412.55 | 8,412.55 (kept) |

## Why a black box over a statement PDF can leave the account number readable

A black box drawn over a PDF often covers the account number on screen while leaving the digits in the file underneath. Anyone who selects the text, copies it, or searches the document can still read the number. Highlighting the text in black, or placing a shape or comment on top, has the same flaw.

Digital statements from a bank carry a text layer, the actual characters the bank printed. A shape added on top is a separate object. It changes what the page looks like without touching the text beneath it, so a search for the account number still finds a match, and copying the covered area pastes the digits into another document.

Scanned statements that have been run through text recognition hide the same trap. The image may show the box, while the recognized text layer behind the image still holds the full number.

Printing the statement to a new PDF does not reliably help either, because many print-to-PDF tools keep the text layer. Use the redaction tool built for the job.

## Redacting account numbers with a real redaction tool, step by step

A real redaction tool marks the area, then deletes the text and image content inside it when you apply the redaction. Most full PDF editors include one. Work on a copy, never the original, and follow the steps in order, because skipping the apply step is the most common way to end up with a box and no redaction.

1. **Save a copy** of the statement with a new name, such as adding "redacted" to the file name.
2. **Search for the full account number** first and mark every match, so you catch repeats in descriptions and footers.
3. **Mark the remaining areas** by hand: the header number, check images, barcodes.
4. **Apply the redaction.** In most tools, marking alone only previews it. Applying it removes the content.
5. **Remove hidden information**, using the tool's option to clear metadata, comments, attachments and hidden text.
6. **Save, close and reopen** the file before checking it.

Staff should follow the same steps. A short written procedure keeps a new hire from improvising with a drawing tool. It also belongs in the training you give anyone who handles client statements, which the post on [background checks for bookkeeping staff](/blog/background-checks-for-bookkeeping-staff) places within wider hiring safeguards.

## Checking a redacted bank statement before it leaves the practice

Check a redacted bank statement by trying to recover what you removed. Search the saved file for the full account number and for its first few digits, select the redacted area and paste it into a blank document, and look at the file's properties. If any of these returns a digit, do not send the file.

Run the check on the reopened file, not the version still open from editing:

- [ ] A search for the full account number finds nothing.
- [ ] Copying the redacted area pastes nothing readable.
- [ ] Every page has been checked, including the last.
- [ ] Check images show no routing or account line.
- [ ] File properties show no account details in the title or subject.
- [ ] The amounts and balances still read correctly.

The last item matters if the statement will be converted later. A redaction that slips onto a balance column can stop a balance check from passing, and the post on [why a bank statement gets flagged as unsupported](/blog/unsupported-bank-statement-flagged) explains how converters treat files they cannot read cleanly.

Doing this work on a home laptop or a shared device adds its own risk, since the original and the redacted copy both end up on that machine. The guide to [data security for remote bookkeepers](/blog/data-security-for-remote-bookkeepers) covers where those files should live.

## When should you share an unredacted bank statement instead?

Share an unredacted statement when the recipient needs the full number to do their job and has a right to it, such as the client's own CPA, a lender processing a loan the client applied for, or the bank itself. Redaction is for sending statements to people who only need the transactions, not the account.

It also makes little sense to redact files moving within the engagement. Your own conversion and categorization work needs the statement as the bank produced it, and a tool like [AutoBankConvert](/get-started) reads the original PDF directly while storing it encrypted. In that case the protection comes from how the file is stored and shared, not from editing it.

Decide which recipients get redacted copies at the start of each engagement, and write it into your onboarding notes so staff do not decide case by case. If redacting files for lenders or other parties is a regular request, it is work worth naming in your [bookkeeping onboarding fee](/blog/bookkeeping-onboarding-fee) or engagement terms.