Propertypass
Compliance Briefing

How to Black Out a Bank Statement for an Apartment (UK GDPR & Privacy Guide)

Sarah Jenkins
Sarah Jenkins
Property Compliance Specialist
August 2026 8 min read

Having spent over a decade in property compliance and tenant referencing, I have seen hundreds of applicants accidentally expose their entire financial lives when applying for a rental apartment. If you need to learn how to black out a bank statement for an apartment application without leaking sensitive sort codes or personal account numbers, Propertypass delivers 100% in-browser WebAssembly privacy with zero cloud server uploads and no sign-up required.

When a landlord, estate negotiator, or referencing agency asks for proof of income, your immediate goal is simple: prove that you earn enough money to pay the rent on time without giving strangers a complete window into your private spending habits.

Unfortunately, most people approach this task by opening Apple Preview or Adobe Reader, drawing a few rough black boxes over their account numbers, and emailing the file off.

An hour later, an unauthorized party opens that PDF, highlights over the black boxes, presses Ctrl+C, and copies the underlying account number into a plain text file.

In this guide, we will break down the exact legalities of blacking out bank statements, what data you must hide versus what must remain visible, and how to execute permanent vector-level blackouts directly inside your web browser.

Can I Black Out Transactions on a Bank Statement for an Apartment Application?

The short answer is yes. In fact, under UK GDPR Article 5(1)(c) data minimisation rules and standard international privacy practices, blacking out unnecessary personal transaction details is actively encouraged.

When a landlord or referencing officer reviews your financial statements, they only have two legitimate questions to answer:

  1. Do you receive a regular salary credit sufficient to cover the monthly rent?
  2. Do you maintain an overall positive closing balance?

They do not need to see where you shop on Friday nights, medical payments, family support transfers, or personal subscription services.

⚠️ What You MUST Black Out for Data Privacy:

  • 8-Digit Bank Account Numbers: Hide complete account numbers on all pages.
  • 6-Digit Sort Codes: Black out sort codes (e.g., 12-34-56) to prevent unauthorized transfers.
  • Credit & Debit Card Numbers: Mask any 16-digit card sequences printed on statements.
  • Unrelated Personal Expenses: Black out personal shopping, medical expenses, or family transfers.
  • Secondary Account Holder Names: Hide details of family members not listed on the tenancy agreement.

What Information MUST Remain Visible for Landlords & Lenders?

While blacking out private details protects your identity, blacking out too much information will cause the landlord or referencing agency to reject your application.

✅ What MUST Remain Visible for Referencing Approval:

  1. Your Full Legal Name: Must match the name on your tenancy application and passport.
  2. Statement Dates: Must show recent dates (usually the last 3 to 6 months).
  3. Salary & Income Deposits: Regular payroll credits proving your income source.
  4. Monthly Closing Balance: Proves financial stability and affordability.

Why Black Marker Pens and Preview Shapes Fail Security Audits

There is a dangerous technical flaw in how most people try to black out bank statements.

When you use basic PDF annotation tools (like drawing a black shape in Apple Preview or PDF Expert), the software places an opaque shape on top of the document graphics layer. However, the underlying text characters remain in the PDF file code.

Anyone receiving that file can:

  • Drag their mouse over the black box and copy the text.
  • Open the file in a vector editor or Google Drive, which strips away graphic boxes and exposes the text.
  • Use screen reader software that reads the underlying text aloud.

True Vector Destruction vs. Visual Black Tape

To black out a bank statement securely, you need vector-level character stream deletion.

Modern in-browser tools compiled with WebAssembly (WASM) erase the underlying character bytes from the PDF binary code structure entirely before flattening a solid black vector block onto the page context. Once downloaded, the blacked-out characters no longer exist anywhere inside the file.

Is It Illegal to Alter or Black Out a Bank Statement?

There is a clear legal distinction between privacy redaction and illegal document forgery:

  • Legal Privacy Protection: Blacking out sensitive account numbers, sort codes, or personal spending while leaving true transaction amounts and legal names visible is 100% legal under data protection law.
  • Illegal Fraud: Altering transaction numbers, forging salary credits, or inflating ending balances to deceive a landlord or bank is criminal fraud.

As long as you are masking private identifiers to protect your identity while leaving true income numbers authentic, blacking out your bank statement is completely legal.

How to Black Out Text on a Bank Statement Step-by-Step

Follow these four steps to sanitize your bank statement in seconds:

  1. Upload Document Locally: Drop your bank statement into Propertypass. Your document is processed 100% locally in your browser RAM via WebAssembly. Zero files are uploaded to cloud servers.
  2. Auto-Detect or Draw Blackout Boxes: Use automated PII detection to highlight sort codes and account numbers, or click and drag your mouse to draw custom blackout boxes over personal spending lines.
  3. Inspect Page Overlays: Review the preview canvas to ensure all sensitive account numbers and personal notes are covered while keeping your legal name and salary deposits visible.
  4. Click 'Apply Redactions & Download PDF': The engine permanently erases character streams from the PDF code and downloads your sanitized PDF directly to your device.

Protect your personal financial data today before emailing statements to third parties!

Free Black Out Bank Statement Tool Online (No Sign-Up Required)

Execute permanent vector redactions and PDF page splitting 100% locally in your web browser. Zero server uploads.