Guide
How to Share a Bank Statement Safely
Bank statements contain your account number, address, and full transaction history. Before you send one to a landlord, lender, or solicitor, there's a two-step process: redact first, then choose a secure delivery method.
April 9, 2026 · 5 min read
The goal is to share what the recipient needs while removing what could enable identity theft or unauthorised account access.
Field
Why it matters
Action
Full account number
Enables direct account access combined with sort code / routing number.
Redact
Sort code / routing number
Together with account number, allows ACH transfers and direct debits.
Redact
IBAN / BIC / SWIFT
International equivalents of account and routing numbers — same risk.
Redact
Full name
Usually fine to keep — required by most recipients to verify identity.
Keep
Home address
Remove if the recipient doesn't need proof of address from this document.
Situational
Transaction history
Keep — this is the primary reason the statement is being requested.
Keep
Opening and closing balance
Keep in most cases — landlords and lenders specifically need this.
Keep
Secure file sharing linkBest
Use a platform that creates a link with expiry — Google Drive with link sharing set to 'viewer only' and an expiry date, Dropbox, or WeTransfer. The recipient downloads the file and you can revoke access afterwards. Avoid sharing links publicly or via group messages.
Encrypted email attachmentGood
Send as a PDF attachment directly to the recipient's professional email. Use a password to protect the PDF (File → Protect in Adobe Acrobat, or export with password in macOS Preview), then send the password via text message — not in the same email.
Upload via a secure portalGood
Many letting agencies, lenders, and referencing services provide a secure document upload portal. This is often the safest option because the file goes directly to a controlled system, not a personal email inbox.
Regular email attachmentAcceptable
Fine for most casual sharing (accountant, solicitor, family member) but email is not encrypted end-to-end by default. For anything sensitive, prefer a secure link or portal instead. Always redact account numbers first regardless of delivery method.
WhatsApp or iMessageRisky
Both use end-to-end encryption in transit, but documents land in the recipient's message history indefinitely. If their device is lost, accessed by someone else, or backed up to cloud without encryption, your statement is exposed. Use only for trusted individuals and request deletion afterwards.
Is it safe to email a bank statement?
Standard email is not end-to-end encrypted, so it's not the most secure method — but it's widely used and generally acceptable for professional contexts (landlords, accountants, solicitors). Always redact your account number first, and consider password-protecting the PDF for extra security.
Can I send a screenshot of my bank statement instead of a PDF?
Most professional recipients prefer or require a PDF downloaded directly from your bank's app or website. Screenshots are easy to edit and are widely known to be unreliable — many landlords and lenders specifically request bank-issued PDFs as a result.
What should I do if someone asks for my full account number on a bank statement?
Ask why they need it. Landlords and letting agents almost never have a legitimate reason to see your full account number — they need income and balance data, not account access. If the request seems unreasonable, offer an alternative (employer letter, payslip) or escalate to the agency's manager.
How do I password-protect a PDF bank statement?
On Mac: open in Preview → File → Export as PDF → check 'Encrypt' → set a password. In Adobe Acrobat: File → Protect Using Password. In LibreOffice: File → Export as PDF → Security tab → set password. Send the password via a different channel (text message) than the file itself.
Is it safe to use an online redaction tool?
Only if the tool explicitly states that files are processed in memory and deleted immediately after — not stored on disk, not retained for training. Check the privacy policy before uploading. Tools with vague or missing privacy policies should be avoided for financial documents.
Do I need to share original bank statements or can I share copies?
Copies — including printed copies of PDFs, scanned documents, and digitally redacted PDFs — are accepted by most recipients. Only a court order or formal legal process is likely to require original documents, and even then a certified copy often suffices.