How to Redact Bank Account Numbers from PDF
Secure guide to redacting bank account and routing numbers from PDF documents. Protect financial information with true redaction methods.
Bank account and routing numbers provide direct access to financial accounts. When these numbers leak from documents, the consequences can be severe: unauthorized withdrawals, fraudulent transactions, and financial identity theft. If you need to share financial documents while protecting account details, proper redaction is essential.
This guide explains how to permanently remove bank account information from PDFs, not just hide it visually.
Why Bank Account Redaction Is Critical
Bank account numbers aren't like passwords—you can't simply change them when compromised. Changing accounts means updating direct deposits, automatic payments, and countless linked services. Many people live with compromised account numbers because the disruption of changing is too significant.
What attackers can do with bank account and routing numbers:
ACH Fraud: Initiate electronic fund transfers from your account. ACH transactions are notoriously difficult to reverse.
Check Fraud: Print checks with your account information. Even without your signature, checks can be processed.
Account Verification Bypass: Many services accept bank account verification through small deposit amounts. Attackers can link accounts to payment services.
Identity Theft Setup: Bank account information combined with other data enables comprehensive financial identity theft.
Social Engineering: "I'm calling from your bank regarding your account ending in 4567..." gains instant credibility.
Documents containing bank information—statements, tax forms, contracts with payment details—require careful handling before any sharing.
Where Bank Information Appears
Bank account and routing numbers hide in many places:
Account Numbers
- 8-17 digits (varies by bank)
- Account statements
- Voided checks (images in documents)
- Direct deposit authorizations
- Payment setup forms
- Wire transfer instructions
Routing Numbers
- Always 9 digits (US)
- Same locations as account numbers
- Usually labeled "ABA" or "routing"
- First number on bottom of checks
Other Sensitive Bank Data
- Check numbers
- Bank names (combined with partial numbers can enable fraud)
- SWIFT/BIC codes (international)
- IBAN numbers (international)
The Black Box Problem
When you draw a black rectangle over bank numbers in a typical PDF editor, the numbers remain in the file. The rectangle is an annotation layer sitting on top of the content.
This fake redaction fails against:
- Copy-paste: Select the blacked area, paste into a text editor
- Search: Ctrl+F finds the "hidden" numbers
- Text extraction: Any PDF converter outputs the numbers
- Annotation deletion: Delete the black box, see the numbers
For financial data, this risk is unacceptable. You need tools that actually remove the content.
Step-by-Step: Redacting Bank Information
Step 1: Identify All Financial Data
Review your document for:
1. Account numbers: Search for 8+ digit sequences
2. Routing numbers: Search for 9-digit sequences
3. Check images: Voided check images contain both numbers
4. Labels: Search for "account", "routing", "ABA", "IBAN", "SWIFT"
5. Wire instructions: These sections contain multiple sensitive fields
Create a checklist of everything that needs redaction.
Step 2: Check for Check Images
Voided checks are common in documents requiring bank information. A check image contains:
- Routing number (first 9 digits at bottom)
- Account number (next set of digits)
- Check number
- Account holder name
- Address
- Bank name
If your document contains a check image, the entire check should typically be redacted or the sensitive portions carefully obscured.
Step 3: Use True Redaction
Recommended: ActuallyRedactPDF
ActuallyRedactPDF converts PDF pages to images before redaction, eliminating the underlying text layer:
1. Upload your PDF containing bank information
2. Navigate to pages with account details
3. Draw redaction boxes over all bank numbers
4. If there's a check image, cover the entire MICR line (the numbers at bottom)
5. Click Apply
6. Download your sanitized PDF
There's no text to extract because the content has been converted to pixels and then covered.
Alternative: Adobe Acrobat Pro
1. Open Tools > Redact
2. Search for digit patterns that might be account numbers
3. Manually mark check images and MICR lines
4. Click "Apply Redactions"
5. Run "Remove Hidden Information" to strip metadata
6. Save as a new file
Step 4: Handle Related Information
Bank numbers alone are dangerous, but they're more useful with:
- Account holder name: Consider redacting if name + partial account enables fraud
- Bank name: In some contexts, even the bank identity is sensitive
- Address: Combined with bank info, enables comprehensive fraud
- Phone numbers: Bank contact numbers might not need protection; personal numbers do
Evaluate what combination of information could enable account access.
Step 5: Verify Financial Data Removal
Financial redaction failures are costly. Verify thoroughly:
Digit Search: Search for the account and routing numbers in the redacted PDF. No matches.
Partial Search: Search for the last 4 digits of account numbers. These often appear separately.
Pattern Search: Look for 8+ digit sequences that might be account numbers you missed.
Extraction Test: Run the PDF through a text extraction tool. Check output for any financial patterns.
Use the Un-Redact Checker which specifically scans for financial number patterns.
Common Bank Redaction Mistakes
Mistake 1: Missing partial account references
"Account ending in 4567" appears in correspondence, but the full number was properly redacted elsewhere. Partial numbers can still enable fraud through social engineering.
Mistake 2: Forgetting the routing number
Account number is redacted, but routing number (which appears nearby on checks and forms) is visible. Both numbers are needed for ACH transfers, but having one makes obtaining the other easier.
Mistake 3: Check image oversight
The text mentioning the account number is redacted, but a voided check image on the same page shows everything clearly. Check images require full redaction of the MICR line.
Mistake 4: Leaving check numbers
Check numbers might seem innocuous, but combined with bank name and date, they can be used to forge checks or impersonate the account holder.
Mistake 5: PDF form field persistence
If the document was a fillable form, the form field data might persist even when the visible content is redacted. Flatten the document or use tools that handle form data.
Special Scenarios
Bank Statements
Monthly statements contain account numbers in multiple locations:
- Page headers (often every page)
- Transaction references
- Account summary sections
- Customer information block
Verify all pages, not just page one.
Wire Transfer Instructions
Wire instructions contain multiple sensitive fields:
- Account number
- Routing/ABA number
- SWIFT/BIC code
- Bank name and address
- Beneficiary information
- Reference numbers
If sharing redacted wire instructions, ensure all these fields are addressed.
Tax Documents (1099-INT, etc.)
Financial tax forms contain:
- Full or partial account numbers
- Bank identification
- Taxpayer SSN
- Interest amounts (which might be sensitive)
Redact according to what information needs protection and any specific regulatory requirements.
Contracts with Payment Terms
Contracts often include payment instructions or bank details in attachments. Review the entire contract, not just the main text, for:
- Wire transfer exhibits
- ACH authorization forms
- Voided check copies
International Documents
International banking involves:
- IBAN: Up to 34 alphanumeric characters
- SWIFT/BIC: 8-11 characters
- Sort codes: 6 digits (UK)
- Various national formats
Automated US-focused detection might miss international formats. Manual review is important for international documents.
Document Retention Considerations
Redaction for sharing is different from document retention:
For sharing: Redact and create a new file. Keep original separately and securely.
For retention: Determine whether you need the original (with financial data) for records. If not, consider redacting originals too.
For disposal: When disposing of financial documents, ensure both digital and paper copies are handled securely.
Summary
Bank account information requires the highest level of redaction care:
1. Find everything: Account numbers, routing numbers, check images, partial references
2. Use true redaction: Not visual covers that leave data extractable
3. Verify extensively: Search for numbers, patterns, and partial matches
4. Consider combinations: What related information enables fraud?
5. Handle check images: MICR lines contain all the sensitive data
Financial data leaks have immediate, tangible consequences. Proper redaction is worth the effort.
Need to redact bank information? ActuallyRedactPDF truly removes financial data by eliminating the text layer. Verify your redactions with our Un-Redact Checker.