Bank statement: what you can black out before sending it, and what must stay visible

Who asks for your bank statement decides what you may black out. Income, amounts and dates usually stay visible, because that is what the recipient checks. The account number and lines about your private life can often go, but ask the recipient first when you are unsure.

In short, a benefits office needs every incoming payment, every amount, the dates and the balance. A landlord may only see what the law allows, and in France that excludes statements. A mortgage lender needs balances, salary credits and regular outgoings.

Who is asking, and what must stay visible?

Germany: what can you black out for the Jobcenter?

Since 1 July 2026, the Jobcenter pays Grundsicherungsgeld, which replaced Bürgergeld, says the Federal Employment Agency. When you apply, the office may ask for the last three months of statements, even without any suspicion. The agency's form guide (October 2026) allows some blacking out. It covers outgoing payments only, and each entry must stay clear to the Jobcenter.

• You may black out the payee (who received the money) of an outgoing payment that reveals sensitive data. Examples: union fees, or a donation to a church or a party.
• The amount and a short purpose, such as “membership fee”, stay readable.
• Every incoming payment and the balance stay visible, and so do payments that matter for your benefit, such as rent.

The Federal Social Court set the main rules in 2008 and 2009 (B 14 AS 45/07 R, B 4 AS 10/08 R). The Baden-Württemberg data protection commissioner adds that the office may ask who received hidden payments if they are unusually frequent or large. The agency's staff instructions (2023) say the office must also point out the blacking-out option.

In 2020, the court let a Jobcenter keep statements showing credits for ten years, if it had offered this blacking out (B 14 AS 7/19 R).

German landlords are a different case. The data protection authorities (DSK) say proof of income comes just before signing, for example a statement with unneeded details blacked out.

France: can a landlord ask for your bank statements?

No. Decree no. 2015-1437 of 5 November 2015 lists what a landlord may ask a future tenant for. The CNIL, France's data protection authority, names bank statements among the documents a landlord may not request. Service-Public says a landlord who demands another document risks a fine of up to 3,000 euros, or 15,000 euros for a company.

Decline politely and offer what the list allows, such as your last three payslips and your last tax notice.

UK: what do landlords and mortgage lenders check?

In England, Shelter says landlords often ask for bank statements or proof of income, to check you can afford the rent. Citizens Advice adds a tip: when you send recent statements to show your income, cover your account numbers.

Mortgage lenders look closer. The Financial Conduct Authority says lenders must check you can afford the repayments. They look at money coming in and going out, and are likely to ask for recent statements. German law requires a similar check for home loans (section 505b of the Civil Code). Mask unrelated lines only if the lender agrees.

Visa statements leave even less room. Under Appendix Finance of the UK Immigration Rules, the account must usually be in your name, alone or jointly. The newest evidence must be dated within 31 days before you apply. Hide nothing there without checking.

Which lines on a statement reveal sensitive data?

Article 9 of the GDPR protects special categories of data, such as religion, political opinions, union membership, health and sexual orientation. One transaction line can reveal them. Check for these lines:

• A standing order to a church, a mosque or a political party
• Union fees
• A pharmacy, a clinic or a line such as Dr Jane Example Psychotherapy
• Betting sites: not a special category, but still private
• Transfers to a named person, such as John Sample

Before you give it to an AI assistant: what should you mask?

Some people paste a statement into ChatGPT, Copilot or Gemini to sort their spending or plan a budget. The assistant needs amounts, dates and types of shops. It does not need to know who you are. Mask these first:

• Your name and address in the header, and wherever they repeat on later pages
• IBAN, BIC, sort code and account number
• Names of people in transaction lines, and payees that reveal health, religion or a union

Keep amounts, dates and merchant types, such as supermarket or energy, or the answer will be vague. The assistant still reads everything left visible. A year of payments can show where you live, shop and travel, even without your name. Share only the months your question needs.

How do you mask a bank statement properly?

1. Work on a copy and keep the original, as the UK National Archives advises.
2. Remove the text for real. The same guidance says it must leave the file, not just the screen. A flattened copy, where each page becomes an image, does this.
3. Never draw a black box over live text in a PDF. The words can stay underneath and be copied.
4. Check the copy: try to select or search for a hidden word.
5. Rename the file if its name shows your name or account number.

ONYRI Sanitize masks a PDF or scanned statement in your browser: your name, address, IBAN, BIC and UK sort code and account number. Amounts with a currency and full dates are masked: untick what the recipient needs in “Detected data”. A church, union or pharmacy in a line is usually not detected: use “Select text”. Without an account, 5 pages at most. Longer statements need a 7-day pass or Pro.

Before you press send, compare the copy with what the recipient needs. If a needed income, balance or date is hidden, unmask it.

Frequently asked questions

Sources & references