Keep this
- Issuer or bank name and the statement period
- Cardholder name
- Last four digits of the card
- The single transaction you are claiming: date, merchant, amount
Black this out
- Full account and card numbers
- Home or mailing address
- Account balances, credit limit, available credit
- Minimum payment, interest charges, APR tables, rewards balances
- Every other transaction on the statement
- Barcodes, QR codes and remittance slips, which often encode the account number
This is not over-caution. Several institutional reimbursement policies — university finance offices in particular — instruct employees to remove the account number, address, balances and all unrelated transaction detail before attaching a statement to a claim.
Why blurring and black boxes fail
Two common approaches leave the original data recoverable:
- Blurring. A blur is a reversible mathematical transform. With a known font and a limited character set — which is exactly what a statement is — blurred digits can often be reconstructed.
- Drawing a rectangle in a PDF annotation tool. The shape is a new layer on top. The text beneath it remains in the file and can be selected, copied, or extracted programmatically.
Real redaction removes the underlying content. If you are working manually, the safest low-tech method is to black out on paper, then scan or photograph the paper — you end up with an image that contains no recoverable text layer.
A safe manual workflow
- Download the official statement PDF from your issuer rather than screenshotting a portal.
- Print only the page containing your transaction.
- Black out everything on the keep-out list with an opaque marker, checking the back of the page for bleed-through.
- Highlight or circle the one transaction you are claiming.
- Scan it. Confirm nothing shows through, then check that you cannot select text in the resulting file.
- Flatten to a single-page PDF and attach it.
Check your work before submitting
- Open the final file and try to select text over the redacted areas — you should get nothing.
- Zoom to 400% on each black area and look for edges of visible characters.
- Check file metadata; exports sometimes carry your name, account or the original filename.
- Confirm the merchant, date and amount are still perfectly legible.
What the redacted document actually is
It is a redacted proof of payment — not a replacement receipt. Nothing about the transaction is changed or fabricated. Describe it that way in your submission; it is accurate, and it reads better to anyone reviewing the claim.