How to Safely Share ID Cards, Passports & Bank Statements Online

Renting an apartment, verifying a freelance client, or applying for a mortgage almost always requires emailing scans of your driver's license, passport, or bank statement. Uploading raw files or unredacted photos creates lifelong identity-theft exposure. Use this checklist to share strictly what recipients need—and nothing else.

What Data Recipients Actually Need (vs. What You Should Mask)

Unless a regulated financial institution legally requires unmasked original documents for anti-money-laundering checks, landlords, recruiters, hotel front desks, and routine verification portals rarely need every identifier printed on a page:

• Bank statements for proof of income or address: Keep your name, statement date, and address visible, while blocking out the full account number (leave only the last 4 digits if requested), bank routing numbers, and unrelated personal spending line items.
• Driver's licenses & national IDs: When confirming age or legal name for non-government portals, mask your license number, donor/height codes, and especially the PDF417 2D barcode on the back, which encodes every printed field in machine-readable plain text.
• Passports: Cover the passport number and the bottom Machine-Readable Zone (MRZ) lines unless specifically required for airline ticketing or visa issuance.
• Pay stubs & tax summaries: Keep employer name, dates, and gross/net pay readable while blocking Social Security / National Insurance numbers and direct-deposit routing digits.

Step 1: Don't Leak Location Data in Phone Photos of Physical IDs

Most people snap photos of a physical ID on their kitchen table using their phone camera. That JPEG invisibly carries your exact home street latitude and longitude inside its EXIF header, alongside your phone model and timestamp filename. Before submitting a camera snapshot, drop it into our EXIF Metadata Remover or export the redacted copy straight through Document Redactor, which redraws the image cleanly onto an HTML5 Canvas without copying source EXIF tags.

Step 2: Always Flatten Redactions—Never Just Hide PDF Text

Many bank PDFs downloaded directly from online banking portals contain live vector text streams. Placing a rectangle over account digits in a casual PDF markup viewer often leaves the real numbers selectable underneath. When you redact a statement in GhostDocs, every PDF page is rasterized at crisp 2× print scaling, overwritten at the pixel level, and re-embedded cleanly—leaving zero hidden text layers to copy, search, or extract.

Step 3: Combine Front/Back ID Scans Into One Clean PDF

Need to deliver front and back ID photos plus a redacted statement as a single neat attachment? First redact your individual images, then package them cleanly using Images to PDF, or append them onto an application form with PDF Merger. You can confirm zero cloud transfers occurred by running everything offline per our Verify Privacy guide.