Skip to content

Redacting Financial Information from WhatsApp for Legal Use

How to redact financial data from WhatsApp chats - bank details, card numbers, and amounts - before sharing a conversation for legal or business use.

By Sami Ullah· Founder

People share financial information in WhatsApp constantly - account numbers for payments, card details for purchases, IBANs for international transfers, and sort codes for domestic transactions. Most of the time this is convenient and harmless. But when a WhatsApp conversation becomes relevant to legal proceedings or a regulatory process, that financial data poses a problem. Submitting it unredacted creates unnecessary risk and may be contrary to court requirements.

Types of Financial Data Commonly Shared in WhatsApp

Financial data in WhatsApp conversations appears in a variety of formats. Straightforward payment exchanges often include a full account number and sort code typed directly into a message. Overseas payments generate IBANs and BIC/SWIFT codes. Card-based purchases sometimes involve card numbers or the last four digits of a card being shared to confirm which account to use.

  • Bank account numbers - typically 8 digits in the UK, often accompanied by a sort code
  • Sort codes - 6-digit codes in XX-XX-XX format, used to route UK domestic payments
  • IBANs - international bank account numbers, up to 34 characters
  • Debit and credit card numbers - 13–19 digit sequences
  • Payment app handles - Revolut tags, PayPal email addresses, Cash App usernames
  • Transfer amounts - specific sums that, in context, could be sensitive or irrelevant to proceedings

Why Financial Data Needs Redacting

Financial data in a court exhibit or HR document creates two distinct problems. The first is fraud risk - account numbers, sort codes, and card numbers shared unredacted in a document that may be seen by multiple parties, filed in a registry, or emailed between legal teams, could facilitate financial fraud or identity theft. This risk is real even in apparently secure contexts such as legal proceedings, which routinely involve shared document repositories accessed by many people.

The second problem is relevance. Courts and tribunals require parties to disclose only information that is relevant to the issues in dispute. A bank account number shared to facilitate a payment between the parties is rarely relevant to the legal question being decided - it is background noise that serves no evidential purpose and should be removed as a matter of good practice. Leaving it in invites objections and can complicate the admissibility of the exhibit.

Automatic Redaction of Financial Data

Pattern-based redaction handles the majority of financial data in WhatsApp conversations reliably. Card numbers follow well-defined formats (the Luhn algorithm can validate them) and are readily detected. IBANs have a standardised country-code prefix and length. UK sort codes follow a consistent XX-XX-XX pattern. These formats allow redaction rules to identify and replace financial identifiers with high accuracy across the full text of a conversation.

WaChat to PDF's financial data redaction category covers card numbers (13–19 digit sequences matching card formats), IBAN strings, UK sort codes, and common account number patterns. Each matched value is replaced with [REDACTED] before the PDF is rendered, so the values are never written into the output file. Enabling the financial data category alongside other PII categories allows you to redact the full range of sensitive identifiers in a single pass.

What Automatic Redaction May Miss

Pattern matching catches structured financial data precisely because it is structured. It will not catch information expressed in a less structured way. 'The last four digits are 7823' does not look like a card number to a pattern matcher. 'Send it to the joint account ending in 4412' contains a partial account reference but not a detectable format. 'The sort code is zero one, zero two, zero three' written as words will not trigger a numeric pattern.

Similarly, payment app handles - a Revolut username, a PayPal email address, or a Cash App $cashtag - may not be detected by financial-specific patterns, particularly when they look like ordinary text. Transfer amounts stated as round numbers ('send me £500') are not PII in the strict sense but may be sensitive in certain contexts, and no automated tool will judge their relevance to your specific proceedings.

Manual Review Process

After running automated redaction, a manual review of the preview is essential before downloading the final PDF. Focus the review on messages where financial transactions were being discussed or arranged - these are the messages most likely to contain non-standard financial references. Read each message carefully, paying attention to partial numbers, verbal descriptions of account details, and any message where a payment platform handle was used.

For long conversations, use the date-range filter in WaChat to PDF to isolate the period when financial exchanges took place, and focus your review on those messages. Once you are confident that both structured and contextual financial references have been addressed, the PDF is ready for legal or business use.

Always redact financial account information when submitting chat evidence to a court or tribunal - this data is irrelevant to most proceedings and creates unnecessary risk.

Redact financial data from your WhatsApp chat with WaChat to PDF.

Convert Your Chat Free

Frequently Asked Questions

Does WaChat detect all bank account formats?
WaChat to PDF's financial redaction covers the most common standardised formats: UK account numbers and sort codes, IBANs, and debit and credit card numbers. Less structured references - such as partial numbers, verbal descriptions, or accounts expressed in non-standard notation - are not caught by pattern matching and require a manual review pass. Coverage of international formats beyond IBAN varies, so if your chat involves non-UK/EU bank details, pay particular attention to the manual review.
What happens to redacted text in the PDF?
WaChat to PDF replaces matched financial data values with [REDACTED] during the text-to-PDF rendering phase. This means the original values are never written into the PDF - not even as invisible or hidden text. The redaction is permanent and cannot be reversed by examining the PDF's text layer or metadata. The [REDACTED] token appears inline at the position of the original value, preserving the structure and flow of the surrounding message.
Can I redact specific messages only?
The automated redaction engine applies to all messages in the export simultaneously - you cannot currently limit automated redaction to a specific date range or subset of messages. If you need to share only a portion of a conversation, use the date-range filter in the Customize step to narrow the export before applying redaction, so that the automated rules only operate on the messages you intend to include in the final PDF.
Will financial redaction affect the rest of the chat?
No. Redaction replaces only the matched financial data values - it has no effect on surrounding text, timestamps, sender names, message formatting, or any other part of the conversation. Messages where no financial data was detected are rendered exactly as they appear in the original export. The chronological sequence, message count, and conversational context are all preserved.

Related Articles