How to make a redacted card image
A shop or bank has asked for a "redacted card image", usually showing your name and the last 4 digits. Here is exactly what to cover, what to leave readable, and how to produce the file without uploading your card anywhere.
What to cover on the card
This is a sample card, not yours. Toggle a field to see how the result looks.
Sample card. The number is a standard test value, not a real card.
Make it in your browser
- Take a photo of the card, or use a screenshot from your banking app.
- Open it in Redacted. The image stays on your device.
- Drag a box over the first 12 digits, then over the expiry date. Keep the black box style rather than blur.
- Do the same for the CVV if the back of the card is in shot.
- Check that your name and the last 4 digits are still readable, then download. The exported file has the boxes flattened in and the metadata stripped.
Why the last 4 digits are the part they want
The last 4 digits identify your card without being enough to use it. A payment needs the full number, the expiry date and usually the CVV, so a correctly redacted image proves possession while withholding everything required to charge it. That is why the request is worded so specifically.
The mistake that makes it unsafe
Drawing a black rectangle in an app that keeps layers, then sharing the project file or a PDF, can leave the digits recoverable underneath. The same applies to blur: on a card number the character set is small and the format is known, which is exactly the situation where a redacted image can be unredacted. Flatten the export, and prefer a solid box.
Watch out for the request itself
Legitimate companies ask for this, but so do scammers. Before sending anything, check that you started the conversation, that the address or channel is the company's official one, and that nobody is asking for the full number, the CVV, a one-time code or your password. No real support team needs those from a photo.
Related
- What "redacted card image" means
- Redact a credit card number in an image
- Redact an ID card or passport
- Redact a bank statement
FAQ
What is a redacted card image?
A photo or screenshot of your bank card with the sensitive parts blacked out. Normally the cardholder name and the last 4 digits stay readable, and the other 12 digits, the expiry date and the CVV are covered. Support teams use it to confirm which card is yours without receiving details that could be used to spend money.
Which parts do I cover, and which stay visible?
Cover the first 12 digits, the expiry date and the CVV on the back. Leave your name and the last 4 digits visible, because that is what lets them match the card to your account. If the request named different fields, follow the request.
Is it safe to send a redacted card image?
It is reasonably safe once the number, expiry and CVV are covered, because the last 4 digits alone cannot be used to make a payment. Two cautions: only send it through the company's official support channel, and make sure the black boxes are flattened into the exported image rather than layered on top of the original.
Should I use a black box or a blur?
A black box. Blur and pixelation can sometimes be reversed, especially on a short, predictable string like a card number where an attacker knows the format. A solid box removes the pixels entirely.
Does the photo carry hidden data?
It can. Phone photos often embed the GPS location and device details. Exporting through Redacted strips that metadata along with the redaction, so the file you send carries only the picture.