How to Safely Share a Confusing Document (UK 2026 Guide)

⚡ Worth knowing: Misdirected emails — personal information sent to the wrong person — remain one of the most commonly reported causes of data breaches to the UK Information Commissioner's Office year after year. Most of them start with someone forwarding a document without thinking about what's inside it.

At a glance

• Before sharing any letter or contract, remove details that identify you or could be misused: full name and address, account numbers, National Insurance number, dates of birth, and reference codes.
• Drawing a black box over text in a PDF often does not delete it — the words underneath can still be copied out. Use proper redaction tools or print, cover, and re-scan.
• Who you're sharing with changes what you should hide: an accountant may need your UTR, but a stranger on an internet forum never does.
• Photos of letters carry hidden metadata (location, time, device) — crop and re-save before uploading anywhere public.
• If you use an AI tool to read a document, check its privacy policy first: where is the file stored, how long is it kept, and is it used for training?
• Not legal/financial advice: This article explains the rules in plain English. For your specific situation, speak to a solicitor or Citizens Advice.

A confusing letter arrives — from HMRC, your landlord, a debt collector, the NHS — and your first instinct is sensible: show it to someone who understands it. A friend who's good with money. An online forum. An accountant. An AI tool.

But that letter is full of information about you. Your address, your reference numbers, your financial position, sometimes your health. Handing it over without a second look can expose you to fraud, identity theft, or simply sharing far more of your life than you intended.

The good news: making a document safe to share takes about five minutes once you know what to look for. This guide covers what to remove, how to remove it properly, and how the answer changes depending on who's on the receiving end.

What counts as personal information on a typical letter

UK letters are dense with identifiers. Some are obvious, some are easy to miss:

• The obvious ones: your full name, home address, phone number, email address, date of birth, and signature.
• Reference numbers: National Insurance number, HMRC Unique Taxpayer Reference (UTR), NHS number, council tax account number, tenancy or deposit scheme references, policy numbers, case numbers.
• Financial details: bank account numbers and sort codes, card numbers, outstanding balances, salary figures.
• The easy-to-miss ones: barcodes and QR codes (these often encode your account details), the address block visible through a window envelope, page footers with customer IDs, and reference lines like "Our ref" at the top of solicitors' letters.

A useful rule: anything that would let a stranger contact an organisation and convincingly pretend to be you should come out before the document travels anywhere you don't fully control.

Why a black highlighter isn't enough

The most common redaction mistake in the UK — made by government departments and courts as well as households — is drawing a black rectangle over text in a PDF. In many PDF editors, that rectangle is just a shape sitting on top of the text. The words underneath are still in the file. Anyone can select the "hidden" text, copy it, and paste it into a notes app to read it perfectly.

The same goes for photos: a black scribble added in a photo-editing app can sometimes be reversed if it was applied as a low-opacity brush, and blurring or pixelating text can occasionally be reconstructed by software.

Redaction methods that actually work

1. For paper letters: the old ways are the best ways. Cover the sensitive lines with opaque paper or sticky notes, then photograph or scan the covered version. What was never captured can never leak.
2. For PDFs: use a proper redaction feature — one that removes the underlying text, not just hides it. Free options exist, but always test the result: open the finished file and try to select and copy the redacted area. If nothing copies, it worked.
3. The print-and-scan fallback: if in doubt, print the document, black out lines with a marker on paper, then scan or photograph it. Crude, but genuinely irreversible.
4. For photos: crop tightly to the paragraphs you need help with, use a solid opaque shape (not blur) over anything sensitive, and re-save the image as a new file so editing history isn't embedded.

Don't forget the metadata

Photos taken on a phone usually embed the time, the device model, and often your GPS location. If you photograph a letter at your kitchen table and post it to a public forum, the image may quietly reveal where you live even if you redacted your address. Most phones let you remove location data when sharing, and re-saving a cropped screenshot of the photo strips most metadata too.

Want the explanation without the sharing? The safest document to redact is the one you never have to send to another human. Clarify reads your letter privately, explains it in plain English, and answers your questions with citations back to the exact lines — no forum posts, no forwarding, no group chats.

Try Clarify free → getclarify.co.uk

Match the redaction to the recipient

How much you hide depends entirely on who's helping you. Working from most trusted to least:

Your solicitor, accountant, or adviser

Professionals bound by confidentiality duties generally need the full document — an accountant can't act on an HMRC letter without your UTR, and a solicitor can't assess a tenancy notice without the names and dates. The safety question here isn't redaction, it's transmission: send documents through a secure client portal if they offer one, rather than ordinary email. If email is the only option, ask whether they accept password-protected files and share the password by a different channel (a text message, or a phone call).

Citizens Advice and charities

Advisers will usually ask to see the whole letter, and they have proper confidentiality processes. Bring the original to an in-person appointment rather than posting it into a general enquiry form. For initial email or web-chat contact, a redacted version is fine — they'll tell you if they need more.

Friends and family

This is where most oversharing happens, because it feels safe. The risk usually isn't your brother-in-law — it's the channel. A letter photographed into a family WhatsApp group now lives on several phones, in several cloud backups, indefinitely. Share the relevant paragraph, not the whole page, and avoid group chats for anything with financial details.

Online forums and social media

Maximum caution. Assume every image posted to a public forum will be there forever and read by strangers. Redact everything identifying — names, addresses, every reference number, barcodes, letterheads with account details — and retype the confusing sentence as text where possible instead of posting the image at all. Remember that the combination of details can identify you even when no single one does: a rare surname plus a town plus an employer is often enough.

AI tools

AI document readers can be a genuinely private way to get help — but only if you check three things in the privacy policy first: where your document is stored, how long it's kept and whether you can delete it, and whether your content is used to train the provider's models. Prefer tools that let you delete documents permanently and state clearly that your files aren't training data. If a free tool is vague about all three, treat it like a public forum and redact accordingly.

A five-minute pre-share checklist

1. Decide exactly who needs to see it and what question you're asking them.
2. Share the smallest useful piece — a paragraph, not the whole letter, where possible.
3. Redact identifiers the recipient doesn't need, using a method that removes (not hides) the text.
4. Test your redaction: try to select, copy, or zoom into the hidden areas.
5. Check the photo for background details and strip location metadata.
6. Choose the channel deliberately: secure portal > in person > direct message > email > group chat > public forum.

If you've already overshared

Don't panic — act. Delete the post or message where you can (and ask recipients to delete their copies). If a bank account number, card number, or National Insurance number went somewhere public, tell your bank, watch statements closely, and consider a free CIFAS Protective Registration, which flags your identity to lenders and makes fraudulent applications harder. If an organisation exposed your data rather than the other way round, you can complain to them directly and escalate to the ICO.

Skip the redaction homework entirely. Upload your letter to Clarify and ask what it means in plain English. You get cited answers drawn only from your document — and you can delete it whenever you like. No screenshots in group chats, no strangers on forums, no guesswork.

Upload a document securely → getclarify.co.uk

Frequently asked questions

Is it illegal to share a letter that was addressed to me?

Generally no — a letter addressed to you is yours to share. Be careful, though, if it contains other people's personal information (a joint tenant, an ex-partner, your child) or if it's marked confidential as part of legal proceedings. When in doubt about court documents, ask a solicitor before sharing.

What's the single most important thing to redact?

Reference numbers — National Insurance number, UTR, account numbers. Your name and town rarely enable fraud on their own; a live account reference plus your name often does, because it lets someone impersonate you convincingly to the organisation that issued the letter.

Can blurred or pixelated text really be recovered?

Sometimes, yes. Tools exist that can reconstruct short strings like numbers from pixelated images, because the blurring process is partly reversible. Use solid, opaque blocks instead of blur, or cover the text physically before photographing.

Is emailing a document to my accountant safe?

Ordinary email is not encrypted end-to-end and misdelivery is a leading cause of data breaches. It's usually acceptable for routine documents if the address is double-checked, but a client portal or password-protected file (with the password sent separately) is meaningfully safer for anything financial.

Do I need to redact a letter before showing Citizens Advice?

Not for an in-person appointment — advisers need the full picture and operate under confidentiality rules. For initial contact through a web form or email, sharing a redacted copy or just the key wording is a sensible middle ground.

What should I check before uploading a document to an AI tool?

Three things: where the document is stored, whether you can permanently delete it, and whether the provider uses your content to train its models. That information should be easy to find in the privacy policy — if it isn't, that's a warning sign in itself.

How do I remove location data from a photo of a letter?

On most iPhones and Android phones, the share sheet has an option to remove location (or "strip metadata") when sending. Alternatively, take a screenshot of the photo and share the screenshot — screenshots don't carry the original GPS data.

Someone else's details are in my letter — can I still share it?

Redact their details just as carefully as your own. Sharing another person's personal information without a good reason can cause them real harm and, in some situations, may raise data protection issues. Cover their name, contact details, and any reference numbers before the document goes anywhere.

Related articles

• Best ways to understand a confusing letter without paying a lawyer
• Citizens Advice, MoneyHelper, or AI: where to turn for paperwork help in 2026
• How AI document readers handle UK-specific paperwork (and where they fall short)
• Decoding HMRC letters: every reference code and what to do next

This article is general information only and is not legal or financial advice. Rules and best practices change, and your circumstances may differ. For advice on your specific situation, speak to a qualified solicitor, your accountant, or contact Citizens Advice.