Redacting Your Tax File Number: Who Can Legally Ask (And Why You Can Cross It Out)

If a form asks for your tax file number and you hand it over, it is almost never because anyone explained why. It is there, on the line, with a little box next to it, so you fill it in.

Your TFN is a number the ATO issues once and keeps for the rest of your life. It was built for one job: tying your tax and super records together. But it ends up printed on a startling number of documents, the payslip, the super statement, the ATO notice of assessment, the myGov income statement, the bank interest statement, the onboarding form. And because those documents travel to landlords, agents, lenders and accountants, a number that was never meant to identify you keeps doing exactly that.

Here is the part most people do not know. You are allowed to cross it out.

The OAIC says you can remove it

On its tax file number page, the Office of the Australian Information Commissioner states it in one plain sentence: if a document you have been asked to supply includes your TFN, you are allowed to cross out or remove your TFN before you hand the document over.

Read that again, because it goes further than most people expect. The next line says you can do this even if the individual, organisation or agency asking for the document is allowed to collect your TFN. So the right to redact is not something you lose the moment the recipient is "supposed" to have the number. It is yours, by default, on the copy you are sending.

A real estate agent is not on the list of organisations that may ask for your TFN at all. An agent assessing whether you can pay the rent does not need it. A lender verifying income for a loan does not need it either. The number is for tax, not for identity, and that distinction is the whole point.

Who can legally ask

The list is short, and it is worth keeping in your head the next time a form reaches for it:

• The ATO itself.
• Your employer, once you are hired, so it can withhold the right amount.
• Banks and other financial institutions, for the accounts and investments you hold with them.
• The department that runs Centrelink, Child Support and Medicare (the OAIC refers to it as the Department of Human Services), where you receive a pension, benefit or allowance.
• Superannuation funds and retirement savings account providers.

That is the list. Everyone on it is bound by the Privacy (Tax File Number) Rule 2015, a legislative instrument that sets how the number may be collected, stored, used and disclosed. Everyone else, including the agent, the landlord and most lenders, is not.

You do not have to give it (but there is a trade off)

One more fact, because it removes a common worry. There is no law that says you must hand your TFN over, even to an organisation that is allowed to ask.

The honest version, though, is that there is a cost to saying no in the places that matter. If you do not give your TFN to your employer, your bank or your super fund, you can be taxed at the highest marginal rate on your income or interest, and you can affect whether a personal assistance payment is paid. That is a reason to give your TFN to your bank. It is not a reason to give it to a letting agent. The consequence is real, but it is aimed at the wrong recipient, and you are allowed to draw that line.

A TFN is not an identity document

This is the part that should change how you think about the number. The OAIC is explicit that a TFN cannot be used to confirm your identity. Not when you want to rent a flat. Not when you want to buy a car. Not when you want to open an account with a financial institution. Not as part of a national identification system.

So when a rental application or a loan form prints a field for your TFN, the number it is asking for is the wrong tool for the job it is actually trying to do. It is not identifying you, it is just another identifier to collect and hold. If someone wants to use your TFN to check who you are and you are not sure they are allowed, the OAIC's advice is to check with the ATO.

Where your TFN hides

Before you redact anything, know where the number actually sits, because it is rarely in one obvious spot:

• Payslips, usually near the employee number or the bank details your wages land in.
• Superannuation statements, near the fund member number.
• ATO notices of assessment, printed as a standalone field.
• myGov income statements, where it appears at the top of the statement.
• Bank interest statements and other account documents.
• Employment onboarding forms, where it is often collected alongside your bank account.

Each of those documents travels somewhere, and each one carries the same lifetime number.

The four minute fix

The actual redaction is unglamorous and fast:

Find every place the number appears. It is usually printed once, but on dense statements it can be repeated. Find them all.

Cover it with a tool that removes, not hides. Draw the boxes with a redactor that works in your browser, where the file never gets uploaded. A black rectangle pasted into a PDF viewer can leave the digits underneath still selectable, which means nothing was redacted at all. A proper tool flattens the box into the file so the number is gone, not merely hidden. You can redact a TFN in your browser in well under a minute.

Verify before you send. Reopen the exported file and try to select text in the covered area. If nothing copies, the redaction is permanent. If text still shows through, the tool did not flatten and you should not send it.

Send the redacted file, not the original. The original stays on your device. The other party gets a copy where the number simply is not in the file.

If the TFN appears on a payslip you are sending to prove income, cover the TFN, the BSB and account number, the super member number, your address and your employee ID, and leave your name, employer, pay period and gross and net figures visible. That is what the payslip redaction guide walks through, and the same logic applies to a superannuation statement or any document you are sharing online.

If someone pushes back

If an agent insists on the unredacted number, a short, factual reply usually ends it:

"The OAIC states I am allowed to cross out my TFN before handing the document over, and a TFN can't be used to verify identity, so I send it redacted. My name, employer and income are all visible. Is there a specific check you are trying to run that this is stopping?"

If the real answer is "no, we just collect it because the form asks," you have learned something about how that organisation handles the data it holds. You do not owe them your number.

The part you can actually control

You cannot change your TFN the way you change a leaked password. It is issued once and follows you, so every copy that leaves your hands is a copy you did not get to vet: you do not know where it is stored, how long it is kept, or what systems it will sit in.

The input side is different. The documents you send out are yours, and the number is in them only because you put it there. Redacting takes four minutes and it is the cheapest identity protection you will do this week.

---

Related: Redact a payslip for a rental application · Redact your tax file number · Redact a superannuation statement · Redact documents online · Redact a bank statement for a rental application

The OAIC already tells you that redacting your TFN is allowed. Try it in your browser in under a minute. Nothing uploads, nothing is stored, free to try. For more volume, see our plans and pricing.