To send paystubs safely, confirm exactly what the recipient wants, redact anything they don’t need to see, password-protect the file, and transmit it through a secure upload portal or encrypted channel rather than plain email. Knowing how to send paystubs the right way on the first try prevents rejected applications, back-and-forth requests, and the identity-theft risk that comes with tossing sensitive income data into an unencrypted inbox.
Confirm What the Recipient Actually Needs
Before you gather a single document, ask the requesting party how many stubs they want and what fields must be visible. Submitting too few is a far more common cause of delay than submitting too many, and every verifier has slightly different rules.
For mortgage applications, Fannie Mae’s guidelines require that the most recent paystub be dated no earlier than 30 days before the initial loan application and include all year-to-date earnings. If the most recent stub doesn’t contain enough information to calculate income, the lender will request more documentation, and most lenders also want your two most recent W-2 forms alongside the paystubs.1Fannie Mae. Standards for Employment and Income Documentation Landlords typically ask for two to three recent paystubs covering the last 30 to 60 days, with more requested if your income is variable or hourly. A new employer running a background check usually wants one or two recent stubs to confirm your prior salary.
Whatever the request, every stub should show the employer’s legal name, your full name, the pay period start and end dates, gross earnings, all deductions, and net pay. Year-to-date totals matter more than most people expect because lenders use YTD figures to gauge income stability and calculate your debt-to-income ratio. If your stub only shows the current pay period, request an updated version from payroll before submitting.
Federal tax withholdings should be clearly broken out. Employers are required to deduct and withhold federal income tax from wages, and most stubs show separate line items for Social Security, Medicare, and any state or local withholdings.2Office of the Law Revision Counsel. 26 USC 3402 – Income Tax Collected at Source Verifiers compare those lines against reported income as one check on whether a document is genuine.
Redact Sensitive Information Before You Send
A paystub carries more personal data than most people treat it as carrying. Your full Social Security number and any bank account or routing numbers should always be redacted. Verifiers need income and employment data, not your banking details.
For paper copies, use a thick permanent marker, then hold the page up to a light to confirm nothing is readable through the ink. For digital files, use a proper PDF redaction tool rather than drawing a black box on top of the text. A drawn shape in most PDF editors can be moved or deleted by the recipient, exposing the information underneath. True redaction tools permanently remove the underlying data.
Be careful not to obscure the fields the verifier actually needs. Redacting your SSN is standard, but a bar that accidentally covers your gross pay or YTD total makes the document useless and forces a resubmission. Check every redacted file twice before sending.
Password-Protect the File
If you’re sending a paystub as a PDF, adding a password gives you a meaningful extra layer of protection. In Adobe Acrobat, select “Protect a PDF,” then “Protect with password,” and set a password required for viewing. The file’s contents are then encrypted, so anyone who intercepts it cannot open it without the password.
Send the password through a different channel than the document itself. If you email the PDF, text or call the recipient with the password. Sending both in the same message defeats the point. Keep it simple enough to communicate verbally but not so obvious that it’s guessable; a short phrase with a number works well.
Choose a Secure Transmission Method
The channel you use matters as much as the file you prepared. Options range from strong to barely acceptable.
- Secure upload portals. This is the best option when the recipient offers one. Lenders, property management companies, and background check firms increasingly use encrypted portals where you upload documents directly. Data is encrypted in transit and stored in a protected environment on the other end. If a verifier gives you a portal link, use it.
- End-to-end encrypted email. Standard email with TLS encryption protects your data while it travels between servers, but once it arrives in the recipient’s inbox it sits there in plain text. End-to-end encrypted services keep the message encrypted until the specific recipient opens it. Password-protecting the PDF attachment adds further protection either way.
- Certified mail. For paper copies, certified mail creates a documented chain of custody and proof of delivery. It’s slower than digital methods but produces a paper trail if a dispute arises about whether documents were received.
- Standard fax. Faxes transmit over phone lines rather than the internet, which makes interception less likely than unencrypted email. Faxes often sit in shared trays where anyone walking by can read them, so use this method only if the recipient specifically requests it.
Financial institutions that receive your paystubs are required under federal regulation to maintain safeguards protecting the security and confidentiality of your information.3eCFR. 16 CFR Part 314 – Standards for Safeguarding Customer Information That obligation exists on their end regardless of how you send the document. It doesn’t cover the data while it’s traveling from you to them, which is what the transmission choice above is for.
Confirm Delivery and Keep a Copy
Get proof that your documents arrived. Secure upload portals typically generate a confirmation number or receipt email; save it. For email submissions, request a reply confirming the attachment was received and readable. For certified mail, the return receipt card is your proof.
Keep a copy of every paystub you send along with the confirmation record. If a lender or landlord later claims they never received your documents, that record is your evidence. Manual reviews can take several business days, so silence doesn’t mean rejection. Follow up if you haven’t heard anything after a week.
You May Not Need to Send Paystubs at All
In many cases, sending stubs is unnecessary. Large employers increasingly report payroll data to automated verification databases like Equifax’s The Work Number. When a lender or landlord runs a verification through one of these services, they pull income and employment data directly from the database.
Because The Work Number is governed by the Fair Credit Reporting Act, you have the right to access your own data and dispute anything inaccurate. You can request a free Employment Data Report showing what’s in the database and which verifiers have requested it over the previous two years. If your employer participates, ask the requesting party whether they can pull your records electronically before you spend time gathering and redacting stubs.
If You Don’t Have Traditional Paystubs
Self-employed workers and independent contractors usually don’t have paystubs, and verifiers know that. For mortgages, underwriters typically want at least two years of federal tax returns along with any 1099s, and many lenders average self-employment income across the two most recent tax years. Some loan programs accept 12 to 24 months of bank statements instead, often paired with a profit and loss statement from a licensed accountant.
For rental applications, bank statements showing regular client deposits can substitute for paystubs. Highlight or filter the deposits tied to work income so the landlord doesn’t have to sort through every transaction, and include copies of invoices next to the matching deposits. You don’t need to share your full balance or unrelated activity.
Never Send a Fabricated or Altered Paystub
Submitting a doctored or fake paystub to obtain a loan, lease, or other financial benefit is a federal crime. When the fraudulent document is transmitted electronically, it can be prosecuted as wire fraud, which carries a maximum sentence of 20 years in prison. If the fraud affects a financial institution, the maximum jumps to 30 years and a fine of up to $1,000,000.4Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television
Lenders have grown sophisticated at detecting fakes. They cross-reference figures against IRS tax transcripts, check font and formatting consistency against known payroll system outputs, and verify employer information independently. The consequences of getting caught extend beyond criminal charges to permanent loan disqualification and fraud flags on future applications. If your real stubs show a problem, fix the underlying issue with your payroll department or explain it in writing to the verifier rather than altering the document.