Sharing your salary slips: what they reveal, and how to send them safely

At a glance

A salary slip proves your income — but it also carries your PAN, UAN, bank account number and your entire pay structure, none of which most requesters need. So share the fewest months the purpose requires (three is the usual ask), mask the identifiers that aren’t needed — bank account, UAN, PAN — and send it through a channel you control rather than a chat forward. Under India’s DPDP Act a business can only collect what its stated purpose needs — so you can question an open-ended demand for your salary history.

Educational resource only. This explains how your salary slips are treated as personal data under India’s Digital Personal Data Protection Act, 2023 (DPDP Act); it is not formal legal advice.

Why a salary slip reveals more than your salary

A salary slip is treated as a casual attachment, but it’s an identity-plus-finance bundle — one document that links who you are, where you work, what you earn and where your money goes. It changes hands constantly: loan and credit-card applications, rental negotiations, visa files, a new employer’s HR asking for “last three months’ slips.” Each copy carries far more than the take-home figure the requester is checking, which is why the discipline is to prove the point with the least data — not to forward whatever PDF payroll last sent you.

What your salary slip actually contains

Beyond the salary figure, a typical slip carries your PAN, your Universal Account Number (UAN) and Provident Fund (PF) number, often your bank account number, plus your employer, designation and the full anatomy of your pay. Line by line, that’s: your name and employee code, your employer’s name and address, your designation, the month’s earnings broken into basic pay, house rent allowance (HRA) and other allowances, and the deductions — PF (with your UAN or PF account number), tax deducted at source (TDS, against your PAN), professional tax, sometimes Employees’ State Insurance (ESI). Many formats add the bank account your salary is credited to.

That combination is what makes it sensitive: the identifiers tie the document firmly to you, and the breakup tells a reader exactly how your compensation is built — information that’s valuable to a fraudster and to anyone negotiating against you.

Who asks for it, and how much they really need

Lenders, landlords, visa offices and new employers all have a legitimate reason to see evidence of income — which is narrower than everything a slip contains. Whoever collects it becomes a Data Fiduciary with duties to you: a clear notice of why it’s collected (Section 5), and collection limited to what that purpose needs (Section 6).

• Reasonable — a lender or credit-card issuer verifying income over a recent, defined period (three months is the standard ask); a visa office corroborating your stated employment; a new employer confirming your last drawn salary; a landlord confirming you can cover rent.
• Question it — a demand for six or twelve months where three would do, a requirement for unmasked slips when the purpose is only to see the income figure, or a slip demanded where a salary certificate or bank credit entry would serve. You can ask what period and what detail the purpose actually needs, and share to that.

The real risks if it’s misused

A leaked salary slip is a fraudster’s starter kit: real identifiers plus real financial detail, on one credible document. A misused copy can be used to:

• back fraudulent applications — a genuine-looking slip with your PAN strengthens a fake loan or credit application in your name;
• run convincing scams against you — a caller who knows your employer, salary and PF details doesn’t sound like a stranger, whether the pitch is a “PF withdrawal problem” or a fake job offer;
• feed identity theft — PAN + employer + bank account is a large part of what an impersonator needs;
• leak your negotiating position — a full pay structure in circulation tells landlords, brokers or a future employer exactly what you’ll accept.

Like a bank statement, a slip keeps revealing things long after the purpose it was shared for has passed — which is why fewer copies, with less on them, is the whole game.

What to share: how many slips, and what to mask

Match the months to the ask, then mask the identifiers the purpose doesn’t need — most requests are satisfied by your name, employer, month and pay figures. The two levers are how many slips and how much detail on each:

1. Share the period requested, nothing more. Three months asked means three slips sent. A year of slips where three were needed quadruples your exposure for no benefit.
2. Mask the bank account number. A requester verifying income doesn’t need to know where your salary lands — that detail belongs on your own bank forms, not on a shared slip.
3. Mask the UAN / PF number. No lender, landlord or visa office needs it; it’s an identifier into your retirement corpus and a favourite hook for PF-themed scams.
4. Mask the PAN unless the purpose is tax-linked. Where a process genuinely runs on PAN, provide it through that process — it doesn’t need to ride along on every slip copy.
5. Add a purpose note across the copy — e.g. “For [name], [loan/visa/rental] only, [month/year]” — so a shared slip is hard to reuse elsewhere.

How to share it safely

Send a protected file through a channel you control — not a loose PDF fired into a WhatsApp thread. A slip is small, forwardable and permanent once sent, so the route matters:

1. Password-protect the PDF before sending, and share the password through a separate channel, never in the same message.
2. Prefer an official upload portal or a secure, expiring link over chat and plain email — copies in chats, inboxes and their backups sit outside your control indefinitely.
3. Send documents, not gallery screenshots — a purpose-marked, protected PDF beats loose images of your pay drifting through a phone’s shared albums.

Masking, safe channels and minimisation work the same way for every document you handle — the steps above are the salary-slip-specific version of that shared routine.

How to store it, and when to let go

Keep your own slips in a secured place — and hold businesses to deleting theirs once the purpose ends. For your side: slips arrive monthly by email or payroll-portal download and quietly pile up in inboxes, downloads folders and chats. Keep the copies you need in one secured, access-controlled location, and clear the strays — especially from chat threads.

On the other side, a business that collected your slips must keep them secure and erase them once the purpose is over (Section 8). A lender that rejected your application, a landlord after the tenancy, or a broker months after the deal has no reason to still hold your pay history. You can ask what they hold, ask for deletion, and ask for written confirmation.

FAQ