Why is my statement locked at all?
Because it travels by email, and email is not a secure channel. A password on the attachment means an intercepted or misdelivered message does not immediately expose your balances. It is a sensible default that becomes annoying the moment you have statements from six institutions.
The four formats banks actually use
Nearly every Indian bank picks one of these, which is why guessing sometimes works:
| Pattern | Looks like | Typically used for |
|---|---|---|
| Date of birth | DDMMYYYY | Account statements, app downloads |
| Name + birthday | RAJE0703 | Credit card statements |
| Customer ID / CRN | 12345678 | Account statements from net banking |
| Account or card digits | 00123456789 | Account statements, some card issuers |
Everything is case-sensitive, uses CAPITALS for name fragments and leading zeros for dates, and takes the primary holder's details on a joint account.
A note on accuracy
Banks do not publish these formats on their websites — the format is stated in the covering email, and it varies by channel and account vintage. Every guide here lists formats as candidates in the order most likely to work, not as one authoritative answer, because a confident wrong answer wastes more of your time than an honest list. When in doubt, the email is the source of truth.
Or hand the whole pile to Ekatra
Upload the statements, and every account, card, investment and loan lands on one screen. Files are parsed, then discarded.
Explore with sample data →