Is it safe to upload tax documents to an online converter?

Is it safe to upload tax documents to an online converter? No. Security researchers say you should not upload confidential documents to converter sites at all. A tax return is the worst thing to upload, because it holds everything needed for identity theft in a single file: your full name, address, income details and bank account numbers. Once it is on someone else's server, you cannot control where copies of it end up.

Why tax documents are the worst case#

Most private files leak one or two facts about you. A tax return leaks all of them at once. It is a complete identity kit: name, date of birth, address, employer, income, investments, bank details, and often a government ID number. Attackers who buy or steal such files do not need anything else to impersonate you.

This is also the file you are most likely to convert. Tax PDFs need compressing for portals with file-size limits, merging with supporting documents, or converting to images. The task is ordinary. The file is not.

What researchers say#

Bitdefender (2026) answers the general question directly: "Is it safe to upload confidential documents to online file converters? No."

The FBI warning (March 2025). The FBI's Denver field office warned that criminals run fake file-converter sites, some cloned from real converters down to the design, to spread malware and harvest IDs, banking details, passwords and crypto seeds. A tax document uploaded to the wrong site is not just stored. It is collected.

The open storage (July 2024). Cybernews researchers found converter services with 89,062 user files in cloud storage anyone could browse, including passports, IDs and contracts. Financial documents were in there.

"But the site deletes files after an hour"#

Three problems with that promise. First, it covers the main copy, not backups, logs, temp files and error reports, which can keep your data longer. Second, some services are vague about retention, and researchers have criticised popular converters for keeping uploads longer than users expect. Third, you cannot verify any of it. The promise is all you get.

For a public file, that trade may be fine. For the file that contains your entire financial identity, it is not a trade worth making.

Convert it on your own computer instead#

The safe way to shrink, merge or convert a tax PDF is software that runs offline. KinoFlux Editor is free for Windows and Mac, with no upload, no account and no telemetry. Compressing a return for a portal upload works like this:

1. Drop the PDF on the window.
2. Press Ctrl+K and pick PDF - Compress.
3. Press Ctrl+Enter. The smaller file is written next to the original, which is never changed.

Your tax return never leaves the machine. There is no retention policy to read, because there is no server.