How it worksPricingAPI Docs
Sign In Start free
EN DE

BR-51

Validation message

In accordance with card payments security standards an invoice should never include a full card primary account number (BT-87). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.

Explanation

Under the card payment security rules (PCI DSS), an invoice must not show the full card number. At most 10 characters are allowed, and mask characters count: 4111********1111 is still too long.

How to fix

Ask the seller to show only the last four digits, or the first six and the last four without mask characters.

Applies to

  • EN 16931 (UBL)
  • EN 16931 (CII)