New Zealand bank account number
Detects New Zealand bank account number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.
- Type
- regex
- Engine
- universal
- Confidence
- medium
- Confidence justification
- Medium confidence: the 2-4-7-2/3 structured format is moderately distinctive for New Zealand bank accounts. Bank name keywords improve detection accuracy. Added context gating and exclusion rules improve precision and reduce incidental matches.
- Detection quality
- Mixed
- Jurisdictions
- nz
- Regulations
- Privacy Act 2020 (NZ)
- Frameworks
- ISO 27001, ISO 27701, PCI-DSS, SOC 2
- Data categories
- pii, financial
- Scope
- narrow
- Risk rating
- 9
- Platform compatibility
- Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible
Pattern
\b\d{2}-?\d{4}-?\d{7}-?\d{2,3}\bCorroborative evidence keywords
bank account, account number, ANZ, ASB, Westpac, BNZ, Kiwibank, savings, bank account number, savings account, ACH, banking, checking, chequing, financial institution, routing, חשבון בנק, מספר חשבון, סניף, 口座番号 (+54 more)
Proximity: 300 characters
Should match
12-3456-7890123-45— NZ bank account with hyphens (2-4-7-2)12-3456-7890123-456— NZ bank account with 3-digit suffix123456789012345— NZ bank account continuous digits (15 digits, 2-4-7-2 format)
Should not match
12-3456-789012-45— Only 6 digits in account section, too short12-3456-7890123-4567— 4-digit suffix, exceeds NZ formattemplate example placeholder record identifier— Template/sample context should be excluded even when anchor words are present
Known false positives
- Generic numeric sequences such as reference numbers, invoice numbers, or identifiers from other domains Mitigation: Require corroborative evidence keywords within the proximity window to distinguish financial account numbers from general numeric data.
- Phone numbers, postal codes, or other structured numbers with similar digit counts Mitigation: Layer with other detection patterns to deprioritise matches that overlap with phone number or postal code formats.