New Zealand bank account number

Detects New Zealand bank account number patterns. This pattern is based on a Microsoft Purview built-in sensitive information type. Financial account numbers require corroborative evidence for reliable detection due to their generic numeric format.

Type: regex
Engine: universal
Confidence: medium
Confidence justification: Medium confidence: the 2-4-7-2/3 structured format is moderately distinctive for New Zealand bank accounts. Bank name keywords improve detection accuracy. Added context gating and exclusion rules improve precision and reduce incidental matches.
Detection quality: Mixed
Jurisdictions: nz
Regulations: Privacy Act 2020 (NZ)
Frameworks: ISO 27001, ISO 27701, PCI-DSS, SOC 2
Data categories: pii, financial
Scope: narrow
Risk rating: 8
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible

Pattern

\b\d{2}-?\d{4}-?\d{7}-?\d{2,3}\b

Corroborative evidence keywords

bank account, account number, ANZ, ASB, Westpac, BNZ, Kiwibank, savings, bank account number, savings account, [object Object], [object Object], [object Object], banking, [object Object], checking, chequing, financial institution, routing, חשבון בנק (+54 more)

Proximity: 300 characters

Should match

12-3456-7890123-45 — NZ bank account with hyphens (2-4-7-2)
12-3456-7890123-456 — NZ bank account with 3-digit suffix
123456789012345 — NZ bank account continuous digits (15 digits, 2-4-7-2 format)

Should not match

12-3456-789012-45 — Only 6 digits in account section, too short
12-3456-7890123-4567 — 4-digit suffix, exceeds NZ format
template example placeholder record identifier — Template/sample context should be excluded even when anchor words are present

Known false positives

Generic numeric sequences such as reference numbers, invoice numbers, or identifiers from other domains Mitigation: Require corroborative evidence keywords within the proximity window to distinguish financial account numbers from general numeric data.
Phone numbers, postal codes, or other structured numbers with similar digit counts Mitigation: Layer with other detection patterns to deprioritise matches that overlap with phone number or postal code formats.

References

New Zealand bank account number entity definition - Microsoft Learn