BR-51
warningUBLCII
Official rules text
[BR-51]-In accordance with card payments security standards an invoice should never include a full card primary account number (BT-87). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.
Rules and regulations
- EN 16931 (UBL) (validation-1.3.17)
- EN 16931 (CII) (validation-1.3.17)
Does this error appear in your invoice?
Place the invoice here and see all violations with their location - free of charge, without registration.
- Hosted in the EU
- GDPR compliant
- No storage
- No use of AI
- No cookies, no tracking
- Official EN 16931 regulations
- Always current official regulations
Official rule sets up to date: EN 16931 1.3.17 · Peppol BIS 3.0.20 · XRechnung 3.0.2 (KoSIT 2.6.0). Last checked against the sources on 12.10.2026.