Generic Payment Card Number (13–19 digits) Regex for Go
/^(?:[0-9]{4}([\s-])[0-9]{4}\1[0-9]{4}\1[0-9]{1,7}|[0-9]{13,19})$/All five implementations are free. Switch engines without signing in.
What this pattern does
This page provides a well-structured, multi-part regular expression for matching generic payment card number (13–19 digits), ported and verified for Go. Financial data validation has zero tolerance for false negatives — a missed invalid entry can corrupt downstream calculations. The snippet below is ready to drop into your Go project — whether you're validating in a Gin handler, a gRPC service, or a command-line tool.
Go Implementation
// Generic Payment Card Number (13–19 digits)
// ReDoS-checked | RegexVault — Finance > Card Numbers
package validation
import "regexp"
var genericPaymentCardNumber1319DigitsRe = regexp.MustCompile(`^(?:[0-9]{4}([\s-])[0-9]{4}\1[0-9]{4}\1[0-9]{1,7}|[0-9]{13,19})$`)
func ValidateGenericPaymentCardNumber1319Digits(s string) bool {
return genericPaymentCardNumber1319DigitsRe.MatchString(s)
}
// Example
// fmt.Println(ValidateGenericPaymentCardNumber1319Digits("4111111111111111")) // trueTest Cases
Matches (Valid) | Rejects (Invalid) |
|---|---|
4111111111111111 | 41111111111111111111 |
4111 1111 1111 1111 | 4111-1111 1111-1111 |
4111-1111-1111-1111 | abcd1234abcd1234 |
5500005555555559 | — |
378282246310005 | — |
411111111111111 | — |
When to use this pattern
This pattern is drawn from the Finance > Card Numbers category and has been checked for ReDoS risk. That matters for Go developers because Go's RE2 engine is inherently safe from catastrophic backtracking, but this pattern has been additionally verified for correctness. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.
Common Pitfalls
Never log full card numbers. Mask to show only the last 4 digits (XXXX XXXX XXXX 1234). PCI-DSS compliance requires minimizing the surface area that touches full PANs.
Technical Notes
Format only — does not validate the Luhn checksum. Always implement Luhn algorithm validation separately. PCI-DSS prohibits storing full PANs (Primary Account Numbers) without encryption.
Have a pattern that belongs in the vault?
Submit it for review — community-verified patterns get credited to your GitHub handle. Submissions join the review queue after automated validation.
Submit a Pattern