REGEXVAULTv2.0
Finance/Financial Formats
Verified Safe

Payment Reference (End-to-End ID) Regex for Java

/^[A-Za-z0-9\-/\?:\(\)\.,'\+ ]{1,35}$/

What this pattern does

This page provides a well-structured, multi-part regular expression for matching payment reference (end-to-end id), ported and verified for Java. Financial data validation has zero tolerance for false negatives — a missed invalid entry can corrupt downstream calculations. The snippet below is ready to drop into your Java project — whether you're validating in a Spring Boot controller, a Jakarta EE service, or a standalone utility class.

Java Implementation

Java
// Payment Reference (End-to-End ID)
// ReDoS-safe | RegexVault — Finance > Financial Formats

import java.util.regex.Pattern;

public class PaymentReferenceEndtoendIdValidator {
    private static final Pattern PATTERN =
        Pattern.compile("^[A-Za-z0-9\\-/\\?:\\(\\)\\.,\'\\+ ]{1,35}$");

    public static boolean validate(String input) {
        return PATTERN.matcher(input).matches();
    }

    // Example
    public static void main(String[] args) {
        System.out.println(validate("NOTPROVIDED")); // true
    }
}

Test Cases

Matches (Valid)
Rejects (Invalid)
NOTPROVIDED
INV-2024-00001This reference is way too long to fit in the 35-character limit for end-to-end payment references
PAY/2024/0001/EUR/100Ref#123
Ref: INV-001
Order 12345

When to use this pattern

This pattern is drawn from the Finance > Financial Formats category and carries a ReDoS-safe certification. That matters for Java developers because critical in Java applications since the JVM regex engine uses backtracking and is susceptible to ReDoS without careful pattern design. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

Some banks have stricter character sets than the SEPA standard — truncate to 35 chars and strip unsupported characters before submission. Alphanumeric-only is safest.

Technical Notes

ISO 20022 allows the SEPA character set in payment references: A-Z, a-z, 0-9, and / - ? : ( ) . , ' + space. The # symbol is excluded. Use NOTPROVIDED if no reference is available (SEPA convention).

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern