REGEXVAULTv2.0
Identity & PII/National Identity Numbers
Verified Safe

Singapore NRIC / FIN Number Regex for Python

/^([STFGM][0-9]{7}[A-Z])$/

What this pattern does

This page provides a lightweight, single-purpose regular expression for matching singapore nric / fin number, ported and verified for Python. Identity and credential patterns need both correctness and safety, since they're frequent targets for adversarial input. The snippet below is ready to drop into your Python project — whether you're validating in a Django view, a FastAPI endpoint, or a standalone data processing script.

Python Implementation

Python
# Singapore NRIC / FIN Number
# ReDoS-safe | RegexVault — Identity & PII > National Identity Numbers

import re

singapore_nric_fin_number_pattern = re.compile(r'^([STFGM][0-9]{7}[A-Z])$')

def validate_singapore_nric_fin_number(value: str) -> bool:
    return bool(singapore_nric_fin_number_pattern.fullmatch(value))

# Example
print(validate_singapore_nric_fin_number("S1234567D"))  # True

Test Cases

Matches (Valid)
Rejects (Invalid)
S1234567Ds1234567D
T2345678CS123456D
F3456789AS12345678D
G9876543KS1234567
M1234567E1234567D
X1234567D

When to use this pattern

This pattern is drawn from the Identity & PII > National Identity Numbers category and carries a ReDoS-safe certification. That matters for Python developers because particularly important in Python web servers where CPU-bound regex operations can stall concurrent request handling. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

NRIC numbers are extremely sensitive in Singapore — the PDPA specifically restricts their collection to necessity. Never display full NRIC to third parties. The M-series (introduced 2022) is missed by many older validators.

Technical Notes

Prefix: S=born before 2000 (Singapore citizen), T=born 2000+ (Singapore citizen), F=foreign before 2000, G=foreign 2000+, M=foreign 2022+ (new MOM series). The last character is a checksum letter computed via a weighted algorithm. Format validation only — checksum requires the algorithm.

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern