Country pack
United States PII detection: ITIN, Social security number
Short answer
Maskflare's United States pack has 13 detectors. 1 validates a check digit or letter, 10 test layout or an embedded date, 2 match on pattern alone.
What the United States pack covers
The United States pack holds 13 detectors: Social security number, SSN last four digits, Bank routing number (ABA), Driver licence / state ID number, Individual taxpayer ID (ITIN), Licence plate, Passport number, Phone number, Phone number, unformatted, PO Box, Social security number, unformatted, ZIP code after a state and ZIP code. 1 of them recomputes a check digit or letter, 10 test layout or an embedded date only, 2 are pattern-only, and 7 wait for a keyword before they match.
| Detector | Category | Validation | Valid example |
|---|---|---|---|
| Social security number | social security number | Layout rules | 123-45-6789 |
| SSN last four digits | social security number | Layout rules | 6789 |
| Bank routing number (ABA) | bank account number (IBAN) | Checksum | 021000021 |
| Driver licence / state ID number | ID document number | Layout rules | D1234567 |
| Individual taxpayer ID (ITIN) | tax ID | Layout rules | 912-70-1234 |
| Licence plate | vehicle identifier | Layout rules | 7ABC123 |
| Passport number | ID document number | Pattern only | C12345678 |
| Phone number | phone number | Layout rules | (415) 555-2671 |
| Phone number, unformatted | phone number | Layout rules | 4155552671 |
| PO Box | street address | Layout rules | PO Box 1234, Austin, TX 78701 |
| Social security number, unformatted | social security number | Layout rules | 123456789 |
| ZIP code after a state | postal code | Layout rules | 78701 |
| ZIP code | postal code | Pattern only | 94105-1234 |
Every United States detector in detail
Social security number
A social security or social insurance number. Validation: area, group and serial rules; there is no check digit. Valid example: 123-45-6789; the same shape that fails is 923-45-6789. Full guide: US Social Security number.
SSN last four digits
A social security or social insurance number. Validation: four digits that are not 0000. Valid example: 6789.
Bank routing number (ABA)
A bank account identifier. Validation: a weighted modulus 10 check and an allowed two-digit prefix. It needs one of 6 keywords within 48 characters before the value, such as aba, account number, bank account, routing. Valid example: 021000021; the same shape that fails is 021000020. Full guide: US ABA routing number.
Driver licence / state ID number
An identity document number. Validation: the shape of some US state's licence number, at least a minimum length, never one repeated character. It needs one of 22 keywords within 48 characters before the value, such as cdl, commercial driver's license, dl, dl no. Valid example: D1234567.
Individual taxpayer ID (ITIN)
A tax identifier. Validation: a leading 9 and a group number in the allowed ranges; no check digit. A run of digits with no separator is judged by words nearby; the detector's own keywords include itin, tax id, taxpayer id, taxpayer identification. Valid example: 912-70-1234; the same shape that fails is 912-00-1234. Full guide: US ITIN.
Licence plate
A vehicle licence plate. Validation: 4 to 10 letters and digits with at least one of each, shaped by the country's plate formats. It needs one of 15 keywords within 48 characters before the value, such as licence plate, licence plate number, license plate, license plate number. Valid example: 7ABC123.
Passport number
An identity document number. Validation: the pattern only, with no checksum or structural validator. It needs one of 7 keywords within 48 characters before the value, such as document number, id card, id no, id number. Valid example: C12345678.
Phone number
A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. Valid example: (415) 555-2671.
Phone number, unformatted
A telephone number in the national format. Validation: between 7 and 15 digits, the range an international number can have. It needs one of 18 keywords within 16 characters before the value, such as call me, call me at, call us at, cell. Valid example: 4155552671.
PO Box
A postal address detail. Validation: a PO Box number that is not all zeros. Valid example: PO Box 1234, Austin, TX 78701.
Social security number, unformatted
A social security or social insurance number. Validation: area, group and serial rules; there is no check digit. It needs one of 5 keywords within 48 characters before the value, such as social sec, social security, ss #, ss#. Valid example: 123456789; the same shape that fails is 923456789.
ZIP code after a state
A postal code, which identifies a place rather than a person on its own. Validation: a ZIP or ZIP+4 that is not all zeros. Valid example: 78701.
ZIP code
A postal code, which identifies a place rather than a person on its own. Validation: the pattern only, with no checksum or structural validator. It needs one of 12 keywords within 48 characters before the value, such as lives in, living in, located in, moved to. Valid example: 94105-1234.
Local-language context words for United States
These are the words in the catalogue that confirm a value as belonging to this country's detector. Shared English words such as ID number or tax id are left out here because many packs use them; a word below points at this pack even when other packs are on.
- Bank routing number (ABA):
aba,account number,bank account,routing,rtn,wire - Driver licence / state ID number:
cdl,commercial driver's license,dl,dl no,dl number,dln,driver licence,driver license,driver license number,driver's licence,driver's license,driver's license noand 10 more - Individual taxpayer ID (ITIN):
itin,tax id,taxpayer id,taxpayer identification,tin - Licence plate:
licence plate,licence plate number,license plate,license plate number,license tag,number plate,plate,plate no,plate number,reg no,reg plate,registration markand 3 more - Passport number:
document number,id card,id no,id number,identity card,identity number,passport - Phone number, unformatted:
call me,call me at,call us at,cell,cell phone,cellphone,contact number,fax,mobile,mobile number,phone,phone numberand 6 more - Social security number, unformatted:
social sec,social security,ss #,ss#,ssn - ZIP code:
lives in,living in,located in,moved to,post code,postal code,postcode,resides in,residing in,zip,zip code,zipcode
How Maskflare masks United States identifiers
Detections are replaced with a token such as mf_mask_d7e0 before the request goes to the AI provider, and with response restoration turned on the real value is put back in the answer. The other actions are redact, partial, hash, format-preserving encryption, generalize, alert and block.
- Protect now, Finance - Protect now, Healthcare and Developer: mask (a reversible token) when United States is a primary country.
- Monitor first: alert (counted, forwarded unchanged) when United States is a primary country.
Compliance profiles that include the United States pack: HIPAA Safe Harbor and US personal data.
Limits worth knowing
- A passing checksum shows that a value is well formed, not that it was issued to a real person. The examples on this page pass for that reason and are not real.
- 2 of the 13 detectors here match on pattern alone (Passport number and ZIP code), so they can match text that merely has the same shape.
- Detectors read the text of the request. A value inside an image is found only after OCR, and a value split across lines is not one match.
- Names, addresses and free-text details are handled by other packs. This page is limited to the United States identifiers.
Frequently asked questions
What does Maskflare detect for United States?
13 detectors: Social security number, SSN last four digits, Bank routing number (ABA), Driver licence / state ID number, Individual taxpayer ID (ITIN), Licence plate, Passport number, Phone number, Phone number, unformatted, PO Box, Social security number, unformatted, ZIP code after a state and ZIP code.
Are United States identifiers masked by default?
They are masked when United States is chosen as a primary country (the default Protect now template uses the action mask), or when the pack is turned on directly. A country pack is not on for organisations that did not choose the country.
Which United States identifiers have a checksum?
Bank routing number (ABA).
Do the United States detectors need keywords?
7 of them do: Bank routing number (ABA), Driver licence / state ID number, Licence plate, Passport number, Phone number, unformatted, Social security number, unformatted and ZIP code.
Rules on this page describe what Maskflare's detectors and validators check. They are read from the detection catalogue and are not the specification of the body that issues the identifier. Examples are synthetic.