Skip to content
Change language: English

Warning

UBL-CR-420: Payment card details should not include a security code

In short

Warning: worth checking.

UBL-CR-420 means the UBL file contains a card security code (cac:CardAccount/cbc:CV2ID), which EN 16931 does not use. Remove it and export again. Do not include a real security code elsewhere in the invoice.

On this page

What it means

The check looks at the payment instructions (BG-16) of the invoice or credit note and warns when the card account (cac:PaymentMeans/cac:CardAccount) contains cbc:CV2ID, the card security code (CV2, often called CVV or CVC). In EN 16931 the payment card information (BG-18) only holds part of the card number (BT-87) and the card holder name (BT-88).

Why it matters

The EN 16931 UBL mapping does not use a security code in the payment card information. Remove the code rather than moving it to another invoice field.

How to fix it

Delete cbc:CV2ID from cac:PaymentMeans/cac:CardAccount. If your invoicing software generated it, ask the software supplier to stop including security codes in invoices. Keep the permitted part of the card number (BT-87) and any card holder name (BT-88) in place. Export the corrected file and check it again.

Once the file is corrected, check it again for free: Validate an invoice against EN 16931

Or fix the invoice in a form and download the corrected file, for 1 credit: Fix a rejected e-invoice

The rule as published

A UBL invoice should not include the PaymentMeans CardAccount CV2ID

Where this rule applies

Rule set Version
EN 16931 (UBL) 1.3.17
EN 16931 (UBL credit note) 1.3.17
XRechnung 3.0 (UBL) 3.0.2
XRechnung 3.0 (UBL credit note) 3.0.2
Peppol BIS Billing 3.0 (invoice) 2026.5
Peppol BIS Billing 3.0 (credit note) 2026.5
SI-UBL 2.0 / NLCIUS (invoice) 2.0.3.13
SI-UBL 2.0 / NLCIUS (credit note) 2.0.3.13
France CTC (UBL invoice) 1.4.0-04
France CTC (UBL credit note) 1.4.0-04
CIUS-RO UBL Invoice 1.0.9 1.0.9
CIUS-RO UBL Credit Note 1.0.9 1.0.9
Rule text from phive-rules 4.6.4.

Check your file

Drop your e-invoice to see whether UBL-CR-420 still fails, and which other rules do.

Updated 6 November 2026