Credit card DLP Senstive Info type is not working

Question

Hi Guys
Hope you can help.
I've created a word document that contains the following sensitive info:

Can you order me a new laptop. Use my VISA number 1111-1111-1111-1111, expiry 11/22, and send me the estimated delivery date when you have it.

When I tested this document using test option the M365 Compliance portal, the test cannot match to the rule :

Has anyone got the same issue with the Credit card detection?

Answer 1

Are you testing with a real CC number? or ones that appear to be real?
It doesn't just fire on a random number with the right pattern, it depends on an algorithm as well as "corroborative evidence ".

https://learn.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/dlp-rule-application

You can also search the internet for fake CC numbers to evaluate the rule.