Detection reference · Personal data · Updated 2026-11-03

Italian fiscal codes (codice fiscale)

The codice fiscale encodes a person's name, birth date, sex and birthplace, so it identifies them on its own. Its last character is a check letter, which Redaxa computes before flagging anything.

At a glance

Reported as	Italian fiscal code
Category	Personal data
Severity	high: direct financial exposure or a strong identifier, such as a card or national number
Replaced with	`[FISCAL CODE]`
Where it runs	The same engine runs in the Chrome extension (free checks, on your device), in the web check and the Windows app (on Redaxa's server; the text is not stored) and in public repository checks.
Engine rule	scanner.ts, line 232

What it looks like

Six letters, two digits, a letter, two digits, a letter, three digits and a check letter (16 characters). The check letter must match the one computed from the first 15.

Example

You paste

Codice fiscale: MRYWLM80A01H501H

Redaxa returns

Codice fiscale: [FISCAL CODE]

Reported as	Italian fiscal code
Severity	high: direct financial exposure or a strong identifier, such as a card or national number
Replaced with	`[FISCAL CODE]`

All values on this page are synthetic or published specimens; none is a working credential or a real person's data.

In a repository check

The same example, committed to a public repository and run through the free repository check:

anagrafica/clienti.csv: Italian fiscal code, listed for review (severity high). Potential sensitive data. Context and authorization must be reviewed; this is not a confirmed vulnerability.
Same value in tests/fixtures/clienti.csv: Test or example value, counted but not listed. Real-looking keys in test files are still reported.

Values are always shown masked in repository reports. No key is ever tested against its provider.

What it does not flag

Codice fiscale: MRYWLM80A01H501X: not flagged. Same shape, wrong check letter: not a valid code.

What to do

Remove the code or replace it with [FISCAL CODE]. If you need a test value, use a specimen like the one above rather than a real person's code.

Check before you paste

The free Chrome extension runs this check inside ChatGPT, Claude, Gemini and Perplexity before a message is sent, on your device and with no daily limit. On the web you get 5 free prompt checks a day with no account.

Add the Chrome extension Try a free web check

Sources

Redaxa engine: scanner.ts line 232. Every output on this page was produced by that code when the page was built.
Wikipedia (it): Codice fiscale, with the decree of 23 December 1976 that defines it