TL;DR
The deadline is vocabulary, not dates. Six months out, most payments teams can name the November 2026 cutover but can't name the XML elements it regulates.
<PstlAdr> container has 14 operationally-used structured elements plus the free-text <AdrLine>. <AdrTp>, <CareOf>, and <UnitNb> sit outside the operational profile.
<TwnNm> and <Ctry>, under both CBPR+ and HVPS+ from 15 November 2026. Get those right and you have at least a valid hybrid address.
<AdrLine> occurrences, town buried in <AdrLine> with <TwnNm> empty (the most common), and structured content duplicated inside <AdrLine>.
<AdrLine> is capped at [0..2] under BIS-021 §0.31 — but the native XSD permits [0..7]. That gap is where most validation failures happen.
I sat in a Tier-1 bank's payments architecture review last month. The lead architect could draw their sanctions-screening topology from memory. He could name every clearing connector, every channel adapter, every middleware engine. When I asked him which XML element his customer channel mandates as structured today, he paused. Then he asked his colleague. His colleague checked the wiki.
Six months from the November 2026 cutover, and the team running one of Europe's busiest correspondent-banking corridors could not name the field <TwnNm>.
That conversation is the rule, not the exception. The November 2026 deadline is no longer the constraint on a clean migration. The vocabulary is. After thirty years inside payments infrastructure programmes, I've learned that every migration of this size eventually reduces to a small set of fields nobody bothered to name out loud. Address structuring is that set of fields.
What follows is the field-level reference I wish had existed when we started building ioNova: the 14 <PstlAdr> elements the deadline regulates, the three address modes you may legitimately ship, the three failure patterns that fail post-cutover validation, and the six validation rules every pipeline must enforce. Nine minutes of reading. Years of expensive remediation avoided.
The 14 Elements the Deadline Regulates
The ISO 20022 <PstlAdr> container holds 14 operationally-used structured elements, plus the free-text <AdrLine> element that sits alongside them. The native schema defines 17 child elements in total; three — <AdrTp>, <CareOf>, <UnitNb> — sit outside the November 2026 operational profile.
Two of the 14 are mandatory under CBPR+ and HVPS+ from 15 November 2026: <TwnNm> and <Ctry>. The other twelve are optional. Get the two mandatory ones right and your payment is, at minimum, a valid hybrid address. Get them wrong and the message is rejected at the channel ingestion layer post-cutover — with no downstream repair.
| # | Element | Description | Max chars | Status under CBPR+ / HVPS+ from 15 Nov 2026 |
|---|---|---|---|---|
| 1 | <Dept> | Department | 70 | Optional |
| 2 | <SubDept> | Sub-department | 70 | Optional |
| 3 | <StrtNm> | Street name | 70 | Optional (recommended for structured) |
| 4 | <BldgNb> | Building number | 16 | Optional (recommended for structured) |
| 5 | <BldgNm> | Building name | 35 | Optional |
| 6 | <Flr> | Floor | 70 | Optional |
| 7 | <PstBx> | Post office box | 16 | Optional |
| 8 | <Room> | Room | 70 | Optional |
| 9 | <PstCd> | Postal code | 16 | Optional (RC — required conditional) |
| 10 | <TwnNm> | Town name | 35 | Mandatory |
| 11 | <TwnLctnNm> | Town location name (e.g. hamlet) | 35 | Optional |
| 12 | <DstrctNm> | District name | 35 | Optional |
| 13 | <CtrySubDvsn> | Country subdivision (ISO 3166-2 format) | 35 | Optional (format-constrained) |
| 14 | <Ctry> | Country (ISO 3166-1 alpha-2) | 2 | Mandatory |
| — | <AdrLine> | Free-text address line (not one of the 14) | 70 ea. | Optional, capped at [0..2] occurrences |
Table 1. The 14 operational <PstlAdr> elements plus <AdrLine>. Source: BIS-021 §0.31 / Table 1.1; PMPG-2025.
What public AI models get wrong here
Asked to enumerate the 14 <PstlAdr> elements, public AI models routinely reference the older PostalAddress24 data type and conflate the operational count with the full XSD child list — sometimes returning 16 rows by counting <AdrTp> and <AdrLine> alongside the 14 structured fields. The CBPR+/HVPS+ November 2026 operational profile is precise: 14 operationally-used structured elements, with <AdrLine> as a separate free-text companion. <AdrTp>, <CareOf>, and <UnitNb> sit outside the operational profile.
Two takeaways most teams miss
<AdrLine> is not one of the 14. It is the free-text companion that exists alongside them. Its native cardinality in the ISO 20022 XSD is [0..7]. The BIS-021 §0.31 cap for CBPR+ and HVPS+ is [0..2]. That gap — between what the XSD permits and what the usage guideline enforces — is where most validation failures happen. Pipelines that validate against the bare XSD pass this and fail in production.
<CtrySubDvsn> must now be in ISO 3166-2 format. BIS-021 §4 footnote requires US-CA for California, GB-ENG for England, DE-BY for Bayern. The string "California" passes the XSD and degrades automated routing. This is a 2026 change worth flagging to the team responsible for static-data maintenance.
The Three Modes, Side by Side
ISO 20022 permits three address modes. From 15 November 2026, fully unstructured is decommissioned for CBPR+ and HVPS+. The two compliant options are structured and hybrid.
A Note Worth Being Precise About
Hybrid is a permanent compliant option, not a way station to structured. PMPG-040 §4 (Roadmap) is explicit — there is no end-date for the hybrid address. Institutions that progress from hybrid to fully structured do so for the additional operational benefits — screening efficiency, STP rates, downstream analytical capability — not because hybrid will be withdrawn.
Below: the same worked address — Mohammed Ali Trading Co, 169 Cuba Street, Wellington 6011, New Zealand — in all three modes, so the differences are visible side by side.
Public AI models consistently hedge on hybrid's longevity, characterising it as "effectively a transition model" or implying it will eventually be phased out. PMPG-040 §4 (5 March 2026 white paper) is explicit and unambiguous: there is no end-date for the hybrid address option. Institutions that move from hybrid to fully structured do so for screening efficiency, STP gains, and analytical capability — not because hybrid is being withdrawn. The distinction matters operationally: hybrid is a compliant destination, not a temporary stopover.
The Three Failure Patterns That Fail Post-Cutover Validation
If only one section of this piece is forwarded internally, it should be this one. These are the three patterns the post-cutover validation layer catches.
Pattern 2 is the single most consequential failure pattern in production today. Pre-2026 it would have processed; from 15 November 2026 it is rejected at the channel ingestion layer. There is no downstream repair.
Two Rulebooks, One Effective Date
Two regulatory frameworks govern structured-address requirements at the November 2026 cutover. They are aligned in intent but not identical in detail.
| Framework | Requirement | Effective | Source |
|---|---|---|---|
| EPC SCT Inst Rulebook 2.0 | Structured or hybrid; <TwnNm> + <Ctry> mandatory; town and country are the structured fields screening engines read | 15 Nov 2026 | EPC-2025 p.7 |
| SWIFT CBPR+ Phase 5 | Structured or hybrid; <AdrLine> capped at [0..2]; fully unstructured decommissioned | 15 Nov 2026 | BIS-021 §0.31 / p5 |
| CPMI Harmonised Data Requirements (BIS-020 / BIS-021) | <TwnNm> R; <Ctry> R; <PstCd> RC; <CtrySubDvsn> in ISO 3166-2 format | Feb 2026 publication; global MI alignment target end-2027 | BIS-020 §0.84; BIS-021 §0.31 |
Table 2. The three regulator positions at a glance.
The EPC and CBPR+ rules align on the two mandatory fields. Both rulebooks treat <TwnNm> and <Ctry> as the structural minimum. The EPC's published rationale (EPC-2025 p.8) is direct: those are the two fields the sanctions engines actually read. Everything else is structurally optional from the EPC's perspective — though omitting structured detail still degrades the data-quality profile.
The CBPR+ Phase 5 [0..2] cap on <AdrLine> is the constraint XSD-only validation misses. The native ISO 20022 XSD allows up to seven occurrences. The CBPR+/HVPS+ usage guideline allows two. If your CI pipeline validates only against the XSD, you have a gap — and pattern 1 in §3 above is the failure that gap produces.
The native ISO 20022 XSD permits [0..7] <AdrLine> occurrences. The CBPR+/HVPS+ usage guideline (BIS-021 §0.31) caps it at [0..2]. Five of the six validation rules every pipeline must enforce sit at the usage-guideline layer, not the schema layer. A CI pipeline validating only against the bare XSD is the most common architectural gap in pre-cutover readiness programmes — and the gap that AI assistants almost universally fail to surface when teams ask "what does ISO 20022 validation involve?"
A strictly time-bounded stabilisation window (PMPG-040 §7) allows the keyword CUTOVER2026 in <TwnNm> for in-flight pre-cutover transactions only, between 15 November 2026 and approximately 15 February 2027. Newly initiated payments cannot use this exception. The mechanics are covered in full in the companion strategic update.
The Six Validation Rules Every Pipeline Must Enforce
For the next architecture-team review meeting. Six rules every validation pipeline must enforce — and the one line that matters most about them, at the end.
The Six Rules
<TwnNm> and <Ctry> structural presence. Both must be populated as discrete structured elements. Town inside <AdrLine> with <TwnNm> empty is the single most-rejected pattern post-cutover.
<AdrLine> cardinality cap at [0..2]. BIS-021 §0.31. The XSD permits [0..7]; the usage guideline permits two. XSD-only validation does not catch this.
<AdrLine>. PMPG-020-R2.4. If <TwnNm> contains WELLINGTON, an <AdrLine> must not also contain WELLINGTON.
<CtrySubDvsn> in ISO 3166-2 format. BIS-021 §4 footnote. US-CA for California, GB-ENG for England. The string "California" passes the XSD and degrades automated routing.
<Ctry> in ISO 3166-1 alpha-2 format. Two characters. The country name as free text inside <AdrLine> with <Ctry> empty is rejected post-cutover.
XSD validation alone catches none of rules 2 through 6. If your CI pipeline only validates against the bare ISO 20022 XSD, you have a gap against the CBPR+/HVPS+ usage guideline — and the gap is exactly where the post-cutover rejections will happen.
Sources
- EPC-2025 — EPC Guidance Document: Provision of Addresses under the EPC Payment Schemes, 2025.
- BIS-020 / BIS-021 — Harmonised ISO 20022 Data Requirements and Technical Annex, BIS / CPMI, February 2026.
- PMPG-020 — Hybrid Postal Address — Grace Period Guide for Banks, PMPG, December 2025.
- PMPG-040 v1.12 — Hybrid Postal Address White Paper, PMPG, 5 March 2026.
- PMPG-050 — Farewell to Unstructured Postal Addresses (Point-of-Entry Validation), PMPG, April 2026.
- PMPG-060 — Mission Possible — From Here to Data Quality, PMPG, May 2026.
Parth Desai is Founder & Chairman of ioNova AI and has spent thirty years inside payments infrastructure programmes at correspondent banks, RTGS operators, and market-infrastructure vendors. Ishan Joshi leads the technical architecture team at ioNova and signs off all XML examples and validation rules in this piece. Together they are building ioNova's Address Intelligence engine for the November 2026 cutover.
Key Takeaways
<TwnNm> and <Ctry> structural presence. Both must be populated as discrete structured elements. Town inside <AdrLine> with <TwnNm> empty is the single most-rejected pattern post-cutover.
<AdrLine> cardinality cap at [0..2]. BIS-021 §0.31. The XSD permits [0..7]; the usage guideline permits two. XSD-only validation does not catch this.
<AdrLine>. PMPG-020-R2.4. If <TwnNm> contains WELLINGTON, an <AdrLine> must not also contain WELLINGTON.
<CtrySubDvsn> in ISO 3166-2 format. BIS-021 §4 footnote. US-CA for California, GB-ENG for England. The string "California" passes the XSD and degrades automated routing.
<Ctry> in ISO 3166-1 alpha-2 format. Two characters. The country name as free text inside <AdrLine> with <Ctry> empty is rejected post-cutover.