How do I disregard non-SSN 9 digits

Situation: I'm blocking email transmission if content matches positive for an SSN EDP (DLP 14.6).

Problem: 123,456,789 and 123456789 and 123-45-6789 will all match as SSNs.

Any solutions? I don't want to create "holes" I just want to explore possible options. I wish I could perform Rules or Exceptions explicitly on the matched results of Rules or Exceptions.