Currently, there's a way to extract IBANs (which are otherwise retrieved as masked only) as encrypted using a user-provided public key. It is then up to the user to decode the encrypted IBAN. (see "Encrypted Data Source" option in KB).
The ability to get that encrypted IBAN is ONLY through data exports/Aqua which makes it difficult to use in an online flow...
The suggestion is then to improve the PaymentMethod GET APIs so that they could also return that encrypted IBAN (maybe only if asked, and of course, only if the user-provided public key is setup on that tenant)
... View more