Displaying full account numbers and identifiers on screen invites shoulder-surfing, screenshots, and screen-share accidents. Masking all but the last few digits gives users what they need to recognize a record without exposing the whole thing.
“Nobody needs to see all sixteen digits.”