Hi @_Mayank,
I guess you will call the webApi with some parameters, correct?
Problem would be that if somebody really want to access the data, they could use brute force entries similar to their Id and use the API you use to get information about other customers.
If you already have users authenticated etc. you can use their rows with the needed information to store their bank account data etc. As that data is highly vulnerable only specific users should be able to access that data.
You could than use that data inside the power page to fill in the form and submit something for payment etc.
--------------------------------------------------------------------------------------
Hope that helps.
If the post solves your problem, please mark it as solution. If it helps, consider a thumbs up.
