Where are you putting the mask - table field or form control? I have rarely used masks so the only way I know of entering * for characters is password input mask. If done on the control you won't be able to read data in a form so that's of no use? If users can get at your tables, then there's not much point? In fact, I'm wondering when it is that you don't want the numbers to be visible. Surely not during data entry? Maybe what you want is field encryption, but that can only be done in code AFAIK.
The more we hear silence, the more we begin to think about our value in this universe.
Paraphrase of Professor Brian Cox.