We catch MaskedObjectException at the webapp level and display a specific error page. The page lists the opaque identifier of the masking requests and the legal email address where to send inquiries.
Thanks to @anlambert for deduplicating the error templates.