Cognito Forgot Password - Sending to Unknown Phone Number

Viewed 75

I am using Cognito for auth.

I am currently using it for InitiateAuthCommand, ConfirmSignUpCommand, and RespondToAuthChallengeCommand successfully with no issues.

There is only user in my user pool. The phone ends in 0415.

enter image description here

But when I send ForgotPassword command to the same pool I get a success but to a different phone number.

{
  '$metadata': {
    httpStatusCode: 200,
    requestId: 'XXXXXXXXXXXXX',
    extendedRequestId: undefined,
    cfId: undefined,
    attempts: 1,
    totalRetryDelay: 0
  },
  CodeDeliveryDetails: {
    AttributeName: 'phone_number',
    DeliveryMedium: 'SMS',
    Destination: '+*******5547'
  }
} 

I can't find anything online, but is this 5547 like a default number?

Checked cloudtrail logs for Cognito, see the request, but the destination phone number is fully masked.

Any thoughts on how to troubleshoot this further?

0 Answers
Related