When you decrypt the WhatsApp Dynamic Flow payload, it won’t include the user’s phone number by default. You need to either pass it yourself using flow_client_state when starting the flow, or grab it from the original webhook event (where it’s under messages.from).