I think this is because of the setting called 'Prevent error messages that reveal user existence' is enabled in your cognito client application.