Yes, the phone numbers are masked throughout all points of the authentication process.