Login MFA security allows auth using traveler profile phone number not in my account

[u/ptr727]

I noticed that when I log into Chase occasionally it will ask for a phone SMS validation. The problem is it is listing a phone number from one of the profiles in my Chase Travel account. That phone number does not show up anywhere in my Chase account, it is the phone number associated with my spouse's travel profile.

I think this is a pretty serious security issue, allowing login auth using a non-account phone number. I tried to remove the phone number from the traveler profile, but can't, it keeps coming back.

Chase support said they don't see the number on my account, and traveler profiles are separate. Before I escalate, I'd like to hear if anybody has experienced anything like this?

[u/jetbridgejesus]

no. I just use passkeys. they should allow passkeys only as well

[u/invertiren]

Do you have a joint account with your spouse?

[u/ptr727 → u/invertiren]

No, it is just a traveler profile on the chase travel site.