Hello, Andrea, this is intentional. You generally do not want to expose an endpoint that allows someone to test whether a specific email address has an account in your system.
You would have to build your own endpoint using the management API if you wanted to do this. But we do not recommend exposing an endpoint or providing this knowledge directly on the forgot password page.