They could be using some kind of format-preserving encryption, but then they would have needed an unhashed version of the password to generate this "phone input

They could be using some kind of format-preserving encryption, but then they would have needed an unhashed version of the password to generate this "phone input" field.