Enable Admin - Settings - Login - hide email address taken
hide email address taken
Don’t inform users that an account exists with a given email address during signup or during forgot password flow. Require full email for ‘forgotten password’ requests.
See also Different password reset for wrong username/email (2014 
)
Edit @JammyDodger was 40 seconds faster