Most "email testing" advice ends at stubbing the send call. You assert that your

app tried to send a message, and the test goes green. That leaves the

interesting half untested: whether the message actually left your infrastructure,

whether the template rendered, and whether the six-digit code inside it matches

the one your backend is willing to accept.