If so, what could support have done? How could they verify that the new person was the same as the old (There was no 2FA enabled) (I think the "email address

If so, what could support have done? How could they verify that the new person was the same as the old (There was no 2FA enabled) (I think the "email address doesn't work, so disabled sending to it" theory sounds more plausible actually :-))