I'm trying to regain access to an iCloud account I lost access to a while ago. I no longer have the phone number associated with it, since the old phone was left with an ex who reset it and passed it along. The recovery email is also another iCloud address that I can't access.
When I try to sign in, the account says it's locked and directs me through account recovery. I still have the debit or credit card information that was previously associated with the account, but the security code isn't being accepted. The card is inactive now, so I'm not sure whether that's the problem. I'm worried that any recovery updates will be sent to the inaccessible email address.
Has anyone dealt with something similar? What should I expect from the recovery process, and are there any other ways to verify ownership?
3 Answers
The card verification is usually optional and may only be offered as a way to shorten the recovery wait. Look carefully for an additional option if the card details don’t work. An inactive card may not be accepted, but that shouldn’t necessarily cancel the recovery request.
The official account-recovery site is the place to track the request and continue the reset. It can take several days, but losing access to the old phone and email doesn’t automatically make recovery impossible as long as the service can verify enough account information.
Account recovery happens in stages. The initial review can take up to about 72 hours, but that period doesn’t necessarily mean you can reset the password immediately. After the review, you should receive an update with the next waiting period, which may last several more days.
Check the recovery-status page directly instead of relying only on the inaccessible email. When the recovery date arrives, return to that page and follow the instructions to complete the reset. Try not to delay after the waiting period ends, since you may have to restart the process.
Thanks, I misunderstood the first waiting period as the point when I’d automatically regain access. I’ll check the recovery status again in a day or two.

That clears up my main concern. I’ll continue with the recovery process and check for other verification options.