You would think they'd have a standard way to recover this, like mailing a one-time password to the account's billing address.