Make account recovery a "human in the loop" action.
The account recovery app assumes records are available on use years in the past. *** u me precludes recovery otherwise. Either put a person in the loop, or allow failed recovery attempts to be resolved by a person in the loop.
All automatic fails to meet (this) customer needs.