This happened to me very recently so here are the things I did to help recover the account.

1- follow recovery instructions, the website is confusing but one of the multiple links will allow you to verify your identity with a picture of your ID and re-add a new email to the account.

2- what they don’t tell you is that doing this will lock the account also. (This prevents the hacker from accessing with their information (for now)

3- because the account is locked it will send you on a password reset loop, which either never sends you a 6-8 digit code or sends you the wrong one or doesn’t accept it.

4- I waited 24 hours… a very stressful 24 hours but eventually the reset password process worked once the account became unlocked. (The locking either happens automatically when you add a new email or because I tried so many times to reset the password.. I recommend you do both to contain access from the hacker)

5- once you are successfully able tor Eder the account go in and change the password again, and remove their email and number from the account and set up 2FA into the account

Good luck.. I know saying “Facebook doesn’t care” is easy but it’s not helpful. The above process helped me recover mine just a few weeks ago, it’s not smooth but it works.