What is possible, what is not, and why.
Recovery here works nothing like recovery on an ordinary website, and the difference catches people at the worst possible moment.
No email on file, no phone number, no identity document. Nobody can confirm you are you, which means the only thing that proves it is something only you hold. That is the recovery phrase issued at registration, usually shown exactly once.
A forgotten password, if you have the phrase. That is essentially the whole list.
An account whose phrase is lost. There is no override, because an override that worked for you would work equally for anybody claiming to be you, and a market with such a mechanism would be one where accounts get taken constantly. A two factor setup whose private key is gone fails the same way for the same reason. And money sitting on the market in a lost account, which is in no escrow contract and has nothing to arbitrate.
Deal with the order before the account. An order in escrow has a release timer running whether or not you can sign in, and an expiry releases funds without your input. If you can still reach the vendor through the platform, say plainly that access is a problem and ask them to hold. What you should not do is settle outside the platform, which removes the escrow contract entirely.
The phrase on paper at registration, a password used nowhere else, two factor enabled the same day with its key backed up. Ten minutes at the one moment when you have no reason to think you will ever need any of it.