Being asked to re-enter your old password and then forced to use your current login credentials is a security loop that many people have experienced. The system may have detected unusual activity on your account and triggered an automatic protection mechanism, making the recovery process complicated. In this case, it’s best to take a break from everything for a while (usually 24–48 hours), then try to recover using a different device, browser, or IP address—avoid doing it too many times in a row, as this can make the system suspect you’re a bot or intruder.
If you have the “Account is Compromised” option, use it – it’s an alternative route that doesn’t require your current password, but focuses on verifying your identity. You may need to provide identification that matches your account information during the process, so have a clear, authentic scan ready. The more you follow the process and avoid rushing things, the better your chances of getting your account back. It’s important not to try too many times in a row, as this can make things worse.