See Account Recovery—Two-Factor Authentication
“If you can’t sign in, reset your password, or receive verification codes, you can request account recovery to regain access to your account. Account recovery might take a few days or longer, depending on the specific account information you can provide to verify your identity. “After you request account recovery, you'll get an email with a confirmation of your request and the date and time of when you can expect to regain access.” … When the wait period is over, Apple sends you a text or automated phone call with instructions to regain access to your account. Follow the instructions to immediately regain access to your Apple ID.”
Before beginning account recovery see:
If you didn't receive your verification or reset email https://support.apple.com/en-us/HT201455
“Not sure where that email was sent? Here are some tips to help you find it.”