I am having this SAME issue. In fact I just posted about it (copy of my message below). If you posted this Tuesday, I am curious as to whether or not you've gotten help yet. If I have to wait days/weeks, I am going to be REALLY angry. This is horrible customer service from a company that takes money for their service. I could understand if it were free, but come on Spotify!!
-----------------------------------------------------------------------
I'm really disgusted right now. I have tried to contact Spotify via email (responding to the email notification that someone logged into my account and changed my email and password WITHOUT giving me a chance to intercept and say, "hey, that's not authorized", AND writing directly to the "account-details-changed(AT)spotify(DOT)com" email as instructed), I have tweeted and direct messaged their "SpotifyCares" account on Twitter, tried contacting via Facebook, and utilized the online "help" form. I use quotes because help is very loosely implied.
First of all, if a simple security feature (which most every other service has) was implemented, there would be far less angry PAYING customers posting on these forums about how easy it is to get their account stolen and how it is like pulling teeth to recover their access. Perhaps a password reset could be done if the link wasn't sent to the hacker's email. We are absolutely barred from our own accounts and Spotify will not respond with so much as an automated, "Hey, we're looking into this" or maybe even locking the account down until things are fully investigated. No, some jerkbag in Korea who stole my information gets to leech off my account while I sit here spending New Year's Day desperately trying to contact someone to at the very least CLOSE the account.
You guys have no phone support. No chat support. This is pretty much the last thing I can do to try and get someone to respond, and in order to do so, I had to create a new free account just to login and post. Your system is flawed. Your customer support is lacking. If you can have agents posting on Twitter about non-crucial things, you can have agents helping those that PAY for your services to recover their accounts.
Sincerely,
One very angry, soon-to-be former customer whose main (and compromised) account name is "indiegarona"