Friend cannot login to cancel the account, and they're getting charged

To Clarify

We have contacted support through email FROM THE ACCOUNT HOLDER'S EMAIL multiple times, and they keep responding with the same information - which we cannot do due to not having that device anymore, and not having a number hooked up to the account, and there is no pc linked to it either.

Responses:

I understand that you are referring to two-step verification.
 
Enabling two-step verification with Dropbox keeps your account secure when the email or password has been compromised. To keep our users’ accounts secure, we can’t rely on email verification alone to uphold the integrity of account security features like two-step verification.
 
Can you double-check if you have any of the following? If you have any one of these things, I may be able to help you sign in to the account:
1. A computer or mobile device linked to your account through the Dropbox app
2. An emergency backup code for your account
3. A backup phone number added to your account that can receive SMS messages
 
The above listed steps will assist you to disable two-factor authentication if you have lost or reset your phone.

----------------------------------------------------------------------------------

As previously mentioned, the following information is required in order to disable two-step verification if you have lost or reset your phone:
 
1. A linked computer or mobile device
2. Your emergency backup code
3. A backup phone number on file that can receive text messages
 
Two-step verification is meant to protect your account when your email or password is compromised. When you set up two-step verification, you are telling Dropbox that the email address and password are no longer sufficient to access the account. That's why it's so important to keep at least one of the items listed above available at all times.