Got a password reset email from X? Company says it is investigating possible attacks
Follow UsX says attackers may be mass-triggering password reset requests using public usernames.
The suspicious activity emerged shortly after the wider launch of X Money.
Users are advised to enable two-factor authentication and avoid clicking links in unexpected emails.
If you are getting X password reset attempts, then you are not alone. X is investigating a wave of suspicious password reset requests reported by users shortly after the wider launch of X Money, the platform’s new payments service. Several users said they received unsolicited password reset emails. The company says it is actively looking into the matter and has so far found no evidence that attackers successfully breached user accounts or carried out mass account takeovers.
SurveyX says attackers may be targeting accounts
X product engineer Mridul Singhai acknowledged the issue in a post on the platform, saying the company was investigating complaints related to repeated password reset emails. According to Singhai, attackers may believe that the availability of X Money makes X accounts a more attractive target. The payments service is designed to expand financial transactions on the platform and includes features such as a bank card.
However, X has not disclosed exactly how the password reset requests are being triggered or whether a specific group is behind the activity. The company’s AI chatbot also responded to some users stating that attackers were allegedly mass triggering password reset requests using publicly available usernames. Grok said there was no confirmed system breach or evidence of widespread account takeovers.
Users advised to enable two-factor authentication
Amid the spread of unsolicited emails, X users began warning others about the potential security risk. We advise users to enable two-factor authentication to add another layer of protection to their accounts. X’s general counsel, James Burnham, also said the company’s legal and security teams would pursue those responsible for attempts to target users.
For now, users who receive an unexpected password reset email should avoid clicking suspicious links and verify any communication directly through the official X platform. Enabling two-factor authentication and using a strong, unique password can also help protect accounts.
