X Says Attackers Targeting User Accounts After X Money Launch

According to TechCrunch, numerous X users reported receiving unsolicited password reset emails. On Tuesday, X product engineer Mridul Singhai posted on the network that the company was looking into users’ complaints about the mass password reset attempts.

“Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts,” Singhai wrote. “We are actively investigating the issue and, so far, have found no evidence of any breaches. We apologize for the multiple emails and appreciate your patience as we work to resolve this.”

X Money is X’s newly launched payments service, which includes a bank card and other benefits. TechCrunch noted that the service could make it easier for creators to collect payments on the platform, and that money changing hands tends to attract bad actors.

As of the time of writing, X had not posted details to its official company accounts or responded to TechCrunch’s press inquiry. However, X general counsel James Burnham wrote a post vowing that the legal and security teams would “stop at nothing to identify, locate, and hold criminally accountable any person anywhere on or off earth who attempts to victimize our platform’s users.”

As the attacks continue, users are warning each other to enable two-factor authentication to protect their accounts. X’s chatbot Grok responded to some posts saying attackers are “mass-triggering” password reset requests using public usernames, and that there was “no confirmed system breach or mass takeovers.”