X said it was investigating a wave of unsolicited password reset requests targeting users following the broad rollout of its X Money payments service.
Several X users reported receiving password reset emails they had not requested, raising concerns that attackers were attempting to gain access to accounts that could now be linked to financial services.
Mridul Singhai, a product engineer at X, said the company was investigating the reports but had found no evidence that the attacks had resulted in account breaches.
“Attackers appear to believe that, now that X Money is widely available, they can gain unauthorized access to accounts,” Singhai said in a post on X. He added that the company was investigating the incident and apologised to users for the multiple emails.
X Money is the social media platform’s newly launched payments service, which includes a bank card and other financial features. The service is part of X’s broader strategy to expand beyond social media and build a digital payments ecosystem on the platform.
The launch has increased the potential financial value of compromised accounts, particularly for users who receive payments through X or have financial information connected to their accounts.
X’s chatbot Grok said attackers appeared to be “mass-triggering” password reset requests using publicly available usernames. It also said there was no confirmed system breach or evidence of widespread account takeovers.
The company has urged users to strengthen their account security, including enabling two-factor authentication. Users have also been warning others about the unsolicited reset emails and advising them not to interact with suspicious messages.
X general counsel James Burnham said the company’s legal and security teams would pursue those responsible for attempting to compromise users’ accounts.
The company had not issued a detailed statement through its official corporate accounts at the time of reporting and had not responded to TechCrunch’s request for comment.
The reported attacks come as X seeks to turn its platform into a broader financial and commerce ecosystem. X Money is central to that strategy, potentially allowing users and creators to move money through the platform while giving X a larger role in digital payments.
The incident has therefore raised fresh security concerns around the expansion of financial services on social platforms, although X has so far reported no evidence that its systems were breached or that attackers successfully took over accounts.
Stay ahead of the Stories shaping our world. Subscribe to Impact Newswire and join our
WhatsApp Channel for updates on global tech, business, and innovation—all in one place.
Dive deeper into the future with the Cause Effect 4.0 Podcast, where we explore the ideas, trends, and technologies driving the global AI conversation.
Got a story to share? Contact Us to reach a global audience with Impact Newswire.
Emmanuel Abara Benson is a business journalist and editor covering artificial intelligence, global markets, and emerging technology.
He has previously worked with Business Insider Africa and Nairametrics, reporting on finance, startups, and innovation.
His work focuses on AI, digital economy, and global tech trends.
Discover more from Impact Newswire
Subscribe to get the latest posts sent to your email.
