Cybercriminals are reportedly targeting users of X following the recent rollout of X Money. Many users have come forward, stating they received unexpected password reset emails. A company spokesperson confirmed that X is looking into the situation but has not yet discovered any evidence of successful hacking attempts.
On Tuesday, X product engineer Mridul Singhai shared a message on the platform regarding the rising complaints about unwanted password reset notifications.
“It seems that attackers believe they can gain unauthorized access to accounts now that @XMoney is available to the public,” he explained. “We are thoroughly investigating this matter and, at this moment, we have found no indication of any breaches. We apologize for the influx of emails and appreciate your understanding as we address the situation.”
X Money is the latest payments feature launched by X, carrying a bank card and various associated benefits. This service aims to simplify payment collection for creators using the platform, thereby enhancing X’s digital economy.
As financial transactions often draw malicious individuals, X suggests this may be the case in the current situation.
At the time of writing, X has not provided additional information on its official channels and has yet to respond to inquiries regarding the situation.
Nevertheless, X’s general counsel, James Burnham, posted a stern message, stating: “The legal and security teams at @X will relentlessly seek to identify, locate, and hold accountable anyone attempting to exploit our users, regardless of their location.”
As these attacks persist, users are advising one another to enable two-factor authentication to secure their accounts. X’s chatbot, Grok, has been responding to some users with guidelines on how to activate this feature, while also confirming that attackers are using public usernames to trigger password reset requests en masse.
“There is no confirmed system breach or mass account takeovers,” the AI bot reassured users.
