X says it is investigating a wave of unsolicited password reset emails reported by users shortly after the launch of X Money, its new payments service.
According to company product engineer Mridul Singhai, the pattern suggests attackers may be trying to exploit the wider visibility of the new payment feature to pressure account access. X says it has not found evidence of a successful breach so far.
The company's new service is designed to support digital payments on the platform, including a bank card and tools that could help creators receive money more easily. That makes X Money a notable step in the platform's evolution toward a broader creator economy.
Users have also been encouraged to strengthen account protection by enabling two-factor authentication and related security settings. X's AI assistant Grok has been sharing guidance on how to activate these safeguards, while also noting that the reset requests appear to be triggered using public usernames.
As X continues its review, the episode highlights how fast-moving payment features can increase the need for smarter digital protection. In the long run, such developments may push platforms to build more resilient security systems around online finance.
