X investigates surge of password reset scams linked to new X Money service

The introduction of X Money, X's new payments service featuring a bank card, coincided with a spike in unsolicited password-reset emails sent to users. X engineers, including Mridul Singhai, said the company is actively examining the reports and so far sees no evidence of actual account breaches. General counsel James Burnham issued a stern statement promising that X’s legal and security divisions will identify and hold accountable anyone attempting to exploit the platform.

Meanwhile, users have begun warning each other and recommending two-factor authentication as a safeguard. X’s chatbot Grok responded to queries, explaining that attackers are mass-triggering reset forms using public usernames and confirming no confirmed system breach. The company has not yet posted an official update on its main accounts and has not responded to press inquiries.