X is investigating a wave of unsolicited password-reset emails that raised concerns about a possible security breach, Mridul Singhai, who works on X’s Product Engineering team, said Tuesday. The company has so far found no evidence that its systems were compromised.
Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts. We are actively investigating the issue and, so far, have found no evidence of any breaches.
We apologize for the multiple emails and appreciate your patience… https://t.co/zf1pRWbqBX
— Mridul Singhai (@singhai) September 1, 2026
Multiple X accounts reported receiving unexpected password-reset emails and confirmation codes despite not requesting them.
Users warned that the activity could be part of an attempt to access accounts and advised others to turn on two-factor authentication and X’s “Password reset protect” feature. They are also advised not to click on any links contained in the emails.
Singhai said attackers appear to believe the wider availability of X Money could enable unauthorized access to user accounts.
AI, tech, and the markets they move—in one daily briefing.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
This week, Elon Musk’s social platform rolled out X Money to all Premium and Premium+ subscribers with US accounts. The service allows users to send money to one another through the platform using the banking infrastructure of Cross River Bank.
𝕏 Money is now available to all Premium and Premium+ subscribers with U.S. accounts
Open the Money tab in your sidebar to get started
— X Money (@XMoney) August 31, 2026
