X has opened an investigation into a wave of unsolicited password-reset emails and confirmation codes, but said on September 1, 2026 that its initial review found no evidence that the platform’s systems were breached. Mridul Singhai, a member of the X Product Engineering team, said the company was looking into reports from users who received reset messages they did not request. He apologized for the multiple emails and suggested that attackers may see newly expanded X Money access as an incentive to target accounts.
According to X, receiving an unsolicited reset message does not necessarily mean a password was exposed or that an account was accessed. A reset request can be triggered by entering a username, email address, or phone number. Singhai urged users to enable two-factor authentication and avoid opening links in unexpected emails. X also recommends enabling Password reset protection, which requires extra identifying information before a reset link or code is sent. The company has not disclosed how many accounts received the messages or whether the activity came from an automated campaign.
The security reports coincided with X Money’s expansion to eligible Premium and Premium+ subscribers in the United States. X Money allows users to send money within the social platform, uses Cross River Bank for banking infrastructure, and offers deposit accounts, instant transfers, and a Visa debit card. The service advertises annual yields of up to 6% and up to 3% cash back on eligible X Card purchases. X says deposits at Cross River can qualify for standard FDIC insurance of up to $250,000, while its cash sweep program may provide aggregate pass-through FDIC coverage of up to $10 million.
Although Cross River has past work with Ripple, X and the bank have not announced support for XRP or any other cryptocurrency inside X Money; the service currently moves U.S. dollars through conventional banking and card networks. Separately, X was reported in August to be considering USDC and other stablecoins as possible options for creator rewards, according to a person familiar with the discussions. No token, blockchain network, or launch date had been selected.
X has not provided a timetable for expanding X Money to free accounts or users outside the U.S., and it has not confirmed that digital assets will be added to the payment service.
