X Money rollout linked to password-reset attacks

Users reported unexpected password-reset emails after X expanded its X Money payment service; X is investigating, has found no evidence of account takeovers or breaches, and warns attackers may be submitting bulk reset requests to identify or pressure targets or to create cover for phishing. The advisory outlines risks (nuisance, phishing cover, potential targeting of accounts with payment access) and provides mitigation steps including not clicking email links, enabling password-reset protection and two-factor authentication, using unique strong passwords, and watching for takeover signs.