{"id":77598,"date":"2026-09-02T04:02:01","date_gmt":"2026-09-02T04:02:01","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/x-says-attackers-are-targeting-accounts-after-x-money-launch\/"},"modified":"2026-09-02T04:02:01","modified_gmt":"2026-09-02T04:02:01","slug":"x-says-attackers-are-targeting-accounts-after-x-money-launch","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/x-says-attackers-are-targeting-accounts-after-x-money-launch\/","title":{"rendered":"X Says Attackers Are Targeting Accounts After X Money Launch"},"content":{"rendered":"<p><b>(Originally posted on : Crypto News &#8211; iGaming.org )<\/b><br \/>\n<\/p>\n<div>\n<p>X is investigating a wave of unsolicited password reset emails after X Money became available to Premium and Premium+ subscribers with US accounts.<\/p>\n<p>Some users reported receiving as many as 10 reset messages within a few hours. X said it has found no evidence of a breach or widespread account takeover.<\/p>\n<hr\/>\n<p><strong>Good to Know<\/strong><\/p>\n<ul>\n<li>The password reset emails are being generated through X systems.<\/li>\n<li>X Money is now widely <a href=\"https:\/\/igaming.org\/gaming-news\/x-money-rolls-out-to-us-premium-and-premium-plus-users\/\">available<\/a> to eligible US Premium and Premium+ accounts.<\/li>\n<li>Users can reduce account recovery risk by enabling Password Reset Protect and two factor authentication.<\/li>\n<\/ul>\n<hr\/>\n<h2><strong>X Money Rollout Draws Account Access Attempts<\/strong><\/h2>\n<p>X product engineer Mridul Singhai said attackers appear to be targeting accounts following the wider rollout of X Money.<\/p>\n<p><em>\u201cAttackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts.<\/em><\/p>\n<p><em>We are actively investigating the issue and, so far, have found no evidence of any breaches. We apologize for the multiple emails and appreciate your patience.\u201d<\/em><\/p>\n<p>Reports indicate that repeated requests are being submitted through the public account recovery process, triggering legitimate X emails even when account owners did not request a password change. Receiving one of these messages does not by itself mean an account has been compromised.<\/p>\n<p>The timing has raised additional concern because X Money adds payment functionality directly to X accounts. The service allows eligible users to send money through infrastructure supplied by Cross River Bank.<\/p>\n<p>X Money expanded to all eligible Premium and Premium+ subscribers with US accounts at the end of August after an earlier limited rollout.<\/p>\n<h2><strong>X Recommends Extra Account Protection<\/strong><\/h2>\n<p>Password Reset Protect requires additional account information before X sends a reset link or confirmation code. The feature works separately from two factor authentication, so users can enable both protections.<\/p>\n<p>Users receiving unexpected reset emails should avoid opening links inside the messages and instead access X directly through the website or app.<\/p>\n<p>X continues to investigate the activity, with no widespread successful account breaches confirmed as of September 2.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/igaming.org\/crypto\/x-says-attackers-are-targeting-accounts-after-x-money-launch\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Crypto News &#8211; iGaming.org ) X is investigating a wave of unsolicited password reset emails after X Money became available to Premium and Premium+ subscribers with US accounts. Some users reported receiving as many as 10 reset messages within a few hours. X said it has found no evidence of a [&hellip;]<\/p>\n","protected":false},"author":44,"featured_media":44519,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[34],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/77598"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=77598"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/77598\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/44519"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=77598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=77598"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=77598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}