Thousands of X users, including several prominent cryptocurrency accounts, have reported receiving unsolicited password-reset emails, raising concerns about a possible account-takeover campaign or data leak. Some users received as many as 10 emails within a few hours.
X plays an outsized role in the crypto industry, serving as a primary channel for traders, projects and executives to share announcements, market commentary, niche trading ideas and breaking news.
Crypto investor Nic Carter said Tuesday that “a lot of people” were receiving unsolicited password-reset attempts and urged users to enable X’s Password Reset Protect feature. Another crypto user, cap.eth, said someone had been “aggressively” attempting to reset his password despite having two-factor authentication enabled.
A lot of people getting unsolicited X password reset attempts in their email inbox. Do the following: go to X settings -> security and account access -> security -> check “password reset protect” https://t.co/mOCZCYL7uj— nic carter (@nic_carter) September 1, 2026
At least four CoinDesk staffers separately reported receiving similar emails Tuesday, including two whose email addresses linked to their X accounts were not widely used.
However, the messages do not necessarily indicate that attackers have obtained users’ email addresses.