Multiple X users report receiving unsolicited X Money transfers, with single or cumulative amounts reaching tens of thousands of dollars, notifications flooded
X users report being subjected to X Money's proactive payment "financial DDoS"
Multiple X users claim to have received unsolicited X Money transfers, with single or cumulative amounts reaching tens of thousands of dollars, notifications flooded, and they describe it as a "financial DDoS". Public discussions point to a peer-to-peer channel that allows payments to any verified username, as well as third-party services that convert token transaction fees to USD directed at a specific username; recipients can accept or reject, with unclaimed funds returned after about 14 days. After completing identity verification, no upper limit on amounts was noted in the public descriptions.
X Money has opened up more broadly to U.S. Premium and Premium+ users, providing accounts, peer-to-peer payments, and branded debit card capabilities through Cross River Bank, with deposits going through that bank rather than X's own banking license. This round of discussions is not the same mechanism as the wave of password reset emails in early September: at that time, product engineers stated that attackers triggered recovery in bulk using public usernames, and the company claimed no breaches were found; this round involves the payment notifications themselves becoming the load. The platform has not issued a corresponding official characterization regarding the "tens of thousands of dollars in proactive payments".
The sender consumes USD or transaction fees from verified accounts, while the recipient deals with notifications, tax implications, and the decision to accept. Funds remain in the channel for about a two-week window; if accepted, they are credited, if rejected or expired, they are returned. Beneficiaries are senders who can exchange payments for attention or increase their visibility; those under pressure are the notification system and recipients who must assess the nature of incoming funds. The driving event is the product allowing unlimited peer-to-peer payments to public usernames, not a confirmed system being breached.
Source: Public information
ABAB AI Insight
Social accounts combined with instant USD deposit channels turn usernames into payment routes. X Money has made verified peer-to-peer transfers free and capable of large amounts, while third parties map on-chain fees to the same username, transforming the cost of sending from "seeking attention" to "piling numbers into wallets". The term DDoS has shifted from bandwidth to notifications and tax calendars: there is no need to breach passwords, just the necessity for the recipient to handle money they did not request.
The capital pathway is outsourcing payment licenses to Cross River, with X handling the front end and identity layer. Whoever completes KYC first can push USD to any verified handle. Rate routing services convert token transaction volumes into fiat payments, effectively using transaction taxes to buy the recipient's attention. The 14-day return period serves as a buffer for the clearing layer, not a harassment switch.
This mirrors early unexpected payments from PayPal and Venmo, crypto airdrops filling wallets, and live-stream tipping walls: the commonality is that once the payment address is public, the power to send exceeds the recipient's consent. Venmo later locked down and set privacy defaults, while airdrops turned "unclaimed" into on-chain dust. X is at a stage of opening social graphs into payment graphs, with limits and anti-spam measures falling after identity verification.
The structural change represents a transfer of pricing power. The pricing power of attention shifts from advertising and subscriptions to who can deposit money into your account. The mechanism is: a public username is a routing address, with no public upper limit after verification, and the right to refuse only appears after receipt. Money first arrives in the notification bar, consent becomes an option afterward, and harassment and marketing share the same channel.
ABAB News · Cognitive Law
A public username is a public payment route
The right to refuse, if after receipt, fills notifications first
When sending money is cheaper than breaching passwords, harassment will shift to the clearing layer