X is investigating a surge in unsolicited password reset requests as its Money service expands, with no evidence of a breach or account takeover.