X will only send you emails from @X.com or @e.X.com. However, some people may receive fake or suspicious emails that look like they were sent by X. These emails might include malicious attachments or links to spam or phishing websites. Please know that X will never send emails with attachments or request your X password by email.
If you receive a fake email
- Delete the email from your inbox. Don't download any attachments from these emails.
- Find more account security tips in our Help Center.
Frequently asked questions
Phishing scammers send fraudulent messages to a large number of people, in an attempt to trick them into revealing private information, like a password. An email or website may be disguised to appear legitimate.
It can be difficult to recognize a spoofed email as they may look very convincing or appear to come from an X email address. You can check the headers of an email to find out more about the source of the message, and you should be suspicious of new or unexpected emails. X doesn't send emails with attachments, and will never ask you to provide your password via email, Direct Message, or reply.
What if I'm worried that someone has access to my X username and password?
If you suspect your account has been compromised, you can find out what to do on our compromised accounts help page.
If X believes your account has been hacked, we may reset the account password to prevent the hacker from misusing your account. In this case, we'll email you a secure link to where you can select a new password. Again, this link will always be on the https://X.com website, and we never ask you to provide your password via email, Direct Message, or reply.
Why am I getting these fake emails?
X doesn't send these emails. The FTC has a help page that describes some ways spammers may find your email address: https://www.consumer.ftc.gov/.
For more information about X's policies on information collection, as well as disclosure and sharing, please visit our privacy page at https://X.com/privacy.