X is investigating a wave of unsolicited password reset emails that it believes may be tied to the rollout of its new payments service.