If a guest reports that they received a "forgot password" form email even though they didn't request it, please confer with your CSM to check the setting of your password strength under Cockpit>Guests>Guest Validation
The reset email will only be sent to the guest that has access to the correct email.
Advise the guest that receives the email to reset their password and report to Punchh support that they received a reset password request, unsolicited