MediaWiki:Passwordreset-emailtext-require-email
Additionally, if want to prevent unsolicited password-reset emails, you may want to update your email options at
$1.
You may set both username and email address to as requirements to generate password reset emails. This may reduce the number of such incidents.
Regards, DCW Helper