Hello Britney_A,
first, please reference below to check if it is phishing.
Recognize and avoid phishing messages, phony support calls, and other scams
Use these tips to avoid scams and learn what to do if you think your Apple ID has been compromised.
Phishing refers to fraudulent attempts to get personal information from you. Scammers use any means they can—spoofed emails and texts, misleading pop-up ads, fake downloads, calendar spam, even phony phone calls—to trick you into sharing information, such as your Apple ID password or credit card numbers.
If you get a suspicious email or message
Scammers try to copy email and text messages from legitimate companies to trick you into giving them your personal information and passwords. These signs can help you identify scams:
- The sender’s email or phone doesn’t match the name of the company that it claims to be from.
- The email or phone they used to contact you is different from the one that you gave that company.
- A link in a message looks right, but the URL doesn’t match the company’s website.
- The message looks significantly different from other messages that you’ve received from the company.
- The message requests personal information, like a credit card number or account password.
- The message is unsolicited and contains an attachment.
Please report suspicious emails and messages:
- If you receive a phishing email that's designed to look like it’s from Apple, send it to reportphishing@apple.com. If you forward a message from Mail on your Mac, include the header information by selecting the message and choosing Forward As Attachment from the Message menu.
- To report spam or other suspicious emails that you receive in your iCloud.com, me.com, or mac.com Inbox, send them to abuse@icloud.com.
- To report spam or other suspicious messages that you receive through iMessage, tap Report Junk under the message. You can also block unwanted messages and calls.
And also check your purchase history here(https://support.apple.com/en-us/HT204088).
If you can find that purchase history there, you don't have to worry :)
I hope this solved your problem!
