Please don’t post personal info. Fraud and scams are based on finding and using personal data.
There are many scams happening now, intending to leverage some personal information into more information and access.
Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support
Start by confirming the purchases actually happened.
Identify legitimate emails from the App Store or iTunes Store - Apple Support
And if you clicked on a link in the message and signed in, you may well have handed over your Apple ID and password. If you did click in a link in a scammer’s mail message and log into the “Apple ID portal” that gets shown, change your password Right Now.
If you don’t have two-factor authentication enabled, enable that now.
Two-factor authentication for Apple ID - Apple Support
Two factor authentication makes wresting control of your Apple ID somewhat more difficult.