VPN

If you didn't download the VPN, you need to change your password and making sure it is a strong one. You can also add 2 Factor Authentication to your account for more security. If the attempts continue, you might want to consider a name change.

Link to contact Apple Support in the article.

Apple ID has been compromised.      

Security and your Apple ID.      

 Apple ID Password Change.     

Note the restrictions in the article.

Apple ID Name Change.        

 What to do after you change your Apple ID or password - Apple Support    I suggest doing this before you change your Apple ID or password.

Apple ID -Two-factor authentication          

Two Factor Authentification availability.    

2 Factor Authentication - How to generate a recovery key

Apple ID - Using app-specific passwords.     

Apple ID - Two Step Verifications FAQ    

Ginny3boys Said:

"It’s there but it was free! What do I do?? I am completely inept with these types of things!"

-------

Seems Like a Scam:

I wouldn't be too inept here. If you made no purchase that you are knowledgeable (free or not), then someone may have your credentials. So, modify them. Also, keep your iPhone close by, so no one makes purchases on it that you are unaware of.

Apple Credentials:

• Modify: your login credentials (Using Both a New eMail and a New Password for each and all sites)
• Associate: a different method of payment to your account
• Enable: Two-Factor Authentication for Apple ID and for all other accounts that have such an applicable option

Has your credit card been charged? Are you sure the message is legitimate? Does it contain a link for you to sign in somewhere? It may be a scam. Check your purchases history.

Purchase History Review.  

ill be disabled/restricted. You will find out the next time you try to log in somewhere.

Apple will always address you by your name or the name they have on file for you, not Dear Customer, Dear Client or by using your e-mail address.  The e-mail will be from @apple.com or @iTunes.com. E-mail addresses can be spoofed. You can go to Mail/View/Message/Show all Headers to see more. Apple emails won't have poor grammar/misspellings. Apple e-mails will never contain an attachment. Apple will never request personal information by email such as Social Security numbers, your Mother’s maiden name or full credit card numbers . 

The only exception to the above I have noticed is if you order something from the Apple Store (apple.com), your receipt will be addressed to Dear Apple Customer. That is a receipt for a purchase you initiated.

Avoid phishing emails, fake ‘virus‘ alerts, phony support calls, and other scams.   

Identifying legitimate emails from the iTunes Store.     

Send the e-mail to Apple as an attachment to a new e-mail before deleting it. You can forward as an attachment by going to Mail/Message/Forward as attachment. Or control - click on the email and select Forward as attachment. Make sure you send it as an attachment to a new email. If you just forward it, it will probably be rejected. You won’t receive a response.

reportphishing@apple.com

You are welcome.