Above is correct. Only time Apple calls is if you called first, and requested a callback.
Calling telephone numbers can be faked/forged/spoofed, as can sending email addresses.
Click or tap for related info > Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support
Scam calls are common, as are website ads and pop-ups that try to convince you to add a spam calendar, and email and SMS spam of course, and all sorts of different and utterly fake “you have 65535 viruses!” and “you’re infected!” advertising pop-ups.