Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. Here are some guidelines:
Identifying legitimate emails from the iTunes Store - http://support.apple.com/HT201679
Recognize and avoid phishing messages, phony support calls, and other scams - https://support.apple.com/HT204759
If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Try to independently verify the resource by going to a support page on apple.com and use that to contact Apple or to use the service the message is telling you to use.
In this case I would not give a caller any information. Tell them you will call Apple yourself using a number you have independently verified as being Apple and then update your information.
Here are articles related to the service you mention:
Order Status - https://secure.store.apple.com/order/list
Shopping help - https://www.apple.com/shop/help
Viewing & Changing Orders - Shopping Help - Apple - https://www.apple.com/shop/help/viewing_changing_orders