I received an email confirmation about a purchase I didn’t make

It is a phishing attempt. Do not respond. Do not divulge any personal or financial information. You can use the address below to forward the suspect email message, as an attachment to Apple.

reportphishing@apple.com

If you provided your Apple ID and password at the bogus site, change your password immediately.

  Change your Apple ID password - Apple Support

The links below have information to help identify fraudulent emails.

Identifying legitimate emails from the iTunes Store

Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support