Hi Cabbagejuice,
The support article Identify legitimate emails from the App Store or iTunes Store outlines several key pieces of information to check for when concerned with the legitimacy of an email, as well as Recognize and avoid phishing messages, phony support calls, and other scams which highlight these examples:
- The sender’s email or phone doesn’t match the name of the company that it claims to be from.
- The email or phone they used to contact you is different from the one that you gave that company.
- A link in a message looks right, but the URL doesn’t match the company’s website.
- The message looks significantly different from other messages that you’ve received from the company.
- The message requests personal information, like a credit card number or account password.
- The message is unsolicited and contains an attachment."
That second article provides further direction when there is a concern:
"If you're suspicious about an unexpected message, call, or request for personal information or money, it's safer to presume it's a scam and contact that company directly if you need to."
Never click on links within messages you suspect may be fraud. Go directly to the website of the service or company in question to check your account, billing information, etc.
Regards.