These and other scams are ubiquitous.
Okay, some background: while Google search results are an increasingly-unreliable and ad-filled cesspool, replete with scams, malware, AI-generated drivel, and other dreck all scrambling to be at the top of the search results, but for this particular use case, you can search for the phone number and review the Google search results. See if the responses are listed at Apple or referencing Apple, or if the telephone number is listed in lots of “scam” discussions.
In this case, this is also not how credit card fraud detection and prevention is done. If Apple or another payment provider suspects fraud, they block the payment, and they then contact you and request you approve it.
There are other clues, such as the lack of names in the text. The better-grade scams do embed the recipient’s name, but the more mundane scams like this one just broadcast the ~same mail message text to the whole ‘net. This particular bunch was even using the same fraudulent payment amount for a long time. Or there’s another group running the same basic scam, and they’re using different amounts.
As for Apple Pay, that will usually send messages direct to your notifications and to your Wallet app when something happens that Apple wants you to know about, too.
If you’re ever in doubt, look up the financial provider contact information from a trusted resource — in Wallet app for Apple Card or on from the back of your payment card for physical payment cards, and not whatever contact info gets mailed or texted to you with these scams — and call your financial provider.
If you want some “practice” scams to review and learn about, look in the https://reddit.com/r/scams discussion subreddit.