Phishing text?

You're fine. You didn't even need to change your password. This was a clear Phishing attempt. You don't owe the money. They don't know you. They can't charge you anything. They're just hoping you're dumb enough to click the link and provide the information they need to get your money.

For messages like these, the best things to do are:

• Ignore
• Never respond
• Block

Read this --> Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support

Yep! No legitimate company will send you an email asking you to call them in order to cancel payment.

I also recommend you go into settings, click on your name, and scroll down to make sure there aren't any devices you don't recognize.