The link below is to a Apple Support article that supplies a email address that can be used to report phishing and scam emails.
http://www.apple.com/legal/more-resources/phishing/
And also included below is a helpful Apple Support article about the same subject.
Identifying legitimate emails from the iTunes Store - Apple Support