Identifying legitimate emails from the iTunes Store - http://support.apple.com/HT201679 - lacking in specifics, the next link is better:
Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - https://support.apple.com/HT204759
Forward attempts as an attachment to: reportphishing@apple.com
https://blog.malwarebytes.com/cybercrime/2018/02/panic-attack-apple-scams-apply- pressure/
Apple e-mails address you by your real name, not something like "Dear Customer" or "Dear Client".
Apple e-mails originate from @apple.com or @itunes.com
Mouse over links to see if they direct to real Apple web sites.