Apple will always address you by your name or the name they have on file for you and the e-mail will be from @apple.com or @iTunes.com. E-mail addresses can be spoofed. You can go to Mail/View/Message/Show all Headers to see more.
Avoid phishing emails, fake ‘virus‘ alerts, phony support calls, and other scams
Identifying legitimate emails from the iTunes Store
Send the e-mail to Apple as an attachment to a new e-mail before deleting it. You can forward as an attachment by going to Mail/Message/Forward as attachment.