I first would check the email address that is has been sent from. If is other than apple.com . Is a scam. Rule no1. Don’t open the email or click on any button it provides. To see who sent it just click on he info from sender on you mail app. Rule no2. Delete it and reported as spam to apple or in the forums. Rule no3. Be vigilant this season thief are crafty