Criminals are getting very good at imitating Apple messages. Start here about recognizing phishing and scams —> Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support
If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Use an actual apple.com resource to independently verify what the message is claiming, or use an Apple device feature such as Settings or an Apple app. To ask Apple, start at this web page: Official Apple Support If you wish to investigate links, this post by contributor MrHoffman describes how you can do that —> "Keep your Apple Account safe and secure"… - Apple Community (the link takes you to the end of the post so scroll up a bit).
- Do a web search for any telephone number being provided. See if it is listed on an actual real apple.com web page as a contact method.
- Apple won’t warn you about disabling an account. You will find out when you try to sign in.
- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem.
- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address* However, having your actual name is not proof this isn’t phishing. Compromised databases may have your name and address in them.
- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from [email protected] ." (From an older version of: About your Apple Account email addresses - Apple Support )
- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".
- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database. If you are unsure, contact Apple using a link from the Apple.com web site, not one in an email.
- Apple will not ask for personal information in an e-mail and never for a social security number.
- Scams frequently have bad grammar or spelling mistakes. They may sounds too “folksy”.
- Apple will not phone you unless it is in response to a request from you to have them call you.
In the Messages app , you can reduce the number of unwanted messages you receive when you block individuals, filter unknown senders, and report spam or junk messages. Note: A known sender is anyone you’ve added to the Contacts app or sent a message to, so do NOT message "STOP" to that sender or else you just whitelist them to send more.
Screen and filter text messages on iPhone - Apple Support