Criminals are getting very good at imitating Apple messages. Start here about recognizing phishing and scams —> Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support
Read this article about identifying real App Store and iTunes Store emails --> Identify legitimate emails from the App Store or iTunes Store - Apple Support Sometimes the only indication in a communication is very subtle. Have a look at this thread. Someone registered an Apple ID with my em… - Apple Community It can be very hard to tell from a communication alone if it is authentic. The best way to check is to use an independent way through Apple's own resources to confirm what the communication claims. Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. These support articles have some guidelines:
More information about scams:
Apple Cash --> Avoid scams when you use Apple Cash - Apple Support
Gift Card Scams --> About gift card scams - Apple Support
If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Use an actual apple.com resource to independently verify what the message is claiming, or use an Apple device feature such as Settings or an Apple app. To ask Apple, start at this web page: Official Apple Support If you wish to investigate links, this post by contributor MrHoffman describes how you can do that —> "Keep your Apple Account safe and secure"… - Apple Community (the link takes you to the end of the post so scroll up a bit).
- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address* However, having your actual name is not proof this isn’t phishing. Compromised databases may have your name and address in them.
- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from [email protected] ." (From an older version of: About your Apple Account email addresses - Apple Support )
- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".
Forward email phishing attempts as an attachment (in MacOS Mail use the paperclip icon) to: [email protected] then delete it.
You say you entered your payment information. Where did you do that? On a web page? If you think this was a phishing email and you entered your payment information in a false Apple web page, CANCEL YOUR CARD NOW. You just gave thieves your card information and will need work with your card company to handle any outcome of this. They will be the ones to help you deal with this, not Apple.