I recently received an email stating that someone in Spain had just made a purchase on my Apple Store account. And, they provided a URL in the event that the purchase was a fraud.
I suspected that something was amiss but I wasn’t sure. So, I checked my Apple Store account. There were no new purchases made.
Next, I checked on the email addresses. The email was to “me” from “me”. Now, I was fairly sure that if Apple was contacting me, there would an Apple address.
Finally, I clicked on the URL. It came back as being “suspended”.
I suspect that prior to being suspended, the URL would have asked me to enter my account information.
Always question any emails referring to your account information.