@gemswinc @Pippy Well,first check the sender email (not the display name). Second, check the URL. If either aren't actually apple, it's a scam,
Even if they look legit, the best way to deal with it is:
1) On your iPhone, go to settings, open the iCloud pane, and check there.
2) In a browser go to http://icloud.com and sign in there.
If it was a legit message from Apple they'll let you know there.