@Pippy try logging in directly through iCloud. (Not any links in the emails). If it has been disable you wouldn’t be able to sign in. Pretty sure this is a scam. Can also check the url address used to send the emails.
@Tcfoley99 thank you!
@feloneouscat @Tcfoley99 I will take that into account. I also took the advice and added a security key. As I get older I’m afraid of not being as astute as I once was!