5 Check the Email Address It Was Sent From
By and far, this is typically the easiest way to identify a fake email address. Communications from Apple will always use an address tied to a legitimate Apple domain name. There are no exceptions.
Emails that end in apple.com are the most commonly used. That includes “id.apple.com” or email.apple.com.”
As far as emails that are not authentic, they’re harder to list because they can be so diverse.
The best rule is this: if you have even the slightest doubt about an email, just delete it.