"Scammers use phishing and other types of social engineering to try to trick you into sharing personal information—such as your Apple ID password or credit card information. It can happen by email, phone, text message, or even through pop-up notifications when you’re browsing the web.":-
Identify and report phishing emails and other suspicious messages:- Use these tips to avoid phishing scams and learn what to do if you think your Apple ID has been compromised.