I got three of these today. There are a bunch of clues that they’re not legit. First, there’s no Apple logo (easy enough to fake, but still…). Second, the Apple ID it says was used is not my Apple ID. Third, the From addresses are not at apple.com (again, easy to fake so why not take the time?). But of course the biggest clue is that if you hover over the “Learn More” links you’ll see that they don’t point Apple domains. This post says they lead to hacked accounts that will bounce you to a Russian online drug store.
Your Apple ID was used to sign in to FaceTime, iCloud, and iMessage on an iPhone 5
Your Apple ID (email@example.com) was used to sign in to FaceTime, iCloud, and iMessage on an iPhone 5.
If you have not recently set up an iPhone with your Apple ID, then you should change your Apple ID password. Learn More.