Real emails come from @apple.com or @itunes.com . Be careful, as these addresses can be spoofed; always check the actual header details.
Legitimate Apple emails will never include an attachment. itunes receipt for something i didn t buy
To confirm if a charge is real without using links in the suspicious email: Real emails come from @apple
Identify legitimate emails from the App Store or iTunes Store as these addresses can be spoofed