I've had pretty realistic emails purporting to be from apple serving as a "reminder to verify account" (or something similar).
Clicking on the link to verify the account took me to a site that was (to my eye) indistinguishable from the genuine apple site, only clue was the web address. Since apple (and many other businesses) have several same-same-but-different addresses anyway, depending on what you want to do/who you are/are you logged in etc, that wasn't much of a giveaway.
The giveaway was when filling out the form it required a credit card complete with verification.
Checked with apple support. It was indeed a scam. (They were real interested. So was the cyber division of our police force, for whom I filled out a form.)