I just received an email from Apple Support saying a purchase was made with my account from a previously unknown device. There was a note saying if you did not make this purchase, click here. When I clicked it, I was sent to a site that in no way was connected to this transaction. What can I do?
This is almost certainly a phishing message.
That means the sender is trying to collect your login and password. You should report this message as junk, delete it, and close it and any windows it opened.
If you've provided any details to the website thinking it was Apple you need to immediately change your password via https://appleid.apple.com
Also if you use this password on any other website you should consider these websites also vulnerable and should immediately change the password on all sites which use this password in the following order:
- Email accounts + bank accounts
- Social media
- All other sites