When you are suspicious of any incoming emails, look for "received from" lines in SMTP envelope (not in the header fields which are trivially forgeable): as soon as email hits a normal server, it can't be forged anymore, and a relaying/delivering server will insert the actual header.
If there is no apple.com mail server in the sequence of received-from lines, it's not a valid email.
If there is, it should be valid or their MX servers are compromised.
Regardless, always browse yourself to wherever you need to update any banking info or personal data.