You get a very official looking and well done email ostensibly from Apple that your Spotify (or Netflix or … whatever) trial subscription is over and the annual subscription will automatically be charged to your Apple account unless you unsubscribe within a day or two. Conveniently a link to your Apple Account manager is provided in the email, just enter your Apple ID and Password.

My wife was threatened with an $85 charge for Netflix and a friend with $150 for Spotify. Of course neither was valid. All the Phishing crew wants is your Apple ID and Password. Both have been reported to Apple, but in the meantime, ''BE CAREFUL OUT THERE"

How did the e-mail address the recipient; e.g., "Dear …" ?

I have read that legitimate Apple e-mails always address you by your complete first and last name.

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support
Identify legitimate emails from the App Store or iTunes Store - Apple Support


Not quite.
Invoices cite your billing details, including full name, but the message is not composed with a salutation like ‘Dear James’.
Marketing emails (“News”) are not personalized.
Subscription confirmation and alerts (your subscription is expiring) have a first-name-only salutation.
Apple ID usage alerts (login with ID on new device) have a first-name-only salutation.

With macOS Mail, you can hover over links to reveal their URL. That is often a good clue for phishing attempts, if the domain name isn’t as expected.

So in light of the information in the link provided in the posting above, I am still curious as to the salutation, info, etc. that appeared in the phishing e-mail.

My very phishing adverse wife deleted the message before I got to see it, but she says she thinks it addressed her first name but she is far from certain.