Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support
Identify legitimate emails from the App Store or iTunes Store - Apple Support

Quote:
I have read that legitimate Apple e-mails always address you by your complete first and last name.

Not quite.
Invoices cite your billing details, including full name, but the message is not composed with a salutation like ‘Dear James’.
Marketing emails (“News”) are not personalized.
Subscription confirmation and alerts (your subscription is expiring) have a first-name-only salutation.
Apple ID usage alerts (login with ID on new device) have a first-name-only salutation.

With macOS Mail, you can hover over links to reveal their URL. That is often a good clue for phishing attempts, if the domain name isn’t as expected.