Your Apple ID was just used to download XXXXXXXXXXXX (usually a game of some kind) from the App Store on a computer or device that had not previously been associated with the Apple ID.
Order total $ CAD 9.99.
If you initiated this download, you can disregard this e-mail. It was only to alert you in case you did not initiate the download yourself. If you have not authorized this charge, Cancellation Form  (this will be linked to a fake site) as soon as possible to cancel the payment.

Take a look at the first (which is the link most people will click on first), when I hover my mouse over the link the url for that link does not lead to any Apple website (see the green circle at the bottom). If you mouse over a link, usually the real website url will show up.

The rest of the links do lead to Apple but the most important first link does not. (SCAM)

I didn’t click the link but I did copy and paste the url into a new window in my browser and this is what came up. Looks pretty legitimate doesn’t it.

What you don’t notice right away (because your anxious to cancel this transaction) is the only areas of the site that work is the personal information section.  You can not click on any of the tabs at the top of the website. (SCAM!!).
Also check out the new url at the top of the page in this image. NOT and Apple website url.

Before you panic, when you see what looks like an alert for your attention on a website you may belong to. Check out the links on the e-mail you get. Just by hovering over every link in the e-mail you can uncover if it’s something you need to address or a scam without having to click on any links and possibly be hacked or identity stolen.

If you’re still not sure, go directly to the website of concern (in this case Apple) and contact their support directly.

Have you been scammed before? Share what it was so others can be on the look out.