In the last few days I've had 2 emails claiming to be from Apple. They both said that my Apple ID had been used to access the iCloud from an unregistered device. They then told me to click the link to verify my Apple ID. As I'm naturally paranoid, I don't click links. Instead, I rang Apple Support directly to ask if the emails had come from them.
They hadn't, and the very nice Irish man confirmed they were phishing emails.
The emails looked absolutely genuine, and I wonder how many people have fallen for them.