Would you be able to share an image of the sender’s email address? This will allow us to confirm whether the email was sent directly from our platform. If the email was sent from our platform it should have the official @shopify.com at the end of the email address without any special characters added. With that being said, if you do in fact have a hold on the Shopify Payments gateway, you should notice a banner on the admin homepage of your store informing you of the next steps.
In the case that the email does not end in the official @shopify.com, it is most likely a phishing attempt targeting you. You can forward the email to our internal Safety team to investigate the email and attempt to put a stop to the phishing campaign.
If you notice that there is a banner displaying on the homepage of your store, you can reach out to an Advisor by logging into your store through our Contact Us page. They should be able to look into this a bit further for us.