Is this email from risk-management@shopify.com legitimate?

I received one also. I sent a screenshot to Shopify Support and I’m waiting for them to confirm it for me. I’ll post as soon as I hear back from them.