Is this email from risk-management@shopify.com legitimate?

No further action at this time, but also no idea how long it takes them to process through such things.