It's good to put a reminder in this thread, the issue was discussed in more detail here:

Scammers targeting airline compensation for phishing

It's beyond a parody for TAP to reach out to people pro-actively to give them EC261 compensation, so that should have been the first flag here. TAP have got this on their own website on the top line, so they are very much aware fo this. TAP lost control of their customer database in the data leak, and the information sits in the dark web for anyone to extract. So these scammers can easily send out an email to people along these lines, I'm surprised that I've only had one such approach as far as I can tell.