I got same with different start of AA #. As I have activity most every month - I think it was a well done fishing scam. I would not click on any part of it.

I think if widespead, that it appears, that AA would send a blast email to all AA accounts showing the scam picture and in bold print announce that it is a scam. IF it was done by AA in error, they need to announce that as well to those they sent it to AND maybe 500 AA miles added to the accounts that got it.