Cookie recipe Phishing scam Email??

A user received a suspicious email claiming they ordered a cookie recipe from Shopify, which included mismatched credit card numbers and a PDF link. The user did not click the link, moved the email to spam, and is questioning if it is a phishing scam, noting they recently ordered a multitool on Amazon.