It's definitely a phishing scam.

It's definitely a phishing scam.

Changing your password and blocking their address should solve your issues.

Most of the time if you hit reply to the email you'll find the real address of the perpetrator.