Note the sender email is “[email protected]”. Seems like a legit email, but it should be from “costco.com” ONLY.
Also notice that there is a false sense of urgency added at the bottom of the email. This is a common strategy hackers use to try and get people to perform a specific action.