Yeah, they are just trying to steal your personal info. Especially if the message is generic, and doesn't mention you by name.

You did the right thing by going to the actual website, not clicking on any link in the spam message. Sometimes even legit messages tell you to do that.