That seems suspicious. Have you confirmed that was the actual email address that sent the message? Depending on your email client, there are different methods of seeing the true sender, and even then there are ways to spoof the sending mailbox.
Myself, I would look at the code within the message and see if that button they want you to click is actually pointing to a Roku.com address. If it's not going to a Roku address, I would not click it. Again depending on your email client, there are ways to view the raw text of the email message, including the coding used for that button.
Although I have to ask: did you get that email while you were setting up one of the Roku Home products (camera, light, smart plug, etc.)? If so, then that sounds completely legit.
Dan
Roku Community Streaming Expert
Help others find this answer and click "Accept as Solution."
If you appreciate my answer, maybe give me a Kudo.
I am not a Roku employee, just another user.