Just had the same issue. I was lucky to pretty much catch the email as it came in. I tried to log in but I think my password was changed, but I was able to do Forgot Password and reset it. The actual security codes did come from "EA@e.ea.com", as did the initial one that I thought was a scam, except the messages were different.
The "scam" one read "Verification Code For EA - ###### You are almost there! Go back to EA and enter the code above. This code is valid only when used with the email address where you received the verification code." The real email from when I reset it myself said, "Your EA Security Code is: ###### If you didn't request this code, please go to your My Account page and change your password right away. For assistance, please contact EA Help."
The "scam" one reads more like my account is being created than a reset password, but I already had an existing EA account, so I don't even know how they did that.
