Assuming it's actually from Spotify (look at the from address, if it's from spotify at drge.vep or something weird like that then it's not) and you are not using a VPN then it could be a concern, maybe change your passwords to be safe, especially if you're someone who reuses the same password on other sites