[US] Phishing attempt or identity theft?

Hello. In the last couple days I've received emails from a crypto wallet company, Link, and a phone company, Dataphone, about activity on my accounts. I don't have accounts with either company, though both are real and made it past my spam filter. I haven't clicked any links and there's no fraudulent activity on my credit cards. My assumption is that they're phishing attempts, however I was recently the target of an email bomb (my email address was used to sign up to thousands of mailing lists to hide a Best Buy receipt for items purchased with my debit card) so I'm very suspicious that someone may be using my email address to sign up for things. Is there any way I can be harmed or implicated if someone uses my email address for illegal activity? Am I being paranoid? Thank you!