TL;DR Phishing - Delete
As already noted, there are a number of red flags. But the biggest issue is that they're asking you to fill the form. There are reasons to withdraw an application. For example, based on the numerous issues about problems if you lie on an application, it might be better to withdraw a not-quite-100%-true application and submit a new, correct and true application than to try and explain your way out of a problem. If this were somehow legitimate (e.g., maybe somebody pressed a button somewhere and now you need to confirm "withdraw application"), then any "form" would be absolutely minimal, just whatever is necessary to confirm you agree to withdraw the application - e.g., confirm birthdate and application number - enough to verify you submitted the original but not enough for someone to submit a new application.
However, I'd be willing to bet that the "form" here has a lot of key personal information waiting for you to fill it in. Stuff like:
- Full name
- Current address
- ID numbers (equivalent of US Social Security Number)
- Date of birth (by itself it means little, with everything else it means a lot)
- Bank Account details (which can be legitimate in an application to verify funds availability, but which would not be needed to cancel an application)
The big question is why did you get this? There are a few possibilities:
- You have not (or not recently) applied for a visa - in which case this is a guaranteed random phishing scam. They found your email somewhere (hacked web site, purchased a list, hacked someone else's email, etc.) and sent this to you (and thousands of other people).
- You have recently applied for a visa - still most likely the same scam. Out of any given a population, a certain percentage will have recently applied for a visa (just as a certain percentage will have recently used Amazon or eBay or PayPal or any particular banking web site, etc.)
- You have recently applied for a visa through a third party system. This would be a big concern because it is possible that someone hacked into that system. Or even worse - the system itself may be a scam, designed to trick you into providing more and more information at every step of the way, including "withdrawing" the application. So if you have applied for a visa, check to make sure you did directly to the appropriate government system. If not, you may already be a victim of identity theft.
- You have recently applied for a visa through the appropriate government system and that system was hacked. Actually not terribly likely. Not that those systems don't get hacked. But because if they did then it is likely they (the bad guys) would already have your information, whether you fill out any form now or not.
But 99% chance it is essentially a random phishing attack. Delete. Done.