Hi, yes that would have been a scam / phishing you should in future save those emails and forward with complete headers to Facebook. You can report phishing emails to phish@fb.com or through the Report Form https://www.facebook.com/help/181495968648557?helpref=faq_content as well forward to US Gov if in the US @ phishing-report@us-cert.gov Other countries have own reporting sites. Suggest Change Password on Facebook and maybe hide for awhile. I have seen a friend have a contact duplicated and contact him as that person so ya, there are even videos on how to Suggest doing a scan with https://www.malwarebytes.com/ Please let us know if this solved your issue or if need further assistance.