I've seen enough instances of this kind of thing now that I've got two facebook accounts - my real account and my spam account (just like I have two email addresses).