Might be a good idea to forward the email to Facebook if you haven't already: phish@fb.com