I also have received SPAM emails over the last week from a FB friend.
Every time time you agree to an app on FB you give the app 100% access to all your information. I never allow app requests & never will until FB changes their policies.
My wife uses FB for games. She convinced me to allow her to buy points for 1 of the games & I used our debit card with a US Bank for the small purchase. About a month later small charges started appearing on my account & a week later large charges.
I blocked the card & the bank refunded all charges however be AWARE. FB is not secure.