…and should I worry?
I started getting emails to a tertiary email account that were Facebook updates in Indonesian to an account I have nothing to do with. I verified that emails themselves were not spam. I recovered the password and I think removed my email info from the account.
Questions: Can someone register an account without access to the email? There was I think I primary email registered, and my email was secondary, but the “send to” address. What other steps should I take to fix this?
Change your password to something more difficult and don’t tell anyone.
My first guess is that someone has access to that e-mail account, because you do have to go through a confirmation link when you sign up for Facebook. Someone could sign up, go to the e-mail and verify the account through the link and that’s that.
Next you should just delete the Facebook account all together, not just remove your e-mail information. Delete, not deactivate. We have a thread around here somewhere in GQ regarding how to do that, nevermind a quick Googling will find the same info too.
Was there no verification e-mail in your account? I’m suspecting someone could have just used your e-mail and that the verification e-mail doesn’t actually do anything. I’ve signed up for a site or two where I could freely enjoy the site without actually going through the verification e-mail.
I seem to remember that you can do things on Facebook before you confirm the account. The first thing to do is follow Covered_In_Bees advice. Then you could create a Facebook account and play around with it to satisfy your curiosity.
(Slightly off-topic - twitter seems fully usable without confirming the account. I have a twitter account for an email address I made up on the spot that probably doesn’t even exist.)