You've actually had <username>@facebook.com available for receiving messages and for logging in (I login with ross.masters for example) for at least a year - what they've done here is to hide your displayed emails and only show this one (which is way out of line).