Most services, such as Facebook, will let you know via e-mail if someone has tried to access your account from an unrecognizable location or device, so it's important to know when the e-mail's real and when it's not. In this case, it wasn't a legitimate e-mail.