People can message you without being a friend. If you come up in a search, you could get messages from **anyone**.,

I used this feature today. My mom is in the hospital. I messaged some of the cousins since since I did not have thier emails. They are my mom's friends, not mine.

snopes link for more info
http://www.snopes.com/computer/virus/koobface.asp