security question

Getting emails has nothing to do with what operating system you're running. No scan will help here. At most some of your web accounts have been compromised (though not likely), perhaps by weak passwords. Or they're just spam emails trying to do a phishing attack (more likely). But the fact that you're using OSX has nothing to do with any of it.

 

It is just phishing spam. I've been getting them, too, and not on the email account that I use for Facebook. It is being sent to my DNS administrator account that I set up with my domain registrar (which I unfortunately must make public in my whois record). They have no idea if you actually have accounts on these services (or with whatever bank they try to phish you with). When you get one for a service/bank you don't use, it is obvious; when it is a service/bank you do use, you have to resist just clicking on the link. I like to hover my mouse over the link to see where it will really go. You will end up seeing something like "http://www.facebook.com.badguysite.eu/..." (not picking on the .eu domain, but I found one of the fake Facebook ones in the trash and it went to a site I will not bother mentioning in the .eu domain.)