Duplicate Facebook Account?

Hey all, can I get an expert opinion here, please? Is it possible to create a spammed duplicate Facebook account which can then be used to log into someone else's account (if they knew the password etc) which obviously makes it look like I've done it? Desperate for help here...

 

Passwords have been changed, as have mine. Two step authentication set up also. Is there any other explanation as to why my location is showing up in their log in details?

 

Facebook call it cloning.
Its not that your account has been hacked at all, its simply been cloned (duplicated) usually because your profile is set to 'Public'.
Once your profile has been cloned, these fruit-cakes will usually attempt to mine data from all of your friends by sending friend requests which once accepted, gives them access to what they want.
To keep the original profile owner from discovering the cloned profile, the original profile is usually blocked.

As advised after re-setting Strong passwords, change your account settings from 'Public' to 'Friend'.
Additionally, you can make your friends list off limits to the public also.
Go to your profile page and click the Friends tab. Click the pencil icon (top right) select 'Edit Privacy' and set your access to 'Friends'.