Is a user's email address confirmed in Facebook Graph API?<>
This question already has an answer here:
I tested this scenario by creating a new Facebook account and attempting to connect it to sites without verifying my e-mail address. The Facebook dialog did not allow me to do so, explaining that I must first verify my e-mail address before connecting.
Thus, you can rely on e-mails retrieved from Facebook to be "verified" sans policy changes.
You won't be able to tell if the email is verified, but if the /me call on the API returns verified = true it means the user has verified their account in some way (credit card, mobile etc). So it's safe to assume the user's account and email are valid.