An American man accused of sending more than 27 million spam messages to Facebook users faces 40 years in prison, if found guilty.