Have you ever tried just logging in as firstlast@gmail.com? If it works, with the usual password you use for first.last@gmail.com, it makes me think he has firstlastt@gmail.com or something similar and people sending him emails input it wrong, which causes them to send it to you. Maybe he also inputs it wrong sometimes when he is signing up for stuff.