"So you know this email is genuine, we've included part of your postcode"
... says many a UK bank in emails to customers.
Given the likely harm caused by misleading customers into thinking a part of a postcodw makes an email genuine, why do banks do this?