"So you know this email is genuine, we've included part of your postcode"

... says many a UK bank in emails to customers.

Given the likely harm caused by misleading customers into thinking a part of a postcodw makes an email genuine, why do banks do this?