Seems like the spam spikes in relation to this sort of story, to try to phish someone into 'securing' their info.

Email is the last way a bank should go about contacting a customer; even without the constant phishing, I think there are plenty of people that merely don't even know their own correct email address, nor can relate it accurately on a form, so there are examples outside of the phishing world.