It works the same as those "We are from bank X, give us you accound details" scam emails. They completely miss people that don't use bank X but it looks much more legitimate for those that do.