FNB Sends "Phishing" Look-alike Emails

First National Bank's online banking services division sent me an email asking me to send them my ID, Proof of Residence, User Name and other identifying information via email within 7 days or risk suspension of my user account. This is stated to be a FICA requirement.

This looks exactly like a phishing email. Earlier this week FNB's Enterprise Banking platform reminded me not to comply to these types of emails and made me indemnify them if I do this. Even the above email I received from FNB online banking warns me not to provide such information via email...

My FNB banker confirmed that the email is legitimate and the sender curtly rep**** to my communication with FNB by again warning me that I must comply or my User Name will be suspended and deleted.

I am not disputing FICA requirements and I made my latest FICA documentation available to my FNB banker (which is where the rest of FNB should also source it to maintain privacy and stop wasting the client's time with more paperwork!)

How can FNB rightfully be indemnified against clients' phishing losses when they act as above?