Tesco bank do that ( I have one of their credit cards ). I typed in the wrong username once and I got the wrong picture - I was quite confused at first.
It did occur to me though, a phishing site would just proxy this image to their site. It doesn't add any security at all.
Biting the hand that feeds IT
