what banks must do