legal risks for credit institutions