They have a duty under 31 CFR § 370.10 to ensure securities are redeemed only by the legitimate owner, and to reissue or repay funds if a redemption was unauthorized.