[syncsynchalt]

Buying every domain name that could possibly be confused with yours would be unnecessary in this context if you fixed the issue of an attacker being able to redirect to another name.

(Banks should also protect against easily phishable domain names but that's a also losing game, and in that case the technical solution is not as simple or complete).