Run Magisk in Zygisk mode with the deny list hiding itself from banking apps.

However I would advise not using the banking app if you can help it, they’re not clean. Hell, even accessing online banking via a website seems to require connections to google.com and gstatic.com to perform hidden captcha (you don’t have to do the picture thing but it still does the server side tracking).