The back button exists, banks can not refuse to allow its use. All they can do is warn against its use.<p>Have a unique hidden input for every form. If a user goes back, regenerate the form.<p>If a form is somehow resubmitted, print a nice message saying saying that transaction was already submitted.