US Office of the Comptroller of the Currency said banks must be able to demonstrate they have appropriate risk management tools before taking on activities like providing custody services for customers' crypto holdings.