Two Commonwealth Bank subsidiaries have entered an agreement with ASIC to pay $3 million for failing to provide annual reviews to customers that paid for the service, adding to the $88 million they have already paid out to 31,500 affected customers.