The minefield of KYC compliance