The moment you move money you inherit identity checks, sanctions screening, and transaction monitoring, none of it optional. The hard part is the false-positive line: keeping real customers in while keeping bad actors out, and proving every decision later.
