Why KYC matters