I no AML/KYC expert but I have written software systems for fraud purposes before and with that in mind such systems, founded in data collection, are used every hour of every day to link people to activities, legal or not. Given the prolific prosecutorial proof available online as it relates to the value of "who took the money", "who was paid", "who has the money" in such legal cases clearly the institutions tasked with 'security' see a great threat in not being able to follow it.