I recently had, twice, to do stuff WAY more intrusive. Video/conf call, need to hold my passport, need to have my phone on hand... People on the other side would call me on my phone to verify it's my number and they'd also send me a SMS with a code to verify on that phone.

After that they have: my face, copy of my passport, my voice, my phone number, my IP (unless I'm really going out of my way to obfuscate it), my email, etc.

Once I did this, then the series of documents to sign using Docusign came in.

That was the most serious KYC/AML I've ever seen.

I don't like it much but I gotta say: I can definitely see how it raises the bar for would be scammers/impersonators.