Actually know your customers. Like real banks do. Relying on a free text description on the payment is completely useless.
For example:
Chase Bank blocks California man’s online payment over service dog’s ‘terrorist’ name
https://www.nydailynews.com/life-style/chase-bank-blocks-onl...
These stories are really common. Usually a phone call fixes it.
Also…how would KYC stop a terrorist from abusing your mothers bank account to transfer money?
This is why you need KYC and also transaction screening (and also X, Y and Z).