How are crypto firms vetting customers?