Why is KYC / AML after deposit and not during?