Regulated firms must find out enough about the client and why the transaction is happening; verify client identity (for example an identity document and proof of address); respond proportionately to identified risks, including client and customer checks; apply enhanced due diligence where the risk is higher (for example where payment for real estate is requested in digital assets), including the source of funds; rely on third parties only with appropriate confidence in their information, keeping ultimate responsibility; examine the supply chain; and carry out proportionate customer due diligence when receiving funds, including their own fees.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.