Mtgox said they spent 25mil to become fully compliant, I think mtgox itself is a registered msb and has gone through great lengths to properly verify people's identity per the aml requirements.