Mostly the ICOs project that currently being developed, is obligated to have their investors KYC as the requirement from their country where the project was created. I think it is true that they need to submit the list of their investors KYC so either from the project and the country itself can trace the money that was used in the ICO, and in case something bad happens, so they can quickly process it.