I think you have to verify the identity of the users of your exchange or you can have lots of law isssues