Because after ICO Tokens Can be buy anyone without submitting any KYC
Totally confusing this process

KYC= Know Your Customer is one of the criteria signed by the ICO initiator companies during their registrations. Apart from the need to comply with the regulators, the companies need to stand clean before any jurisdiction. If the ICO is over, the whole burden of KYC is lifted off their shoulders and then to the exchanges.