It doesn't matter whether or not referred users *can* do KYC.
That was *not* part of the original agreement.
Both parties need to follow the *original* agreement, right?
The thing is original agreement changed when SEC started chasing ICOs and crypto projects last year. Now you have to comply with SEC rules or risk getting cease and desist letter. I kinda understand your point, but what do you expect from them? To put whole project at risk just to pay some referrals? Lets be serious, they won't do that.