KYC, AML and CFT are a way for companies to protect themselves from legal consequences. If the company engages in AML by selling tokens to the wrong person the company could be shut down, so they need to prove where funds are coming from and who has contributed or received tokens.