As for the refund - we can return ni23457's funds only once we've confirmed, once and for all, that we have the right to return them and that it won't land us in any legal trouble. We don't want any problems for ourselves.
Well the OP will rightfully not send you his ID or send you substitute surrogate ID and never make a video call for verification. That leaves the ball in your court.
It has been two months since you have been holding on to his funds. How much longer will it take for you to find out from Interpol, Europol and the other agencies you sent the OP dossier to about whether they will charge you with a crime for returning the same crypto back to the same address it was sent from?
What confirmation are you waiting for and from which international law enforcement agency?
How long will it take you to update you website to show the AML/KYC is mandatory when a customer tries to make a trade beyond a certain value?