IF you must do kyc, it must be at account creation.

@marlboroza I'm not aware of the specifics when it comes to AML laws (as that side of things is handled by other teams), but since most jurisdictions have similar laws i'd assume we make the effort to conform to as many as possible. The amount of money involved isn't the issue, if there's a deposit followed by a withdraw request without any activity then we have to ask for KYC.