You yourself answered your question if people forged and handed over fake documents to the quality of KYC and at the same time the project did not have any question to them. The KYC procedure itself does not solve the security problem as the projects claim, this procedure is a means of collecting information.