Why are exchanges doing this after the user has engaged in business activities?  This behavior is very "bait and switch" like, get the users' funds whom you do not know in the first place and then make an arbitrary accusation putting the onus of exoneration on the victim.  Would it not be proper legal practice to request this information before any funds transfer takes place?  Can you provide intelligent explanation why you would do this this way and not sound like a thief?