requesting verification it will on rare case as a fund came from hack wallet or something link this type if incident of illegal activate.
So basically just like other instant exchange services which usually end up with a false positive. It is highly risky for the users and most of the time they don't have any ability to appeal either. What is your policy regarding false positives? Will you just keep the user funds regardless of the mistake? What is the guarantee that you don't flag them on purpose?