Exchanges do have whats called "Know your transaction" implemented.
You can think of it as an automatic system that checks the source of the funds. Did it come from a mixer? a gambling site? an address linked to a terrorist organization, or maybe a hack of another exchange? etc. Is it high risk? low risk? medium etc.