Well, I faced the same issue with the WhiteBit exchange. I send an Alt coin that I wanted to cash out and they requested to verify (?) both the sender's address and the recipient's address (the one I used to withdraw after the sale). I sent them an instant message to find out the reason for this, and they told me that they need to know for our protection...🙄🥱
Whitebit is probably the worst example of (mis)use of AML checks. There are numerous cases of complaints against them, and they were risky even before the AML euphoria, and it seems that this only gave them additional justification to manipulate transactions.
It is recommended to avoid them.
By the way, is it possible to tell us what happened after you got this reply from them? I mean, do you get your coins back? Did they blacklisted you? Did they let you continue without a problem?
It is a local exchange (certainly not Whitebit) mentioned above. I received a refund, the process took about a week.