First, they asked me for a new Bitcoin address, because their system does not allow them to send to the original one from which I sent coins, because it is "compromised".
I am happy for you, I am still not getting my coins
back from Godex.
Who determines this "risk score"?
They use some algorithms for this purpose There is a service called
Chainalysis and I know it's widely used by exchanges.