It's the same problem compliance departments at financial institutions face.

Compliance, by definition is bad for business. They will, after all, try to crack down on doing business with criminals, shady oligarchs or - dodgy dictators, which can be highly profitable.

In the end, though, the best working banks are those where compliance has real teeth.