Identity verification for all customers (KYC) - Enhanced due diligence for high-value or high-risk customers - Ongoing monitoring of customer activity - Record-keeping of all transactions (typically 5--7 years)