Adopting a Risk-Based Approach to KYC and AML Compliance