KYC/AML for commodity desk vs. fintech?

Been thinking a lot about the divergence in KYC/AML requirements and operational burden between traditional commodity trading desks and newer fintech platforms, especially those dabbling in tokenized assets or even just fractional ownership of physical commodities. It feels like there's a significant gap in the regulatory frameworks. Are we seeing the same level of scrutiny on the origin of funds or beneficial ownership for a large institutional client on a physical crude oil deal as we do for a retail investor funding an account on a digital metals platform? It seems to me that the 'know your customer' part for the traditional guys often hinges on long-standing relationships and less on forensic document diving, while fintech has to be practically psychic about potential red flags from day one. Is this a fair assessment, or am I missing something crucial in how established desks are now navigating the increased AML pressure, particularly with the push towards greater transparency in trade finance?