Navigating AML flags for new crypto projects and evolving DeFi protocols

Been seeing a lot of discussion around the increasing scrutiny on AML for projects that have a strong DeFi component. Specifically, for new tokens or dApps launching, what are the most common red flags compliance teams are now actively looking for that might not have been on the radar even a year ago? Beyond the obvious mixer/privacy coin interaction, are there particular smart contract features or governance models that are starting to draw more attention from a regulatory standpoint? The landscape is shifting quickly, and getting ahead of potential issues is key.