Basically what you want is to off-ramp via entities that have to do due diligence so when you transfer from one entity to another entity, the secondary entity is reliant on the first entity doing it's job.
Where people go wrong is doing via non-entities (p2p) or questionable entities (say binance back in the day) where there are trust issues with the first entity carrying out it's required processes.
Now in some cases you have entities that are continuously moving through different financially licensed entities (i.e a branded processor swaps to a new financial entity frequently)
This is because they are cutting corners and their︀ transactions are being flagged... so they do the old switch a roo.
The end client︁ doesn't know but it basically appears like funds are coming from a new entity, and︂ the banks are unaware as everything looks normal, but eventually the entity doing the switch︃ a roo eventually has indictments and the user that was using said entity then has︄ a microscope looking at them, and every fellow user of that entity (like all Binance︅ users today).