That seems like an entirely reasonable response in isolation. Sometimes you write new software and find it just doesn't work in production. Were they not doing anything else to prevent money laundering?