There’s a thing called know you customer (KYC) law. You can in fact be held liable if you can’t prove you sufficiently vetted a customer before engaging in a transaction with them. Saying that you’re right there’s only so much they can do after vetting.