remember, that they have to be sure that YOU are YOU and not someone else (same as the banks).
The information I provide to them (scanned documents, answers to their stupid KYC questions) are not evidence that really I am contacting them.
Anyone can make fake passport scan with my details, anyone can answer the stupid questions, anyone can make fake scans of my company's documents.
These "AML/KYC" regulations actually make easy for criminals to commit identity theft - every low level "customer support" employee on some shitty Forex broker, gambling site or web hosting company (even some web hosting companies require scan of the identity documents!) can just use the documents of unsuspecting "customer" to open a bank account, register company, etc.
Also the dark markets are full of scans of documents, maybe even my scans are there.