Regulated firms exposed to serious red flags without new business verification checks