Regulated firms fall short on monitoring existing clients