Web3 exchanges often require sensitive personal and financial data during signup, making users vulnerable to data theft through phishing or social engineering. Attackers can exploit stolen credentials to steal funds or engage in fraudulent transactions, or money laundering in the Off-Ramp phase.