The Risk Alert seemed to take particular aim at broker-dealers, who have been "inadequate" in their AML compliance