Do you have any deeper protections than simply not selling to filers? It doesn’t seem so hard for a motivated filer to circumvent by using friendly hedgefunds to lend their licenses.
We constantly retrain our red flag models and they are tested for robustness (whichever way the company decides to express the existence of a risk, like say an investigation, we ensure that the models pick it up)