Bank Secrecy Act compliance is often discussed as a problem of scale. Large institutions are assumed to be riskier because of complexity.