Law firms ignorant of money-laundering risks