Good question! So this is like US companies paying bribes. The employee handbook for my first job said that bribes could be paid in other countries if they are usual and customary. Bribes over a certain sum required executive authorization.

The US has now made paying bribes in other countries into US felonies. So now US companies do not pay bribes if they are sane.

So sure, an attacker could say "Go get some BTC and deposit it. Where do you get some? Not our problem." But then the executive in charge would have to choose between (1) committing a felony with jail time attached for him or (2) possibly going out of business and finding a new job. For sensible people, that's not really a choice.