Financial institutions have been locked out of the cannabis industry because of a surveillance regime that appears to have done little to stop real criminals.