Affiliate programs: KYC and AML regulations?

I've been thinking about this for a while and can't seem to find the answer. For companies that have affiliate programs (specifically those that pay you, not the ones that just give you a discount), what are the regulations that I should be aware of? My current understanding is that companies can't just send money to random people due to AML, so are affiliates always companies? Or am I missing something else? Also, if anyone has good resources for how to set it all up, that would be great.