Just apply the current laws.

If an ICO is a scam or are breaking the law then they should suffer the consequence. No additional regulations need to be created.