It's not Google's fault per se.
They can't check ALL ads to make sure they're legit and don't lead to malware.
If this spate of phishing continues I reckon they'll go the way of Facebook and just ban all crypto ads altogether.