There are laws which can be applied to ico scams. You may file estafa charges in your jurisdiction as long as the entity is within the powers of it. Otherwise good luck with filing those cases. They cannot be punished unless they are charged with cases.
I am not sure if we can do that so easily. First of all when an ICO comes out over the internet then we just see the superficial things about it and nothing else. If you see the ICO then they may or may not publish the address of their physical office, who knows that may not even exists out there. If there is no physical info then how would you go for filing the case? Just based on the website? How could anyone file complaints if thats the case. I guess it could be hard to digest if anything like that happens and if we get scammed. We have to move one! This is the way crypto works .. . .