Most ICO scams use identifiers as well as fake addresses, so it is very difficult to find them to be punished. ICOs are not scam, they must comply with legal regulations in some areas.
at least we can take part in the ICO project which in that country must do a KYC especially for the teams that hold the ICO, to be safer and can guarantee that the ICO is official and has obtained permission from the government